e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0xe803000000000000, 0x0, 0x0) 05:43:49 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:43:49 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:49 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0xf401000000000000, 0x0, 0x0) 05:43:49 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0xfeff000000000000, 0x0, 0x0) 05:43:49 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 368.930301][ T3793] usb 6-1: new high-speed USB device number 25 using dummy_hcd 05:43:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0xffffffff00000000, 0x0, 0x0) 05:43:49 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 369.079192][ T17] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 369.179309][ T2651] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 369.179340][ T3793] usb 6-1: Using ep0 maxpacket: 8 [ 369.339196][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 369.352433][ T3793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 369.369845][ T3793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.380801][ T3793] usb 6-1: config 0 has no interface number 0 [ 369.386900][ T3793] usb 6-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 369.399078][ T3793] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.413374][ T3793] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 369.423331][ T3793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.429201][ T2651] usb 5-1: Using ep0 maxpacket: 8 [ 369.439859][ T3793] usb 6-1: config 0 descriptor?? [ 369.462207][ T17] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 369.474144][ T17] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.488340][ T17] usb 1-1: config 0 has no interface number 0 [ 369.496022][ T3793] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 369.496054][ T17] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 369.521756][ T17] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 369.532854][ T17] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.547052][ T17] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 369.556838][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.565765][ T2651] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 369.574298][ T2651] usb 5-1: config 0 has no interface number 0 [ 369.582646][ T17] usb 1-1: config 0 descriptor?? [ 369.587986][ T2651] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 369.603952][T13505] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 369.611454][ T2651] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 369.622379][ T2651] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 369.632847][ T2651] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 369.645957][ T2651] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 369.655918][ T2651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.668876][ T2651] usb 5-1: config 0 descriptor?? [ 369.679304][ T17] usb 1-1: invalid MIDI in EP 0 [ 369.685078][ T17] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 369.701601][ T3793] usb 6-1: USB disconnect, device number 25 [ 369.716475][T13514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 369.770329][ T2651] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 369.854626][ T2521] usb 1-1: USB disconnect, device number 43 [ 369.938387][ T2651] usb 5-1: USB disconnect, device number 46 05:43:50 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0xffffffffffffffff, 0x0, 0x0) 05:43:50 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:50 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:43:50 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:51 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x2) 05:43:51 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:51 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 370.549106][ T2708] usb 6-1: new high-speed USB device number 26 using dummy_hcd 05:43:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x4) 05:43:51 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x5) [ 370.699291][ T17] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 370.789066][ T2708] usb 6-1: Using ep0 maxpacket: 8 [ 370.799800][ T2521] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 370.929181][ T2708] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.937408][ T2708] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.969007][ T2708] usb 6-1: config 0 has no interface number 0 [ 370.969069][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 370.975149][ T2708] usb 6-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 370.975168][ T2708] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.975195][ T2708] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 371.015949][ T2708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.026156][ T2708] usb 6-1: config 0 descriptor?? [ 371.079040][ T2521] usb 5-1: Using ep0 maxpacket: 8 [ 371.099500][ T17] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 371.100801][ T2708] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 371.107535][ T17] usb 1-1: config 0 has no interface number 0 [ 371.121191][ T17] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 371.132904][ T17] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 371.143460][ T17] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 371.154709][ T17] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 371.163934][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.176789][ T17] usb 1-1: config 0 descriptor?? [ 371.199583][T13582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 371.209537][ T2521] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 371.217555][ T2521] usb 5-1: config 0 has no interface number 0 [ 371.227156][ T2521] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 371.242469][ T2521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 371.256211][ T2521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 371.259284][ T17] usb 1-1: invalid MIDI in EP 0 [ 371.266915][ T2521] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 371.277934][ T17] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 371.285256][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.296583][ T2521] usb 5-1: config 0 descriptor?? [ 371.319499][T13590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 371.328814][T13590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 371.330969][ T8485] usb 6-1: USB disconnect, device number 26 [ 371.767652][ T2521] usb 1-1: USB disconnect, device number 44 05:43:52 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:52 executing program 1: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x7) 05:43:52 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 372.073528][ T2521] usb 5-1: USB disconnect, device number 47 [ 372.169057][ T3793] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 372.199872][ T2708] usb 6-1: new high-speed USB device number 27 using dummy_hcd 05:43:52 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 372.429019][ T3793] usb 4-1: Using ep0 maxpacket: 8 [ 372.440175][ T2708] usb 6-1: Using ep0 maxpacket: 8 05:43:53 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x9) 05:43:53 executing program 1: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 372.550208][ T3793] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 372.558292][ T3793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.570132][ T2708] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 372.587484][ T3793] usb 4-1: config 0 has no interface number 0 [ 372.599070][ T5] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 372.619351][ T2708] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.637397][ T3793] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping 05:43:53 executing program 1: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 372.660700][ T2708] usb 6-1: config 0 has no interface number 0 [ 372.679107][ T2708] usb 6-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 372.695580][ T3793] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 05:43:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xa) [ 372.721396][ T2708] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.736999][ T3793] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 05:43:53 executing program 1: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe) [ 372.767902][ T3793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.777032][ T2708] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 372.799755][ T2708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.810978][ T3793] usb 4-1: config 0 descriptor?? [ 372.848982][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 372.855680][ T3793] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 372.868499][ T2708] usb 6-1: config 0 descriptor?? [ 372.930699][ T2708] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 372.999930][ T5] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.007951][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.039196][ T5] usb 1-1: config 0 has no interface number 0 [ 373.045486][ T5] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 373.095549][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 373.111447][ T5] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.125336][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 373.143259][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.168235][ T2708] usb 4-1: USB disconnect, device number 15 [ 373.174375][ T2504] usb 6-1: USB disconnect, device number 27 [ 373.180996][ T5] usb 1-1: config 0 descriptor?? [ 373.211831][T13685] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 373.269413][ T5] usb 1-1: invalid MIDI in EP 0 [ 373.275345][ T5] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 373.309032][ T2521] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 373.442611][ T2708] usb 1-1: USB disconnect, device number 45 [ 373.578952][ T2521] usb 5-1: Using ep0 maxpacket: 8 05:43:54 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:54 executing program 1: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xf) 05:43:54 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 373.715410][ T2521] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.724454][ T2521] usb 5-1: config 0 has no interface number 0 [ 373.768174][ T2521] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 373.811841][ T2521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 373.827072][ T2521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 373.848227][ T2521] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 373.874728][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.895458][ T2521] usb 5-1: config 0 descriptor?? 05:43:54 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 373.919430][T13693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 373.926622][T13693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 374.038925][ T17] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 374.268966][ T2504] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 374.280098][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 374.399061][ T17] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 374.407113][ T17] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.422713][ T17] usb 6-1: config 0 has no interface number 0 [ 374.429638][ T17] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 374.441436][ T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 374.452142][ T17] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.465585][ T17] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 374.475220][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.484633][ T17] usb 6-1: config 0 descriptor?? [ 374.508962][ T2504] usb 1-1: Using ep0 maxpacket: 8 [ 374.509269][T13753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 374.569113][ T17] usb 6-1: invalid MIDI in EP 0 [ 374.574598][ T17] snd-usb-audio: probe of 6-1:0.2 failed with error -12 [ 374.635935][ T17] usb 5-1: USB disconnect, device number 48 [ 374.653934][ T2504] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 374.669155][ T2504] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.689745][ T2504] usb 1-1: config 0 has no interface number 0 [ 374.700273][ T2504] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 374.713505][ T2504] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 374.723936][ T2504] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.759131][ T2504] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 374.768195][ T2504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.780620][ T2521] usb 6-1: USB disconnect, device number 28 [ 374.788118][ T2504] usb 1-1: config 0 descriptor?? [ 374.819366][T13763] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 374.900392][ T2504] usb 1-1: invalid MIDI in EP 0 [ 374.905755][ T2504] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 375.058228][ T17] usb 1-1: USB disconnect, device number 46 05:43:55 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:55 executing program 1: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x10) 05:43:55 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:55 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x11) 05:43:55 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:55 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x34) 05:43:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x1f4) 05:43:56 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 375.479645][ T2521] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 375.498950][ T2504] usb 5-1: new high-speed USB device number 49 using dummy_hcd 05:43:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x240) [ 375.608853][ T2708] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 375.748917][ T2521] usb 4-1: Using ep0 maxpacket: 8 [ 375.768808][ T2504] usb 5-1: Using ep0 maxpacket: 8 [ 375.888906][ T2521] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 375.897053][ T2708] usb 6-1: Using ep0 maxpacket: 8 [ 375.902216][ T2521] usb 4-1: config 0 has no interface number 0 [ 375.908284][ T2521] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 375.919424][ T2504] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 375.927414][ T2504] usb 5-1: config 0 has no interface number 0 [ 375.934184][ T2521] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 375.944924][ T2504] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 375.956574][ T2521] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 375.967157][ T2504] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 375.977778][ T2521] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 375.987576][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.997983][ T2504] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 376.008488][ T2504] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 376.018508][ T2504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.027063][ T2521] usb 4-1: config 0 descriptor?? [ 376.032273][ T2708] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 376.044352][ T2708] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.057317][ T2708] usb 6-1: config 0 has no interface number 0 [ 376.064625][T13825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.072579][T13825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.075564][ T2504] usb 5-1: config 0 descriptor?? [ 376.088631][ T2708] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 376.102833][T13830] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.108244][ T2708] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 376.120960][ T2708] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.124610][T13830] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.134853][ T2708] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 376.191327][ T2708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.239862][ T2708] usb 6-1: config 0 descriptor?? [ 376.269177][T13838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.329015][ T2708] usb 6-1: invalid MIDI in EP 0 [ 376.334798][ T2708] snd-usb-audio: probe of 6-1:0.2 failed with error -12 [ 376.859354][ T17] usb 5-1: USB disconnect, device number 49 [ 376.876335][ T2651] usb 6-1: USB disconnect, device number 29 [ 377.071471][ T3793] usb 4-1: USB disconnect, device number 16 05:43:57 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:57 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x3e8) 05:43:58 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x500) 05:43:58 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:58 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:58 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 377.678768][ T3793] usb 1-1: new high-speed USB device number 47 using dummy_hcd 05:43:58 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x700) 05:43:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x900) 05:43:58 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:43:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xa00) [ 377.924952][ T2504] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 377.928649][ T2651] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 377.941859][ T17] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 377.959945][ T3793] usb 1-1: Using ep0 maxpacket: 8 [ 378.078924][ T3793] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 378.086996][ T3793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.118868][ T3793] usb 1-1: config 0 has no interface number 0 [ 378.125006][ T3793] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 378.148767][ T3793] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 378.168735][ T3793] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.182382][ T2504] usb 5-1: Using ep0 maxpacket: 8 [ 378.188956][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 378.202715][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 378.209337][ T3793] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 378.218365][ T3793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.239891][ T3793] usb 1-1: config 0 descriptor?? [ 378.259146][T13949] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 378.299613][ T2504] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 378.307651][ T2504] usb 5-1: config 0 has no interface number 0 [ 378.309015][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 378.319490][ T2504] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 378.328811][ T2651] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 378.334371][ T3793] usb 1-1: invalid MIDI in EP 0 [ 378.346759][ T3793] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 378.357965][ T2651] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.378689][ T17] usb 4-1: config 0 has no interface number 0 [ 378.396234][ T2504] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 378.398454][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 378.421168][ T2504] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 378.426758][ T2651] usb 6-1: config 0 has no interface number 0 [ 378.432692][ T2504] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 378.447174][ T2651] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 378.447182][ T2504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.454857][ T2504] usb 5-1: config 0 descriptor?? [ 378.465123][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 378.498986][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 378.502508][ T3793] usb 1-1: USB disconnect, device number 47 [ 378.509375][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 378.518966][T13966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 378.525229][ T2651] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.545109][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 378.563316][T13966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 378.570626][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.579278][ T2651] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 378.588317][ T2651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.602030][ T17] usb 4-1: config 0 descriptor?? [ 378.620952][T13971] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 378.627915][T13971] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 378.638894][ T2651] usb 6-1: config 0 descriptor?? [ 378.659317][T13967] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 378.759000][ T2651] usb 6-1: invalid MIDI in EP 0 [ 378.764835][ T2651] snd-usb-audio: probe of 6-1:0.2 failed with error -12 05:43:59 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:43:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xa36) [ 379.230202][ T2521] usb 5-1: USB disconnect, device number 50 [ 379.263893][ T2504] usb 4-1: USB disconnect, device number 17 [ 379.312411][ T2651] usb 6-1: USB disconnect, device number 30 [ 379.320041][ T3793] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 379.568564][ T3793] usb 1-1: Using ep0 maxpacket: 8 [ 379.688932][ T3793] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 379.697038][ T3793] usb 1-1: config 0 has no interface number 0 [ 379.704402][ T3793] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 379.716219][ T3793] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 379.726737][ T3793] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.749567][ T3793] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 379.778600][ T3793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:44:00 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe00) 05:44:00 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 379.792585][ T3793] usb 1-1: config 0 descriptor?? 05:44:00 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:00 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:00 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 379.818995][T14044] raw-gadget gadget: fail, usb_ep_enable returned -22 05:44:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xf00) [ 379.888823][ T3793] usb 1-1: invalid MIDI in EP 0 [ 379.894598][ T3793] snd-usb-audio: probe of 1-1:0.2 failed with error -12 05:44:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x1100) 05:44:00 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x3400) [ 380.062579][ T5] usb 1-1: USB disconnect, device number 48 [ 380.140171][ T2521] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 380.149341][ T2504] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 380.179134][ T3793] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 380.388579][ T2521] usb 5-1: Using ep0 maxpacket: 8 [ 380.393750][ T2504] usb 4-1: Using ep0 maxpacket: 8 [ 380.468672][ T3793] usb 6-1: Using ep0 maxpacket: 8 [ 380.509247][ T2521] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 380.517278][ T2521] usb 5-1: config 0 has no interface number 0 [ 380.529023][ T2504] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 380.537030][ T2504] usb 4-1: config 0 has no interface number 0 [ 380.548692][ T2521] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 380.561258][ T2504] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 380.598421][ T2521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 05:44:01 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:01 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x360a) [ 380.609579][ T3793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 380.620570][ T3793] usb 6-1: config 0 has no interface number 0 [ 380.626684][ T3793] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 380.641105][ T2504] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 380.656731][ T2521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 380.679904][ T2504] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 380.699656][ T2521] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 380.712859][ T3793] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 380.738728][ T2504] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 05:44:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x4002) [ 380.755472][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.767103][ T3793] usb 6-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 380.781600][ T2504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.808701][ T2521] usb 5-1: config 0 descriptor?? [ 380.819467][ T3793] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 380.835054][ T2504] usb 4-1: config 0 descriptor?? [ 380.845350][ T3793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.858984][T14094] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 380.859663][T14091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 380.870697][T14094] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 380.890067][ T3793] usb 6-1: config 0 descriptor?? [ 380.893767][T14091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 380.928971][T14098] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 381.068916][ T3793] usb 6-1: invalid MIDI in EP 0 [ 381.075744][ T3793] snd-usb-audio: probe of 6-1:0.2 failed with error -12 [ 381.208638][ T5] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 381.468513][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 381.503494][ T8485] usb 5-1: USB disconnect, device number 51 [ 381.523715][ T2651] usb 4-1: USB disconnect, device number 18 [ 381.598951][ T5] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 381.613268][ T5] usb 1-1: config 0 has no interface number 0 [ 381.624020][ T5] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 381.645687][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 381.656571][ T5] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.660915][ T17] usb 6-1: USB disconnect, device number 31 [ 381.673606][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 381.698676][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.715921][ T5] usb 1-1: config 0 descriptor?? [ 381.738985][T14142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 381.798829][ T5] usb 1-1: invalid MIDI in EP 0 [ 381.804585][ T5] snd-usb-audio: probe of 1-1:0.2 failed with error -12 05:44:02 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 381.965621][ T5] usb 1-1: USB disconnect, device number 49 05:44:02 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x6166) 05:44:02 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:02 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x6661) 05:44:02 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 382.318526][ T17] usb 5-1: new high-speed USB device number 52 using dummy_hcd 05:44:02 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:03 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x75b1) 05:44:03 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 382.488463][ T8485] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 382.498749][ T2651] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 382.558544][ T17] usb 5-1: Using ep0 maxpacket: 8 05:44:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xb175) [ 382.678720][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 382.686767][ T17] usb 5-1: config 0 has no interface number 0 [ 382.708584][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 382.738513][ T8485] usb 4-1: Using ep0 maxpacket: 8 [ 382.743625][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 382.755349][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 382.767341][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 382.799213][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 382.817147][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.830964][ T17] usb 5-1: config 0 descriptor?? [ 382.848834][T14229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 382.855822][T14229] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 382.864284][ T8485] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 382.871114][ T3793] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 382.874419][ T8485] usb 4-1: config 0 has no interface number 0 [ 382.888765][ T2651] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 382.896762][ T2651] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.910630][ T8485] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 382.924757][ T2651] usb 6-1: config 0 has no interface number 0 [ 382.933324][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 382.957733][ T2651] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 382.970001][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 382.980741][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 383.008618][ T8485] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 383.017668][ T8485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.032239][ T2651] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.069744][ T2651] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 383.080195][ T8485] usb 4-1: config 0 descriptor?? [ 383.098242][ T2651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.111388][T14241] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 383.129156][T14241] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 383.142218][ T2651] usb 6-1: config 0 descriptor?? [ 383.158843][T14244] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 383.168521][ T3793] usb 1-1: Using ep0 maxpacket: 8 [ 383.248826][ T2651] usb 6-1: invalid MIDI in EP 0 [ 383.254837][ T2651] snd-usb-audio: probe of 6-1:0.2 failed with error -12 [ 383.309588][ T3793] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 383.317624][ T3793] usb 1-1: config 0 has no interface number 0 [ 383.332630][ T3793] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 383.344462][ T3793] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 383.367288][ T3793] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.389955][ T3793] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 383.400306][ T3793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.418581][ T3793] usb 1-1: config 0 descriptor?? [ 383.448002][ T2651] usb 5-1: USB disconnect, device number 52 [ 383.458793][T14265] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 383.470641][ T2521] usb 4-1: USB disconnect, device number 19 [ 383.531153][ T2480] usb 6-1: USB disconnect, device number 32 [ 383.560452][ T3793] usb 1-1: invalid MIDI in EP 0 [ 383.601913][ T3793] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 383.726723][ T3793] usb 1-1: USB disconnect, device number 50 05:44:04 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:04 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe803) 05:44:04 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:04 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:04 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xf401) 05:44:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xfeff) 05:44:04 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:44:04 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xfffe) [ 384.258362][ T3793] usb 5-1: new high-speed USB device number 53 using dummy_hcd 05:44:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x48ea2) [ 384.378391][ T2521] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 384.389387][ T2651] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 384.508398][ T3793] usb 5-1: Using ep0 maxpacket: 8 [ 384.598837][ T2504] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 384.628458][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 384.628751][ T2521] usb 4-1: Using ep0 maxpacket: 8 [ 384.639218][ T3793] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 384.651219][ T3793] usb 5-1: config 0 has no interface number 0 [ 384.658938][ T3793] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 384.670390][ T3793] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 384.680981][ T3793] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 384.691542][ T3793] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 384.703157][ T3793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.713129][ T3793] usb 5-1: config 0 descriptor?? [ 384.738997][T14355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 384.746011][T14355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 384.748679][ T2651] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 384.771120][ T2651] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.787649][ T2651] usb 6-1: config 0 has no interface number 0 [ 384.796663][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 384.798967][ T2521] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 384.813985][ T2651] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.844094][ T2651] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 384.857642][ T2521] usb 4-1: config 0 has no interface number 0 [ 384.859706][ T2651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.864183][ T2504] usb 1-1: Using ep0 maxpacket: 8 [ 384.881736][ T2521] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 384.910932][ T2521] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 384.914977][ T2651] usb 6-1: config 0 descriptor?? [ 384.926874][ T2521] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 384.967416][ T2521] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 384.971426][T14368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 385.008946][ T2504] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 385.016971][ T2504] usb 1-1: config 0 has no interface number 0 [ 385.045976][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.061180][ T2504] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 385.068549][ T2651] usb 6-1: invalid MIDI in EP 0 [ 385.076402][ T2521] usb 4-1: config 0 descriptor?? [ 385.086525][ T2504] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 385.099159][ T2504] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 385.109506][ T2651] snd-usb-audio: probe of 6-1:0.2 failed with error -12 [ 385.114438][ T2504] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 385.126438][T14364] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 385.140475][T14364] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 385.153442][ T2504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.165524][ T2504] usb 1-1: config 0 descriptor?? [ 385.198808][T14382] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 385.279510][ T2504] usb 1-1: invalid MIDI in EP 0 [ 385.285153][ T2504] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 385.338993][ T2521] usb 5-1: USB disconnect, device number 53 [ 385.449226][ T3793] usb 1-1: USB disconnect, device number 51 [ 385.581833][ T2480] usb 6-1: USB disconnect, device number 33 [ 385.769788][ T3793] usb 4-1: USB disconnect, device number 20 05:44:06 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:06 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x142800) 05:44:06 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 386.148338][ T2480] usb 5-1: new high-speed USB device number 54 using dummy_hcd 05:44:06 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x281400) 05:44:06 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:44:06 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x800000) [ 386.393971][ T2480] usb 5-1: Using ep0 maxpacket: 8 05:44:07 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x1000000) [ 386.428812][ T3793] usb 6-1: new high-speed USB device number 34 using dummy_hcd 05:44:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x2000000) [ 386.528352][ T2480] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 386.539997][ T2480] usb 5-1: config 0 has no interface number 0 [ 386.554874][ T2480] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 386.588483][ T2521] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 386.597941][ T2480] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 386.610069][ T2504] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 386.638147][ T2480] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 386.668389][ T2480] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 386.677704][ T2480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.688292][ T3793] usb 6-1: Using ep0 maxpacket: 8 [ 386.709439][ T2480] usb 5-1: config 0 descriptor?? [ 386.728766][T14486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 386.735838][T14486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 386.808676][ T3793] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 386.829497][ T2521] usb 1-1: Using ep0 maxpacket: 8 [ 386.835962][ T3793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.855379][ T3793] usb 6-1: config 0 has no interface number 0 [ 386.863486][ T3793] usb 6-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 386.878832][ T2504] usb 4-1: Using ep0 maxpacket: 8 [ 386.886307][ T3793] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.907491][ T3793] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 386.923500][ T3793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.956420][ T3793] usb 6-1: config 0 descriptor?? [ 386.978563][ T2521] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 386.987952][ T2521] usb 1-1: config 0 has no interface number 0 [ 387.019177][ T2504] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 387.028906][ T2521] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 387.041893][ T3793] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 387.048948][ T2504] usb 4-1: config 0 has no interface number 0 [ 387.073566][ T2504] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 387.092957][ T2521] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 387.112317][ T2504] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 387.133857][ T2521] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 387.144817][ T2504] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 387.156173][ T2521] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 387.165540][ T2504] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 387.175396][ T2521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.185006][ T2504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.194512][ T2521] usb 1-1: config 0 descriptor?? [ 387.212118][ T2504] usb 4-1: config 0 descriptor?? [ 387.228772][T14504] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 387.236403][T14509] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 387.299319][ T2521] usb 1-1: invalid MIDI in EP 0 [ 387.315902][ T2521] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 387.332346][ T2521] usb 5-1: USB disconnect, device number 54 [ 387.338691][ T2504] usb 4-1: invalid MIDI in EP 0 [ 387.344012][ T2504] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 387.441754][ T2504] usb 6-1: USB disconnect, device number 34 [ 387.463843][ T3790] usb 1-1: USB disconnect, device number 52 [ 387.543848][ T3793] usb 4-1: USB disconnect, device number 21 05:44:08 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:08 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x4000000) 05:44:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x5000000) 05:44:08 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:08 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:08 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:44:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x7000000) 05:44:08 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 388.148269][ T3793] usb 5-1: new high-speed USB device number 55 using dummy_hcd 05:44:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x9000000) 05:44:08 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:08 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 388.418249][ T3793] usb 5-1: Using ep0 maxpacket: 8 [ 388.446330][ T2651] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 388.454053][ T2480] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 388.493971][ T3790] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 388.568317][ T3793] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 388.576335][ T3793] usb 5-1: config 0 has no interface number 0 [ 388.601792][ T3793] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 388.638106][ T3793] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 388.648026][ T3793] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 388.668251][ T3793] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 388.677505][ T3793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.699466][ T3793] usb 5-1: config 0 descriptor?? [ 388.703394][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 388.709791][ T2651] usb 1-1: Using ep0 maxpacket: 8 [ 388.718822][T14603] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 388.725804][T14603] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 388.755904][ T3790] usb 4-1: Using ep0 maxpacket: 8 [ 388.828680][ T2651] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 388.836696][ T2651] usb 1-1: config 0 has no interface number 0 [ 388.843236][ T2480] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 388.858117][ T2480] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.878275][ T2651] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 388.890007][ T2480] usb 6-1: config 0 has no interface number 0 [ 388.896097][ T2480] usb 6-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 388.908464][ T2651] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 388.916081][ T3790] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 388.920031][ T2480] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.926842][ T3790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.944925][ T2651] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 388.955027][ T3790] usb 4-1: config 0 has no interface number 0 [ 388.962410][ T2651] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 388.988829][ T2480] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 388.999579][ T3790] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 389.019391][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.027548][ T2651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.055544][ T3790] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 389.059541][ T2480] usb 6-1: config 0 descriptor?? [ 389.089586][ T2651] usb 1-1: config 0 descriptor?? [ 389.107860][ T3790] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.121412][T14622] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 389.137254][ T3790] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 389.155174][ T3790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.174399][ T3790] usb 4-1: config 0 descriptor?? [ 389.178393][ T2651] usb 1-1: invalid MIDI in EP 0 [ 389.184909][ T2480] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 389.204792][T14628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 389.208147][ T2651] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 389.280040][ T3790] usb 4-1: invalid MIDI in EP 0 [ 389.285467][ T3790] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 389.311949][ T2651] usb 5-1: USB disconnect, device number 55 [ 389.358286][ T3790] usb 6-1: USB disconnect, device number 35 [ 389.365022][ T2480] usb 1-1: USB disconnect, device number 53 [ 389.463241][ T3793] usb 4-1: USB disconnect, device number 22 05:44:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xa000000) 05:44:10 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:10 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:10 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:10 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:10 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:44:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe000000) 05:44:10 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:10 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 05:44:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xf000000) 05:44:10 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 05:44:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x10000000) 05:44:10 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 390.198152][ T17] usb 5-1: new high-speed USB device number 56 using dummy_hcd 05:44:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x11000000) [ 390.278430][ T3793] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 390.298390][ T2480] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 390.358293][ T3790] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 390.438136][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 390.548153][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 390.564330][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.568180][ T3793] usb 1-1: Using ep0 maxpacket: 8 [ 390.572928][ T17] usb 5-1: config 0 has no interface number 0 [ 390.593574][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 390.618215][ T3790] usb 4-1: Using ep0 maxpacket: 8 [ 390.623737][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 390.637137][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 390.648412][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 390.657540][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.668410][ T2480] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.676919][ T17] usb 5-1: config 0 descriptor?? [ 390.682199][ T2480] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.708384][ T2480] usb 6-1: config 0 has no interface number 0 [ 390.708498][ T3793] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.714582][ T2480] usb 6-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 390.736516][T14714] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 390.738584][ T3793] usb 1-1: config 0 has no interface number 0 [ 390.744573][T14714] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 390.753458][ T3793] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 390.757293][ T2480] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.773016][ T3790] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.781968][ T2480] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 390.793900][ T3790] usb 4-1: config 0 has no interface number 0 [ 390.800580][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.807838][ T3793] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 390.814210][ T2480] usb 6-1: config 0 descriptor?? [ 390.857909][ T3790] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 390.869583][ T2480] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 390.881613][ T3793] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 390.900747][ T3790] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 390.926884][ T3793] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 390.940813][ T3790] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 390.978033][ T3793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.006732][ T3790] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 391.028651][ T3793] usb 1-1: config 0 descriptor?? [ 391.046644][ T3790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.055880][T14725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 391.098943][ T3790] usb 4-1: config 0 descriptor?? [ 391.118527][T14735] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 391.125486][T14735] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 391.132886][ T3793] usb 1-1: invalid MIDI in EP 0 [ 391.144436][ T3793] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 391.332198][ T3790] usb 5-1: USB disconnect, device number 56 [ 391.338924][ T17] usb 1-1: USB disconnect, device number 54 [ 391.565081][ T2480] usb 6-1: USB disconnect, device number 36 [ 391.759230][ T2521] usb 4-1: USB disconnect, device number 23 05:44:12 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:44:12 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:44:12 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x34000000) 05:44:12 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 392.168010][ T2480] usb 1-1: new high-speed USB device number 55 using dummy_hcd 05:44:12 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:12 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:44:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x360a0000) 05:44:13 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:44:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x40020000) [ 392.398143][ T17] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 392.403275][ T2521] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 392.407969][ T2480] usb 1-1: Using ep0 maxpacket: 8 05:44:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x66610000) 05:44:13 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) [ 392.548336][ T2480] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 392.556394][ T2480] usb 1-1: config 0 has no interface number 0 [ 392.580459][ T2480] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 392.597953][ T8485] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 392.613753][ T2480] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 392.651686][ T2480] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 392.663046][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 392.668210][ T2521] usb 5-1: Using ep0 maxpacket: 8 [ 392.684670][ T2480] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 392.700872][ T2480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.714030][ T2480] usb 1-1: config 0 descriptor?? [ 392.748381][T14850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 392.798335][ T2480] usb 1-1: invalid MIDI in EP 0 [ 392.803339][ T17] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 392.812369][ T2480] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 392.818014][ T2521] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 392.819417][ T17] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.827342][ T2521] usb 5-1: config 0 has no interface number 0 [ 392.827383][ T2521] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 392.840359][ T17] usb 6-1: config 0 has no interface number 0 [ 392.860037][ T2521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 392.860911][ T8485] usb 4-1: Using ep0 maxpacket: 8 [ 392.872353][ T2521] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 392.881668][ T17] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 392.887673][ T2521] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 392.904118][ T17] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 392.908034][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.916844][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.930212][ T2521] usb 5-1: config 0 descriptor?? [ 392.954836][ T17] usb 6-1: config 0 descriptor?? [ 392.958291][T14861] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 392.970176][T14861] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 392.983017][ T2480] usb 1-1: USB disconnect, device number 55 [ 393.018332][ T8485] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 393.026349][ T8485] usb 4-1: config 0 has no interface number 0 [ 393.044462][ T8485] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 393.064504][ T17] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 393.073958][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 393.091700][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 393.145387][ T8485] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 393.174610][ T8485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.213704][ T8485] usb 4-1: config 0 descriptor?? [ 393.238516][T14878] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 393.247808][T14878] raw-gadget gadget: fail, usb_ep_enable returned -22 05:44:14 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:44:14 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) [ 393.528494][ T2521] usb 6-1: USB disconnect, device number 37 [ 393.858050][ T3790] usb 1-1: new high-speed USB device number 56 using dummy_hcd 05:44:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xa28e0400) 05:44:14 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) [ 394.044255][ T2504] usb 5-1: USB disconnect, device number 57 [ 394.127966][ T3790] usb 1-1: Using ep0 maxpacket: 8 [ 394.254113][ T3790] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 394.281369][ T3790] usb 1-1: config 0 has no interface number 0 [ 394.314640][ T3790] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 394.333856][ T3790] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 394.355772][ T3790] usb 1-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 394.366561][ T3790] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 394.388360][ T3790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.397487][ T3790] usb 1-1: config 0 descriptor?? [ 394.410617][ T2504] usb 4-1: USB disconnect, device number 24 [ 394.428396][T14952] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 394.488320][ T3790] usb 1-1: invalid MIDI in EP 0 [ 394.493958][ T3790] snd-usb-audio: probe of 1-1:0.2 failed with error -12 05:44:15 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 394.654547][ T2480] usb 1-1: USB disconnect, device number 56 05:44:15 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:15 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902240001000000000904020002"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xb1750000) [ 394.867884][ T8485] usb 5-1: new high-speed USB device number 58 using dummy_hcd 05:44:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe4feffff) 05:44:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe8030000) [ 395.107848][ T8485] usb 5-1: Using ep0 maxpacket: 8 05:44:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xf4010000) [ 395.152780][ T2504] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 395.178802][ T3790] usb 6-1: new high-speed USB device number 38 using dummy_hcd 05:44:15 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 395.230780][ T8485] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 395.258630][ T8485] usb 5-1: config 0 has no interface number 0 [ 395.264767][ T8485] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 05:44:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xfeff0000) [ 395.315092][ T8485] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 395.365990][ T8485] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 395.397800][ T8485] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 395.406977][ T8485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.427883][ T3790] usb 6-1: Using ep0 maxpacket: 8 [ 395.433056][ T2504] usb 4-1: Using ep0 maxpacket: 8 [ 395.442797][ T8485] usb 5-1: config 0 descriptor?? [ 395.469289][T15006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 395.476276][T15006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 395.538003][ T3793] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 395.558107][ T2504] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 395.566484][ T3790] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 395.578255][ T3790] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.589384][ T2504] usb 4-1: config 0 has no interface number 0 [ 395.596517][ T2504] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 395.618500][ T3790] usb 6-1: config 0 has no interface number 0 [ 395.624788][ T3790] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.650497][ T2504] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 395.682020][ T2504] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 395.696053][ T3790] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 395.726207][ T2504] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 395.738137][ T3790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.747033][ T2504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.759868][ T3790] usb 6-1: config 0 descriptor?? [ 395.789686][ T2504] usb 4-1: config 0 descriptor?? [ 395.799614][ T3790] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 395.813302][ T3793] usb 1-1: Using ep0 maxpacket: 8 [ 395.838298][T15023] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 395.845630][T15023] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 395.948152][ T3793] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 395.965867][ T3793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.979177][ T3793] usb 1-1: config 0 has no interface number 0 [ 395.985359][ T3793] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.000140][ T3793] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 396.010743][ T3793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.024308][ T3793] usb 1-1: config 0 descriptor?? [ 396.031949][ T2651] usb 5-1: USB disconnect, device number 58 [ 396.102907][ T3793] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 396.245771][ T3793] usb 6-1: USB disconnect, device number 38 [ 396.426989][ T2651] usb 4-1: USB disconnect, device number 25 05:44:17 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 396.842322][ T17] usb 5-1: new high-speed USB device number 59 using dummy_hcd 05:44:17 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:17 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:17 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902240001000000000904"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xfffffee4) 05:44:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x14280000000000) 05:44:17 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 397.087901][ T17] usb 5-1: Using ep0 maxpacket: 8 05:44:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x80000000000000) 05:44:17 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x100000000000000) [ 397.208076][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.227818][ T17] usb 5-1: config 0 has no interface number 0 [ 397.239476][ T2480] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 397.263897][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 397.281611][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 397.293442][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 397.323366][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 397.339837][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.353539][ T17] usb 5-1: config 0 descriptor?? [ 397.368082][T15133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 397.368200][T15133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 397.477757][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 397.598097][ T2480] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.609117][ T2480] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 397.618368][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.627203][ T2480] usb 6-1: config 0 descriptor?? 05:44:18 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:18 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 398.289563][ T2480] usb 6-1: USB disconnect, device number 39 [ 398.291497][ T3793] usb 1-1: USB disconnect, device number 57 [ 398.365913][ T17] usb 5-1: USB disconnect, device number 59 [ 398.637708][ T2651] usb 4-1: new high-speed USB device number 26 using dummy_hcd 05:44:19 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:19 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 398.757916][ T3793] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 398.877663][ T2651] usb 4-1: Using ep0 maxpacket: 8 [ 398.997966][ T2651] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 399.006000][ T2651] usb 4-1: config 0 has no interface number 0 [ 399.017675][ T3793] usb 1-1: Using ep0 maxpacket: 8 [ 399.019430][ T2651] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 399.041338][ T2651] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 399.061200][ T2651] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 399.071922][ T2651] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 399.081668][ T2651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.091019][ T2651] usb 4-1: config 0 descriptor?? [ 399.107625][ T5] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 399.108118][T15146] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 399.129031][T15146] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 399.148350][ T3793] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 399.156425][ T3793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.167349][ T3793] usb 1-1: config 0 has no interface number 0 [ 399.183383][ T3793] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.201086][ T3793] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 399.217805][ T3793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.232477][ T3793] usb 1-1: config 0 descriptor?? [ 399.299173][ T3793] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 399.367686][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 399.507845][ T5] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 399.515883][ T5] usb 5-1: config 0 has no interface number 0 [ 399.522350][ T5] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 399.533360][ T5] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 399.543326][ T5] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 399.553201][ T5] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 399.562285][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.571866][ T5] usb 5-1: config 0 descriptor?? [ 399.593169][T15238] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 399.603641][T15238] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 399.665234][ T3793] usb 4-1: USB disconnect, device number 26 [ 399.762174][ T17] usb 1-1: USB disconnect, device number 58 [ 400.040208][ T2651] usb 5-1: USB disconnect, device number 60 05:44:20 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x200000000000000) 05:44:20 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902240001000000000904"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:20 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:20 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x400000000000000) 05:44:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c}, 0x7ffff000}}, 0x0) 05:44:20 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 05:44:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x500000000000000) 05:44:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) [ 400.477595][ T5] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 400.487691][ T17] usb 4-1: new high-speed USB device number 27 using dummy_hcd 05:44:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x700000000000000) 05:44:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 400.737534][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 400.737632][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 400.857709][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.877594][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 400.878277][ T5] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 400.893415][ T17] usb 4-1: config 0 has no interface number 0 [ 400.900262][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.904293][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 400.918005][ T5] usb 6-1: config 0 descriptor?? [ 400.934305][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 400.952216][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 400.964242][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 400.973936][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.995213][ T17] usb 4-1: config 0 descriptor?? [ 401.018080][T15337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 401.025158][T15337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 401.803456][ T17] usb 6-1: USB disconnect, device number 40 [ 402.371665][ T2651] usb 4-1: USB disconnect, device number 27 05:44:23 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x9, 0x4e7a6342, 0x1, {0x5, @raw_data="b277075eab09280e82dec33a1148fd31d65ec4933de3b967cc5ad535d01d9a53a78038cde117407069186f760a93009375e48c965b65c94f55a5f8e13e9c0db673d061ab6543e12a5537e3a39dc51c4a8a4d9d0cbee0ce2710560323042b47c7ec45208042800f1a8de5cd7890cd20b89d70c93eb31692cb790fd11e68485b7eaeadaa30eed25af56f38678a207924db8842ded487cfce5546ad494d7e5f1e2318557bb67558a44599e910ac590136b669e9b4733bf994ed05b4149bd84617ab49db09fb8f01a982"}, 0x6}) 05:44:23 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:23 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 05:44:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x900000000000000) 05:44:23 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902240001000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xa00000000000000) 05:44:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe00000000000000) 05:44:23 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 05:44:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xf00000000000000) 05:44:23 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) 05:44:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x1000000000000000) [ 403.188422][ T2651] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 403.207449][ T5] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 403.217506][ T17] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 403.427458][ T2651] usb 5-1: Using ep0 maxpacket: 8 [ 403.467457][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 403.478382][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 403.547561][ T2651] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 403.555567][ T2651] usb 5-1: config 0 has no interface number 0 [ 403.563665][ T2651] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 403.575065][ T2651] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 403.585349][ T2651] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 403.595639][ T2651] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 403.605283][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 403.607594][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.613449][ T2651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.629374][ T5] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 403.634641][ T17] usb 4-1: config 0 has no interface number 0 [ 403.647498][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 403.649700][ T5] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 403.660545][ T2651] usb 5-1: config 0 descriptor?? [ 403.677848][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 403.684569][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.689338][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 403.706644][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 403.712999][ T5] usb 6-1: config 0 descriptor?? [ 403.719204][T15433] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.729973][T15433] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.736816][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.749783][ T17] usb 4-1: config 0 descriptor?? [ 403.767722][T15437] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.774565][T15437] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 404.337010][ T2651] usb 5-1: USB disconnect, device number 61 [ 404.424872][ T17] usb 4-1: USB disconnect, device number 28 [ 404.513208][ T2480] usb 6-1: USB disconnect, device number 41 05:44:25 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:25 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 05:44:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x1100000000000000) 05:44:25 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x138, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}]}}]}, 0x138}}, 0x0) 05:44:25 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:44:25 executing program 0: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000200)='&},$\x00', 0x0, r2) 05:44:25 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x138, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 05:44:25 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902240001000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x3400000000000000) 05:44:25 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x138, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 05:44:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) 05:44:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x360a000000000000) [ 405.187532][ T2504] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 405.197497][ T5] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 405.397437][ T2480] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 405.427361][ T2504] usb 5-1: Using ep0 maxpacket: 8 [ 405.457774][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 405.567627][ T2504] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.575642][ T2504] usb 5-1: config 0 has no interface number 0 [ 405.582835][ T2504] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 405.594975][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.602985][ T2504] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 405.614045][ T5] usb 4-1: config 0 has no interface number 0 [ 405.620845][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 405.632594][ T2504] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 405.637333][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 405.643635][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 405.657580][ T2504] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 405.666593][ T2504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.674792][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 405.685123][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 405.694703][ T2504] usb 5-1: config 0 descriptor?? [ 405.702297][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.717872][T15554] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 405.719992][ T5] usb 4-1: config 0 descriptor?? [ 405.724814][T15554] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 405.769995][T15557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 405.776962][T15557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 405.781001][ T2480] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.795855][ T2480] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.816828][ T2480] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 405.835176][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.857518][ T2480] usb 6-1: config 0 descriptor?? [ 405.975127][ T5] usb 5-1: USB disconnect, device number 62 [ 406.210997][ T2504] usb 4-1: USB disconnect, device number 29 [ 406.244198][ T3790] usb 6-1: USB disconnect, device number 42 05:44:27 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x4002000000000000) 05:44:27 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:44:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="140002"], 0x40}}, 0x0) 05:44:27 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:44:27 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902240001"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x6661000000000000) [ 406.770950][T15671] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 406.806403][T15671] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:44:27 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14}]}}]}, 0x48}}, 0x0) 05:44:27 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x3, [{}, {}, {0xffffffffffffffff, 0x0, 0x0, 0x4ccf124678696651}]}) [ 406.846982][T15680] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 406.870561][T15680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:44:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xa28e040000000000) 05:44:27 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14}]}}]}, 0x48}}, 0x0) 05:44:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x4004ae86, &(0x7f00000000c0)) [ 407.037320][ T2480] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 407.077298][ T17] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 407.107462][ T2504] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 407.287320][ T2480] usb 5-1: Using ep0 maxpacket: 8 [ 407.317395][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 407.377433][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 407.409719][ T2480] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.424442][ T2480] usb 5-1: config 0 has no interface number 0 [ 407.438200][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.446183][ T17] usb 4-1: config 0 has no interface number 0 [ 407.467349][ T2480] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 407.478918][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 407.490701][ T2480] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 407.501363][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 407.508325][ T2504] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.512876][ T2480] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 407.532037][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 407.534941][ T2504] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.543164][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 407.560647][ T2480] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 407.570545][ T2480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.579121][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.589615][ T2480] usb 5-1: config 0 descriptor?? [ 407.595126][ T17] usb 4-1: config 0 descriptor?? [ 407.607654][T15673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.627663][T15673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.642034][ T2504] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 407.657682][T15676] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.665998][T15676] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.673911][ T2504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.688209][ T2504] usb 6-1: config 0 descriptor?? [ 407.870750][ T17] usb 5-1: USB disconnect, device number 63 [ 408.152562][ T2480] usb 4-1: USB disconnect, device number 30 [ 408.178419][ T3790] usb 6-1: USB disconnect, device number 43 05:44:29 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xb175000000000000) 05:44:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="665f07000005eb3014", 0x9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:44:29 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14}]}}]}, 0x48}}, 0x0) 05:44:29 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:44:29 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe4feffff00000000) 05:44:29 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast2=0x7f000001}, "0000008000000000"}}}}}, 0x0) 05:44:29 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xe803000000000000) 05:44:29 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 05:44:29 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xf401000000000000) [ 408.967266][ T17] usb 5-1: new high-speed USB device number 64 using dummy_hcd 05:44:29 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x4, @dev}, {0xa, 0x0, 0x0, @local}, 0x0, [0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x1000]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 409.087239][ T3790] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 409.217142][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 409.337239][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 409.345233][ T17] usb 5-1: config 0 has no interface number 0 [ 409.357258][ T3790] usb 6-1: Using ep0 maxpacket: 8 [ 409.367256][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 409.387592][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 409.407177][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 409.427172][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 409.436193][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.456415][ T17] usb 5-1: config 0 descriptor?? [ 409.487335][ T3790] usb 6-1: config 0 has no interfaces? [ 409.494226][T15789] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 409.501380][ T3790] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 409.514115][T15789] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 409.527973][ T3790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.541732][ T3790] usb 6-1: config 0 descriptor?? [ 409.780475][ T3790] usb 5-1: USB disconnect, device number 64 [ 409.834321][ T17] usb 6-1: USB disconnect, device number 44 05:44:32 executing program 0: 05:44:32 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xfeff000000000000) 05:44:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240), 0x4) 05:44:32 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:44:32 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:32 executing program 0: 05:44:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xffffffff00000000) 05:44:32 executing program 0: 05:44:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r0, 0x0, 0x0, 0x0) 05:44:32 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') 05:44:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0xffffffffffffffff) 05:44:32 executing program 0: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008) [ 411.997195][ T17] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 412.007081][ T8485] usb 6-1: new high-speed USB device number 45 using dummy_hcd 05:44:32 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:32 executing program 1: 05:44:32 executing program 0: [ 412.247007][ T8485] usb 6-1: Using ep0 maxpacket: 8 [ 412.265495][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 412.370410][ T8485] usb 6-1: config 0 has no interfaces? [ 412.375926][ T8485] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 412.394467][ T8485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.403507][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 412.418037][ T17] usb 5-1: config 0 has no interface number 0 [ 412.425596][ T8485] usb 6-1: config 0 descriptor?? [ 412.435126][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 412.448088][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 412.458986][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 412.470230][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 412.480041][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.491172][ T17] usb 5-1: config 0 descriptor?? [ 412.507719][T15893] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 412.515238][T15893] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 413.143501][ T8485] usb 6-1: USB disconnect, device number 45 [ 413.156058][ T17] usb 5-1: USB disconnect, device number 65 05:44:34 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:44:34 executing program 1: 05:44:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0x980000, 0x7, 0xfffffffa, r0, 0x0, &(0x7f0000000040)={0x9a0001, 0x9cc, [], @string=&(0x7f0000000000)=0x8}}) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x100000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:34 executing program 0: 05:44:34 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:34 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:34 executing program 0: 05:44:34 executing program 1: 05:44:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3e, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 05:44:34 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/235, 0xeb}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x58) 05:44:34 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109023b00010100000009040000000206000005"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 05:44:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x7a00) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000000), 0x800) pidfd_getfd(0xffffffffffffffff, r2, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 414.017011][ T8485] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 414.049157][ T3790] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 414.237080][ T2480] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 414.266967][ T8485] usb 6-1: Using ep0 maxpacket: 8 [ 414.296992][ T3790] usb 5-1: Using ep0 maxpacket: 8 [ 414.310087][ T8485] usb 6-1: no configurations [ 414.314695][ T8485] usb 6-1: can't read configurations, error -22 [ 414.438102][ T3790] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 414.446217][ T3790] usb 5-1: config 0 has no interface number 0 [ 414.453457][ T3790] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 414.465402][ T3790] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 414.475901][ T3790] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 414.476961][ T2480] usb 2-1: Using ep0 maxpacket: 8 [ 414.487028][ T3790] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 414.490873][ T8485] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 414.499901][ T3790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.522177][ T3790] usb 5-1: config 0 descriptor?? [ 414.567377][T15989] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 414.574980][T15989] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 414.677320][ T2480] usb 2-1: unable to get BOS descriptor or descriptor too short [ 414.757179][ T2480] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.767316][ T8485] usb 6-1: Using ep0 maxpacket: 8 [ 414.807254][ T8485] usb 6-1: no configurations [ 414.817546][ T3790] usb 5-1: USB disconnect, device number 66 [ 414.827308][ T8485] usb 6-1: can't read configurations, error -22 [ 414.842625][ T8485] usb usb6-port1: attempt power cycle [ 414.927157][ T2480] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.936677][ T2480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.945850][ T2480] usb 2-1: Product: syz [ 414.950609][ T2480] usb 2-1: Manufacturer: syz [ 414.955236][ T2480] usb 2-1: SerialNumber: syz [ 414.997512][ T2480] cdc_ether 2-1:1.0: skipping garbage [ 415.002968][ T2480] usb 2-1: bad CDC descriptors [ 415.202760][ T3790] usb 2-1: USB disconnect, device number 6 05:44:35 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:44:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) mprotect(&(0x7f000001c000/0x2000)=nil, 0x2000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe84b}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0xfffffd28) 05:44:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:35 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:36 executing program 2: ustat(0x800, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x7a00) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x87}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x34dadbe57b9490c}, 0x20000800) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 415.579120][ T8485] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 415.656884][ T2480] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 415.687725][ T8485] usb 6-1: Using ep0 maxpacket: 8 [ 415.692883][ T2651] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 415.737193][ T8485] usb 6-1: no configurations [ 415.742641][ T8485] usb 6-1: can't read configurations, error -22 [ 415.896929][ T8485] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 415.937129][ T2651] usb 5-1: Using ep0 maxpacket: 8 [ 415.942334][ T2480] usb 4-1: device descriptor read/64, error 18 [ 415.986983][ T3790] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 415.987908][ T8485] usb 6-1: Using ep0 maxpacket: 8 [ 416.037075][ T8485] usb 6-1: no configurations [ 416.041774][ T8485] usb 6-1: can't read configurations, error -22 [ 416.053109][ T8485] usb usb6-port1: unable to enumerate USB device [ 416.077122][ T2651] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 416.088539][ T2651] usb 5-1: config 0 has no interface number 0 [ 416.094663][ T2651] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 416.117570][ T2651] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 416.133847][ T2651] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 416.144815][ T2651] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 416.154768][ T2651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.167087][ T2651] usb 5-1: config 0 descriptor?? [ 416.194037][T16074] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.201435][T16074] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.246886][ T3790] usb 2-1: Using ep0 maxpacket: 8 [ 416.347021][ T2480] usb 4-1: device descriptor read/64, error 18 [ 416.432669][ T3790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 416.436070][ T2651] usb 5-1: USB disconnect, device number 67 [ 416.527021][ T3790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.626818][ T2480] usb 4-1: new high-speed USB device number 32 using dummy_hcd 05:44:37 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000000)=""/209, &(0x7f0000000100)=0xd1) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') lseek(r0, 0x21, 0x0) [ 416.697020][ T3790] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.706183][ T3790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.714485][ T3790] usb 2-1: Product: syz [ 416.726775][ T3790] usb 2-1: Manufacturer: syz [ 416.731378][ T3790] usb 2-1: SerialNumber: syz 05:44:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00400080000000080000000049"]}) 05:44:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x7a00) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000100)="6ff4e07c0438b9c20be34ed38b112f4642161c5da2b9d670de8831ee221ab1f061fcb51f8bea48af83905cdce5d701839be79030323db5c465d0b64014bb8ce47b5331d0e2a3721aa76e7aa177f2b80a2ff0cb9d32dfcea0ff66223ab7ba3726c57b41cbcb9d39aa51e3d4e80e48fbe65ba813e0ad2c1bc9a676c01a45cdca0176d658ad19922851c006802167888391e242dc512ae5ec8830b94ec3c30cc970257a6aa45b93c7d55f29ac2938dd707ffd4c3199b4163ae24e2722c5b5d46fa4f4281ee72712b740b43f3fa44bd0569d2c5f940990797e82fd5b2e588ab3b15d90cbd07dd859", 0xe6) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="671f8503d9afefbe563e3d7ed2ae5294b151f3a572bd0a6d2f42bfad5ccbc117c87ef3b698e6d1bdd83cff9bd9d35749bbd09b7cac139bfe7db5784672a506b0a3e1c6c7a06c7db0c63d0f38a42df73c869e71af6ac92bfab3bef55c179c6c8e683a9bfa1e35df760581be75e9926e2807a0c100a929cef3b5fe838a9334b6d0", 0x80, 0x20004004, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 416.777592][ T3790] cdc_ether 2-1:1.0: skipping garbage [ 416.784176][ T3790] usb 2-1: bad CDC descriptors [ 416.901057][ T2480] usb 4-1: device descriptor read/64, error 18 05:44:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 05:44:37 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 416.951808][ T8485] usb 2-1: USB disconnect, device number 7 05:44:37 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$9p(r0, &(0x7f0000000240)="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", 0x1000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x0, 0x1000}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) open(&(0x7f0000001280)='./bus\x00', 0x143042, 0x0) sendfile(r4, r2, 0x0, 0xfffff77f000) 05:44:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r4, 0x905, 0x70bd2d, 0x0, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x30}}, 0x840) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x18c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xffffffc1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x68b}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfff}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040000}, 0x81) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000280)={0x4, [0xffff, 0x3ff, 0x3, 0x7]}, &(0x7f00000002c0)=0xc) r7 = dup2(r2, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0xfd035d31ea255e18, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:37 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045510, &(0x7f0000000000)) [ 417.035598][T16153] ptrace attach of "/root/syz-executor.0"[16152] was attempted by "/root/syz-executor.0"[16153] [ 417.206883][ T2651] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 417.296818][ T2480] usb 4-1: device descriptor read/64, error 18 [ 417.417078][ T2480] usb usb4-port1: attempt power cycle [ 417.456815][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 417.497046][ T2651] usb 6-1: no configurations [ 417.497072][ T2651] usb 6-1: can't read configurations, error -22 [ 417.646927][ T2651] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 417.886779][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 417.930175][ T2651] usb 6-1: no configurations [ 417.934862][ T2651] usb 6-1: can't read configurations, error -22 [ 417.942247][ T2651] usb usb6-port1: attempt power cycle [ 418.126788][ T2480] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 418.296927][ T2480] usb 4-1: device descriptor read/8, error -61 05:44:38 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@enum, @volatile, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0x92}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 418.421393][T16185] ptrace attach of "/root/syz-executor.1"[16182] was attempted by "/root/syz-executor.1"[16185] [ 418.506828][ T2480] usb 4-1: device descriptor read/8, error -71 [ 418.656750][ T2651] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 418.747030][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 418.786953][ T2651] usb 6-1: no configurations [ 418.791835][ T2651] usb 6-1: can't read configurations, error -22 [ 418.946765][ T2651] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 418.996839][ T2480] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 419.036855][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 419.076819][ T2651] usb 6-1: no configurations [ 419.081503][ T2651] usb 6-1: can't read configurations, error -22 [ 419.089191][ T2651] usb usb6-port1: unable to enumerate USB device [ 419.166761][ T2480] usb 4-1: device descriptor read/8, error -61 [ 419.436938][ T2480] usb 4-1: device descriptor read/8, error -61 [ 419.557864][ T2480] usb usb4-port1: unable to enumerate USB device 05:44:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 05:44:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f00000001c0)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000000)={0xfffffffffffffffd}) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x8000, 0x0, 0x0) 05:44:40 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 05:44:40 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x80045432, 0x0) 05:44:40 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) sendto$inet(r0, &(0x7f0000000000)="2c3d96ce68a67054384fbdcadb1f3d4bd2496858ca6511700aacf1d300005764c5c3bced4709dc5d0dfbcadbacc5a826c4f5dd5ef0c452c6cfa3e623b890935a00fe0415b069518b303809a97490d4b7dc7b5e0e4020776d0538b227d5363669b3e99435974e6f99fa985055e4b4c1f3d9545e091b07f240bc2fd13db0022c1a71030cbf737a6c", 0x87, 0x8800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x190, 0x0, 0x0) 05:44:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') lseek(r0, 0x2, 0x0) 05:44:40 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x5, [@ptr, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x5d}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:44:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@enum, @volatile, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3}]}, @const={0x0, 0x0, 0x0, 0xa, 0x4}]}}, 0x0, 0x52}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 05:44:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40045568) [ 420.057993][T16219] ptrace attach of "/root/syz-executor.4"[16218] was attempted by "/root/syz-executor.4"[16219] [ 420.242570][ T2504] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 420.506775][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 420.556949][ T2504] usb 6-1: no configurations [ 420.561761][ T2504] usb 6-1: can't read configurations, error -22 [ 420.716703][ T2504] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 420.956627][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 420.996892][ T2504] usb 6-1: no configurations [ 421.001602][ T2504] usb 6-1: can't read configurations, error -22 [ 421.009190][ T2504] usb usb6-port1: attempt power cycle 05:44:42 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tee(r2, r0, 0x1, 0x2) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 421.716650][ T2504] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 421.806860][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 421.846823][ T2504] usb 6-1: no configurations [ 421.851451][ T2504] usb 6-1: can't read configurations, error -22 [ 421.936630][ T2651] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 422.006595][ T2504] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 422.096634][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 422.136810][ T2504] usb 6-1: no configurations [ 422.141534][ T2504] usb 6-1: can't read configurations, error -22 [ 422.149247][ T2504] usb usb6-port1: unable to enumerate USB device [ 422.236676][ T2651] usb 4-1: device descriptor read/64, error 18 [ 422.636576][ T2651] usb 4-1: device descriptor read/64, error 18 05:44:43 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:43 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@ptr, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x68}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:44:43 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000001d00000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 05:44:43 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0x0, "01d2417d8d9ea0a7"}) 05:44:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="f622d392e67846f614bdb5fa1ab07a442671f4573f6279c1609899d45934650b7bbd5c7c89cd939d9863539809ba48aae58c0bc2c1c365bc905942d18c89f75351f5b1f167231f121be88a2647681bfb05e6dfdb3adc564586c94188f39b026111e43967a12c5b98f9c3ea9c6c8f38f7d44f90e4a70dedd3695699e1594b96c2c9519a7d31ffade593e0a8584497ca2950178f5342ea250f223d54ea079b", 0x9e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 422.914974][ T2651] usb 4-1: new high-speed USB device number 36 using dummy_hcd 05:44:43 executing program 0: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) 05:44:43 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000001d00000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 422.960436][T16254] ptrace attach of "/root/syz-executor.0"[16251] was attempted by "/root/syz-executor.0"[16254] 05:44:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 05:44:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0) r1 = dup(r0) lseek(r1, 0x0, 0x0) [ 423.212670][ T2651] usb 4-1: device descriptor read/64, error 18 [ 423.369437][ T2480] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 423.606598][ T2651] usb 4-1: device descriptor read/64, error 18 [ 423.626722][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 423.726984][ T2651] usb usb4-port1: attempt power cycle [ 423.786835][ T2480] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 423.796854][ T2480] usb 6-1: can't read configurations, error -61 [ 423.966568][ T2480] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 424.219374][ T2480] usb 6-1: Using ep0 maxpacket: 8 05:44:45 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:45 executing program 4: open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0xba) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x801e}) creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 424.422045][ T2480] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 424.435388][ T2480] usb 6-1: can't read configurations, error -61 [ 424.442075][ T2651] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 424.463144][ T2480] usb usb6-port1: attempt power cycle [ 424.951108][ T2651] usb 4-1: device not accepting address 37, error -71 [ 425.206479][ T2480] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 425.296483][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 425.336638][ T2651] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 425.477055][ T2480] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 425.484648][ T2480] usb 6-1: can't read configurations, error -61 [ 425.526774][ T2651] usb 4-1: device descriptor read/8, error -61 [ 425.646478][ T2480] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 425.762738][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 425.826581][ T2651] usb 4-1: device descriptor read/8, error -61 05:44:46 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:46 executing program 0: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x100000001) 05:44:46 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 05:44:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r1}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x155, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x40004) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af96e4b38ff, 0x0) dup(r2) 05:44:46 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000100)={@broadcast, @random="cdbd0366d5bf", @val, {@ipv6}}, 0x0) [ 425.957598][ T2480] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 425.966217][ T2651] usb usb4-port1: unable to enumerate USB device [ 425.972684][ T2480] usb 6-1: can't read configurations, error -61 [ 425.981774][ T2480] usb usb6-port1: unable to enumerate USB device 05:44:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, &(0x7f0000000540)='q', 0x1, 0x0, &(0x7f00000005c0)=@in={0x10, 0x2}, 0x10) 05:44:46 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000580)=@in6={0x1c, 0x1c}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@in6={0x1c, 0x1c}, 0x1c) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) r2 = socket(0x2, 0x1, 0x0) r3 = dup(r2) r4 = socket(0x2, 0x1, 0x0) dup(0xffffffffffffffff) accept4$inet6(r4, &(0x7f0000000380), &(0x7f00000003c0)=0x1c, 0x30000000) r5 = socket(0x2, 0x1, 0x0) dup(r5) sendmsg$unix(r3, &(0x7f0000000480)={&(0x7f0000000140)=@file={0xa}, 0xa, &(0x7f00000001c0)=[{&(0x7f0000000240)="1dc841ca87fd4246c4cdc2a1c8200db73bb29ea3ef51595ed68bb89fcde79a1f9296048d7a9881640ac5812253ab9f59915f5ddd28554eab558a6218d1d1fcafc028b00146366a745c808a6bdaf3c63e986bb6987731016e893be3f18d4870e6cb292f", 0x63}], 0x1, &(0x7f0000000400)=[@rights, @cred, @cred, @rights, @rights], 0x7c}, 0x0) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r7 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r7, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 05:44:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@local}) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:46 executing program 0: [ 426.211728][T16319] Unknown ioctl 1074311008 05:44:46 executing program 4: [ 426.244647][T16324] Unknown ioctl 1074311008 [ 426.486586][ T2480] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 426.746385][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 426.946606][ T2480] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 426.954296][ T2480] usb 6-1: can't read configurations, error -61 [ 427.116368][ T2480] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 427.356340][ T2480] usb 6-1: Using ep0 maxpacket: 8 05:44:48 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$CAPI_NCCI_GETUNIT(r4, 0x80044327, &(0x7f0000000000)=0xfffffffa) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 427.526530][ T2480] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 427.534132][ T2480] usb 6-1: can't read configurations, error -61 [ 427.556551][ T2480] usb usb6-port1: attempt power cycle [ 427.976318][ T2521] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 428.256322][ T2521] usb 4-1: device descriptor read/64, error 18 [ 428.267248][ T2480] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 428.356633][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 428.516523][ T2480] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 428.524232][ T2480] usb 6-1: can't read configurations, error -61 [ 428.676308][ T2480] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 428.676354][ T2521] usb 4-1: device descriptor read/64, error 18 [ 428.767184][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 428.926305][ T2480] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 428.934621][ T2480] usb 6-1: can't read configurations, error -61 [ 428.942244][ T2480] usb usb6-port1: unable to enumerate USB device [ 428.966336][ T2521] usb 4-1: new high-speed USB device number 40 using dummy_hcd 05:44:49 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:49 executing program 1: 05:44:49 executing program 0: 05:44:49 executing program 4: 05:44:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, 0x15, 0x28, 0x70bd2c, 0x25dfdbfd, {0x1e, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "f8d6523eec17f719847a7776c7ee010583cc0f266cb7b0ec49dfaffb042b8a35cfdf5829f6075a62dbd26a097d74ce42d67528c56f89f9c836668e5e6bda1ddfe952a743e197282f1b47c520e73fd27708ef721edd7dd41407c0f374a45d00d15d227075164751a0a214a1266a643f79d4c4fab92d1864d6f561f1ade3a2328e1a8deef2943e030cbb50a13fe1462f7ae1efaad6da967ecc4ccb1dbb8a7718f83efaba51f6568a8b8882d512d99e7f0a1187d99da7856fe993a6ab832dd90e9fb82fb36e0c5346f63a6da7366c46e62ebe7c2e43d4f66eb0eff8fca4c3619d"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "9c120137771b1ccc98cca2195c"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000804}, 0x4000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x150, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:49 executing program 0: 05:44:49 executing program 1: 05:44:49 executing program 4: 05:44:49 executing program 4: 05:44:49 executing program 0: [ 429.236309][ T2521] usb 4-1: device descriptor read/64, error 18 [ 429.516279][ T2504] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 429.656248][ T2521] usb 4-1: device descriptor read/64, error 18 [ 429.766243][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 429.776740][ T2521] usb usb4-port1: attempt power cycle [ 429.926346][ T2504] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 429.933929][ T2504] usb 6-1: can't read configurations, error -61 [ 430.086300][ T2504] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 430.356350][ T2504] usb 6-1: Using ep0 maxpacket: 8 05:44:51 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:51 executing program 1: [ 430.496293][ T2521] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 430.516282][ T2504] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 430.523874][ T2504] usb 6-1: can't read configurations, error -61 [ 430.530363][ T2504] usb usb6-port1: attempt power cycle [ 430.636353][ T2521] usb 4-1: device descriptor read/8, error -71 [ 430.866538][ T2521] usb 4-1: device descriptor read/8, error -71 [ 431.246240][ T2504] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 431.336445][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 431.366171][ T2521] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 431.496259][ T2504] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 431.504009][ T2504] usb 6-1: can't read configurations, error -61 [ 431.536319][ T2521] usb 4-1: device descriptor read/8, error -61 [ 431.676166][ T2504] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 431.766330][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 431.816299][ T2521] usb 4-1: device descriptor read/8, error -61 [ 431.927741][ T2504] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 431.935323][ T2504] usb 6-1: can't read configurations, error -61 [ 431.942801][ T2521] usb usb4-port1: unable to enumerate USB device [ 431.949343][ T2504] usb usb6-port1: unable to enumerate USB device 05:44:52 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:44:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e1f, @private=0x20}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpid() sched_setscheduler(r6, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRESDEC, @ANYBLOB="b54c856d46e177000027c0fb6c16aac7bf6332bc86a8103eb21d5d1586a109cef34b56981bc076052658c742f56ef5a4b297bc905346625da67abe8dcb08a8ff8d8f518f158710470ad3d73db9d62aa0e3d3519224ff34ea319427284424cc1a0a30e7a3f9e2c0c5f795c939a75976e4bcb4912e6115304350df8bf8513c2e7e93000000001ee58670c1df472547f3e142d9e3ec0d3928d76fc896a735bb620cd42228400b6341df68a805f32f2f30d2ea3d6f0988591fa60877a88540f0e0d4da0c0068000400000000000000000000000000000000008250701fd817c85b000000004dae2e4e9e27b68af648c47a318be05276b1209004ce84bfbe27375d6037b29da88d4a65246915433247ab1909cc77841fc5e90cba50b8668090d6f7d71aac4617d8556fe8ae7e6271aa9594662462cf7998ac36e8dc71fb731bf6d66b7ef6b35b5f9eef3a671ef54608aa887baf0c329a4c7782ab75609d06237184280bedde8f189d88322cdbb390111230c6f034a0ccc057d6012e4e5ddd3704c4908b2ec6d164e56531621467b77e46d5f579bedc92ed87ddf0ab0af3ece107374dee1b79ba2370c94ad00b51599b91b21bca73ef13d9ea82600b62619cf473d864f1685d3a5e6ef3e885db2bb5f848dbc00dcebd7a6304a169184d16cd6132940e9400a3b0057e93c2287a0ea4e1594f94c42e6383e89c5271fadee02e0000c0cc6e85f6546b2f"], 0x104}, 0x1, 0x0, 0x0, 0x280040d5}, 0x884) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400) sendto$inet(r0, &(0x7f00000012c0)="a1", 0x1, 0x0, 0x0, 0x0) 05:44:52 executing program 4: 05:44:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x5f) 05:44:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x4, [@enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb4}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102393, 0xd82}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:44:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@enum={0x0, 0x3, 0x0, 0x6, 0x4, [{}, {}, {}]}, @struct={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x10, 0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xb9}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c603000000000000002aa437a3a3f1ce8682500fcecd80", 0x42}], 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:44:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000706f164808e25ff6da900d4da5da2260c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x207fff, 0x0) 05:44:52 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x0, 0x3ff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="02002cbd70000900df2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x69e1, 0x5, 0x1, 0x6b}, {0x5, 0x67, 0x81, 0xffffff81}, {0x7ff}]}, 0x10) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r8, 0xc050561a, &(0x7f0000000180)={0x0, "a8fc05945e442465b25a4c0ff9794f6c5a4b1ce3e01d3c2c52ef5e61fcaca1e7", 0x1, 0x8b2600, 0x4, 0xff77f918c586ce3c, 0x10100, 0x8}) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 432.255520][T16395] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 05:44:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x5, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xa5}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c603000000000000002aa437a3a3f1ce8682500fcecd80", 0x42}], 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 432.303875][T16401] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 432.332951][T16401] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.374732][T16401] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 05:44:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 432.488898][T16411] x_tables: duplicate underflow at hook 1 [ 432.496336][ T2480] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 432.575424][T16411] x_tables: duplicate underflow at hook 1 [ 432.738225][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 432.856235][ T2480] usb 6-1: config 0 has no interfaces? [ 432.861836][ T2480] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 432.872002][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.884962][ T2480] usb 6-1: config 0 descriptor?? [ 433.129255][ T2480] usb 6-1: USB disconnect, device number 70 05:44:54 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x80, 0x400000000}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="60002dbd7000fddbdf25040000000500040006000000140002007665746845000000000000d7ca7bf31ddcba7e0073797a32000000000500040f010000000900010073797a3200000000ba9c605f60b257b25a611e2dffa0418ec9011749e603b0658187098962222e3ae77576b265ada70812b5824eab7935c1b0bb6e8bc43a7940cca8fce9fa7de43630cd0834cc178f2d4db3fed7e82881a1bbb34ae1249612b4119327edfbd4d591ddbde4d7132b3cfeb740754d171f0935f90139409384f1ba20e649930dbb7a05382e354b07648ffc3f37e5a9eb5799cf20dfa55ac2b2d1b05c03bd83aa213c05dee7e5f0c0f72780c1b439b2d277e7be847c34c2b49c48b88c90db8e513423a801f9b54c03a66a426a3a52b5616d05ef975bc69183624470a032a66fbfb89d94f93f57db3285f929b7a9ef00576e9df3141a02be08d68262fd27863586b1ce5baa2c397249934bad1c618f57b6e6933d4b314eec7e373fc8a1de26d386f63b6c79dd9b2d26541799f6d532a7be9d5f763c74b09d687acf1f9f8d"], 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008001}, 0x8001) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:54 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:44:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 05:44:54 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 05:44:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 433.711626][T16437] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 434.016118][ T2480] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 434.056489][ T2651] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 434.256135][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 434.306089][ T2651] usb 4-1: Using ep0 maxpacket: 8 [ 434.376137][ T2480] usb 6-1: config 0 has no interfaces? [ 434.381720][ T2480] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 434.392084][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.404603][ T2480] usb 6-1: config 0 descriptor?? [ 434.426246][ T2651] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.436807][ T2651] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 434.445823][ T2651] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 434.456954][ T2651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.472240][ T2651] usb 4-1: config 0 descriptor?? [ 434.660378][ T2651] usb 6-1: USB disconnect, device number 71 [ 434.734701][ T2480] usb 4-1: USB disconnect, device number 43 05:44:55 executing program 1: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:44:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x4}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) getpgid(0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @local}, 0x8) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 05:44:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4044081) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, 0x0}, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RGETATTR(r1, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 05:44:55 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) [ 435.496262][ T2504] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 435.757726][ T2504] usb 6-1: Using ep0 maxpacket: 8 05:44:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000000)={0x192, @remote, 0x4e23, 0x1, 'lblc\x00', 0x20, 0x401, 0x4f}, 0x2c) 05:44:56 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 435.886606][ T2504] usb 6-1: config 0 has no interfaces? [ 435.892207][ T2504] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 435.930923][ T2504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.968807][ T2504] usb 6-1: config 0 descriptor?? 05:44:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="e2ffffffd72c8d26a4ec53d95ffcfc25ad4cf72ed00ec6089824d314d8daf69bc223268aea8cf8ca024ebbbbc93458cfa6d6267a9490167b0bfd95e9540cf135341b7869e3e93baba8c4e7f528b5ca3280963e6ae4054c824b1919ca91568e6e23759d2e5319f7820582080e34584efd952b6ca40a7e6fb49e161e2b4f9d20d0bb8cb49101f1027aa7aaca61a4423c94a89cf8a8acdead75e654bf0260521f1a6e8b24df4eb19dbddc5162cd8f81ee8fb844db1923951957f6dedbf9550eb3a135e8456d18e88d740be134ee8e82dbed1eb16b41ca3f84c741838d3bf702"], &(0x7f000095dffc)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x71, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x9, 0x20, 0x6f64}, &(0x7f0000000100)=0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000200)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "49478c179b421f67201ddb948ddaf475"}, 0x11, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000)="23a54d03080dd88a46c7f77c48ab853533f34862be3ebfc1128622debe62cbfb6bd6bcfc50d1c4dcf48f941ce5c59702c7403bfc40362aa951d39458d4f1ffb9c91fad88332d8634faab160b7942032127a4db2a2da372510d306c2dd2d24a2f23c042cdeaf070078c05a58b31a35c4ea7f40690145ddfd50a612f772959164c269b92befe", 0x85, 0x0, 0x0, 0x0) 05:44:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') lseek(r0, 0x0, 0x0) 05:44:56 executing program 4: 05:44:56 executing program 4: 05:44:56 executing program 1: [ 436.230037][ T2504] usb 6-1: USB disconnect, device number 72 05:44:56 executing program 1: [ 436.286013][ T3790] usb 4-1: new high-speed USB device number 44 using dummy_hcd 05:44:56 executing program 4: 05:44:56 executing program 0: 05:44:56 executing program 1: [ 436.532366][ T3790] usb 4-1: Using ep0 maxpacket: 8 [ 436.662133][ T3790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.678048][ T3790] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 436.696074][ T3790] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 436.705287][ T3790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.716100][ T3790] usb 4-1: config 0 descriptor?? 05:44:57 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:44:57 executing program 4: [ 436.990413][ T2521] usb 4-1: USB disconnect, device number 44 [ 437.075923][ T3790] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 437.345935][ T3790] usb 6-1: Using ep0 maxpacket: 8 05:44:58 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:58 executing program 1: 05:44:58 executing program 4: 05:44:58 executing program 0: 05:44:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 437.474433][ T3790] usb 6-1: config 0 has no interfaces? [ 437.480101][ T3790] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 437.490327][ T3790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.503448][ T3790] usb 6-1: config 0 descriptor?? 05:44:58 executing program 4: 05:44:58 executing program 1: 05:44:58 executing program 0: 05:44:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:58 executing program 4: [ 437.789251][ T2521] usb 6-1: USB disconnect, device number 73 [ 437.905907][ T3790] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 438.145928][ T3790] usb 4-1: Using ep0 maxpacket: 8 [ 438.276281][ T3790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.286656][ T3790] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.295616][ T3790] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 438.306721][ T3790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:44:58 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:44:58 executing program 1: [ 438.326427][ T3790] usb 4-1: config 0 descriptor?? [ 438.592253][ T2651] usb 4-1: USB disconnect, device number 45 [ 438.655960][ T2480] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 438.895839][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 439.015880][ T2480] usb 6-1: config 0 has no interfaces? [ 439.021458][ T2480] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 439.030602][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.040123][ T2480] usb 6-1: config 0 descriptor?? 05:44:59 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:44:59 executing program 4: 05:44:59 executing program 0: 05:44:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xcd, 0x103802) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", ""]}, 0x14}}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000001300)="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", 0x1000, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)=@builtin='builtin_trusted\x00') sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:44:59 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) ioctl$TCSBRKP(r0, 0x7040, 0x0) 05:44:59 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x9) 05:44:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000070603"], 0x44}}, 0x0) 05:44:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={{0x1, 0x0, @reserved="01a538b676af7a7d725c895a57f563ba79c68c517faa55154cb19e7cbe714530"}, 0x73, 0x0, [], "96a2c0d295adc08d05f54186f9466c6b01f2338d4dcd5004bc22f48e54c0f5c599264df32dc81525ee9202252fc6569b1061cb4451619be45986b914a683f79572395904e728b487d096b3e0cfbb802505a4301d742349cf317a6bee894c26ac751d011b2fbc80333b80c218ed972867970a09"}) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r2) r3 = request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', r2) keyctl$unlink(0x9, r1, r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:44:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfffd}]}}}]}, 0x3c}}, 0x0) [ 439.226832][T16617] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:44:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0xbc2f, 0x2, 0x0, 0x1}) sendfile(r1, r0, 0x0, 0x20000000000000d8) [ 439.280438][ T3790] usb 6-1: USB disconnect, device number 74 [ 439.434009][ T2480] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 439.685948][ T2480] usb 4-1: Using ep0 maxpacket: 8 05:45:00 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:45:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1, 0x111) [ 439.806140][ T2480] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.817492][ T2480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.830592][ T2480] usb 4-1: config 0 has no interface number 0 [ 439.842983][ T2480] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 439.858432][ T2480] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.872225][ T2480] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 439.882129][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.904142][ T2480] usb 4-1: config 0 descriptor?? [ 439.948611][ T2480] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 440.153637][ T2480] usb 4-1: USB disconnect, device number 46 [ 440.165810][ T17] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 440.415798][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 440.536003][ T17] usb 6-1: config 0 has no interfaces? [ 440.541519][ T17] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 440.550970][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.562834][ T17] usb 6-1: config 0 descriptor?? 05:45:01 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:01 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000180)) 05:45:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x1, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="030012dc0000000000005396e19fcd73761aeccc18739ac19c9743e7369dd568cc342477ab7a47d4b27a5d5b9a1d81e670d89fb3e8db450f91ad7028679a4d52a0c922b76cd0a786f406fe90fa9cc95b"], 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @timestamp, @window={0x3, 0xe1a2, 0xf3}, @mss={0x2, 0xfbf}, @window={0x3, 0x7fff, 0x9}, @timestamp, @mss={0x2, 0x100001}], 0x7) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RREAD(r8, &(0x7f0000001300)={0x100b, 0x75, 0x2, {0x1000, "803b6f85891d339379e91d914e6b61bf39cb2fb8bb7f6bc587aa3369adff80f0d9b42e329fc5ba2161af100c3cea26009e3c620b2737143126f9fb11db9f5f40d870d59ae25b2ed493afc6164949f9dd91251c59d96ea9b9229215ae646763478352832bf84cadab1d57a3ac34d97af12632e84410f92028e0f2f639efb43946a23422e784d61df91a4b4152465e45aa531949bc087b5e8623aba7df63bdeb4bf460c324a62b00af51bcae7618c312d2f2203e9b9d835892f892a8de8818e16c735164886769847d2388ac21ec99a719a3d33843f3b92210f92a74f5046aa87ba4058ba5148909531f20e517c4caf8c0ec76b379ca3dc7d2254755243cf5a183d0e1a63aa39c7fb3233bec05f6484e420450976e27b7def4361f442b7256cafc98fa3414793efb5b8bd6bf7e170118d2b8005cf9aa73dbad6d5264955e5c5edcf3b0008a021b611f9ff1d5b1c4d3f1ec4f6d1bbcb4096b81648c9213d2612472583ff65c231bc5382f0f2d5062483810f4d39c195afaf74732e74efec658f4856cb0788b55f2aea88545bac9c0d11b7b454e2ed54bf541dbd9b3358f9c4d1833a5da3eaedc2be54013188535e1ca0570125d406084aa1c6bfdc6e540edeadc13498fbbb5c7c903795821fe2d98ddd61dd6b0ba24da42f1413778a6ace892e740aabbd40074203861a2a43562025086d042b496b47187251c5cd59043cc740fd1d961983c0d909ffb371de12a47945cfb73c5a63775ea6961ac3dde95f277724471949dd6578b68b4d00797136c64bb948b88702f254587b5705fc350cbdc587343b7f0ca59c9e43d91602d7cb33cf486bacde6a4435144b817988b9a7f14a87128bef3a5dae89ce46b821de07e33205d3e88f8b2dc8fe14ce26378db50e33812c423053cdf141b58f643f38be9ec5892c2cebba0c36924d4a1815796692012f3ec1be811307ac9d48b9fca7ed8952aa958c134181d86e507d229c6e99c441289c2958939ac315639c3a1721a1967dc034632d4cbafe8f1e46b4f5aeee2d2237951f9973ffaf73b0c8d78caed0b2d3d3b5af477dd7cd2a75c0c4984991fee9b7a3005d83de0713776d80b4ba906df4602f117fc35c06623978ddffc6a422800cf4cd74e0ea0f9678ce9585ecb2e99901617aad7918f7a9c61de44fd9c7d14df5f9a172e84b92f99a7d65576871ac49c44eaf630ba07209b0a85e6856a7154c0c56761088a40c30468f4039d81e2ce57acc2bf2c1a5cb8ddd304afad8f364930b958739c72f1d7ea6d23a1e190dd68b6f113211cb0afbac289ab5bd951e847c94b43c258bdbb2489c4c677321b695a0d616107d79d1b9cfb2d601db39cdffc0883e94f1e5834e2be151600792931d554065c5fafe433a479892012a038720dec48b3bebd29be5d90772a26181bc0fe4e69c780cee3343bd215c0c208663b2360e21699a253086112bb74917e6564245eadd870665de7fcdd353cbe4b3894e3f39091acccc3ffc3df7cb98c0d95481945d67f07fb2851923b9f049005465e15da3bd1ecaa4bb2c8db3e0614a600ed04e4211330cb9f0cde4bf57c669843fc2a9575a582323e4ba61cd2276611ccfece50338a0e997d75a924b1a5d2988ff85512c940609684a6c46caddb9bc21af3f1ddbc41c8a2c2b7788d5bcde6f1ac6c35dcf9a803eb767994f753e9d8d78c8edccd84192a679c0e00dda15c5111b22f11cb352055acb285b78067b07efe31cf005a470ce102fbe7162fa0788fdbc90c6ae7192a619c8ef94ffc6fcd149d8925cba0ae166f5f8092e33232f881bc813bd2f23a84b091ff5dfd105eb58a40e1fc66cdb9a44ab2bfdaed69e4e43b7b1baa76ad214262aa138e3e36a0d6afd8649f70e639c265787cabf1a84bcb137bef686c9296cf1746f61f8c9fc818cf7d10749b51342f48c9271e5a24e8878aadc6ee887f1527ec6dab1143552400c8109f23422c878ca1b8f2a56e3eaab224d153f4ff9e9d0bd91d3a77dd360d09049dc728896b2a7318f126fe42264bf1d838402fd35178d3704d5bf1502063b0436e0c710879c6efd8bdf297159e7c3a6f4349e14ea135e622b5a75f1368d1a5f9d3f48087be8df54c70096a628b84165d0e347a00b9b2baa853f3d2d28352415a1fb832c25bfb3a47114b48bbd8a8cba66585d0ef16e3706e2c1ba51ba7f8aa2b9d26db483454415c4eac9b592b717b682720dd05eab609c3a3e6a2980280e55e64adf0fe7d0a81f246deb707c756b376e84b728cb89af8808f36d93c69d372e42e3beeb6d55a169efb7a31f2a25f8a2136b934d47e67cdd29cd1883015997a06f012ea4d3658858d4955a8ef7891e24b00a58217d3be345965b7b685eaf737bfba196d3ad61ea406016eccb37d3b9e0e4bfbdc02c43c161e64a3eeda802d5f98d8264413f464a99e1059393c469cca49876a36067e1e4822170899b3e7c6e34b3b411832812c447fa02a5184c50ea43d89cc499350ffed8bd116cdd7106620d878022658bcfb7b5c6a0a6c602d503933068ced0ebc03fe26bd8bdf400ec281a233f3629e73300ed70b3b1b82bc044abbdecd37a77e54a9ee0ed4641cc0dbef7999f721384cf6980bbe8afdd1387b0fc0277117d818a76c1d803f2db477946a50ff0e16123ace09580121190c6f61552e666a0de0f0590aa79e5878425157eacb023320018d23b27f9276bff115f9d4f5229a89986f79ba30a0d893de904f41bbb0a01568509524acd511a95fd0b60bb2af2285ffd0a635eafc21fb6c7b950a1c1fbf972d37f485df4582fd13c208b80d5ec6afc4281b51164a219d8f614665dbe8abad638e0bbf0114bc77d75e9aeab59f3040b6cf8c0661b917088792ce124105b255b4bdc317dfb2cf59f423023f5919a7d578d08f6bc8b85c5b8cc3de94a840789567d4acdcbc1954a07ebd4831c4ec144204d35a52c37f6a4f845361fe1daf5e54f63573a119f77837efa1d639feae14f7dbea069eebfe915d81247ad52f795a3473d453ee7e69c9fb065c423ad0d5d0fd2df6ab3d3673a63dc105198df25442b2413432b559543ab2a3b4ccbf11ece0380ab896e65566340ec272fa5739a2129906a3f06b010e58e05b3543c52906222cce034916b3e3af4d1232439a39ed9dd85b5ae74431652e149dcb06b741d55394169505c721b1cdb313ad3c0fa81f4914e51caea89a6cf3111520449265806ac28022c26425b9cb4262ce955aa4cf0c6a17d4749308cf86cb85c230dd5d3de1b51af1d4e17b83a1a9da21829a177f5ebac9dc792e7c21f298a1298e281c12777e13851dcef3c5b2088844a1936c050447c33117d9f2eed0ef1492f79f87e9f9f2a4f523ff7230c5504756c2afb100d56db3d6656309f66bf18bd15daedcbb6768f076d27aac09490909c8dee56ec4386e715d048348728e28f9c550d56bc08ce93095dd20c32db857727fa44659080d18850150a2a5df6406473e81bb7fabbaebb2ae0f0eeb413c0c58efa093c5371d34679d0ca117d5fdbcbd74887100a4fa7dc9b4648fe38add7165f5b6d2b974f55521394785599771bfc80c81323142a8e2835fd7df4973ffd1a16562ff420695d31316466e3a36622a1318da4809c6550c3bbd0a5f9029cbf2471bcd4cfc1dd50fec0f76b426fd80b46ce2d990f9de2e22e3e42d90799dbe81fae88e6911c8bfda0c1e451fe3b03c8a67222e56329c46bb17503778930af65881e3a439a4393fadb0680d02b14189b97349951cc958d54d3e43422d1c6551f8b5696605ef5450ce3d9c538f9301a9c7c751faa2d282063c41cbafc703b3c1127c5bc36d85ca14821fa436f7183c64a8f848b9a2f56e00e8038ca03ca1363de52ac213b135d9df2dc0059d8d77b43c42699a2a716996354a2b13da4315be12bec1d6027ac643563cb1fc69bee31d3c812532b4c8be99ad000eb8209cec8ea63431c364bbd544dcaf8673cad9eda1545b07e42b8b06653364d75d2cfa52e984745d56b21335a79fb06622023bc4bf3e69be4ed20e2150b1eba4f1d69766f4b19461a8f281af43f2143f928dc8fd6cafd4a23e7bf4e97b8a40fccf836ad8aef39f59fd7dd3263f075e8f8be43f4819d67b1ab1c1027686ef599f8449888552eb63daf6e4ad9b27139e2ab872be4f0efef3214391831866d364535b6b47544609320b68e567a8d7caca6e59a5a2b6d3a2d6a473fa4b577ebcb97842a3a927dd8cacfebbf86ba2cbdbb4bf69efa9330c28c8b78871f06d9c42d0a492804a97c1be460b47809835a104a6a72f9623b5a3e60c8411ac6d3a532d87d28f1c2deb9c74ae01ca790dd1ccb232015e5bc57c5094ed72b37fe3668f308e5e9582b61a29aeac4aa777f0c3239a9b01e3fe44cf4fa541e8e5c8b3b730256865cbb2e5c5a230a45e74208b8317a5d324ec77302fd8b47aa0e3db23c4572675731671d73cfd3e5039043dbdfa7f4f9d56433ebda13ad906b73345879a7b4b421b99eb7469140c1d96e7fdbd1f4b96db691539708606075746b486de8bca4af7835849eb5c0e90f8dbb0aca24bd841e083997a4ef891d070553abf1804ef92e11aa5d138adac2b24ba49ad9f85962c6c21854555ebb19600f594d7c1c4771919f701970c0f8504dd311d8d6045bd6a806cf822134b4188859805e9531b3cde467257f79ad777b66267477f31384fd64c2b0987356950446df7ba6c6f7cd1b4b5bfa19bfcfcb935bfaf8664b4bd46bdf094fb23fa6b576b17477519e186f86ec5aedc261302e10d6718eb608ef60e6dd764ce899603022356d6123ddf253018b38c448863bed50de53d049fb167a007ace93eef5f7890584634659044232ee326fa833d90a725af375c6a477b2e392cb1641dd5b033a77dca6b69f61f0ed0373bcd3fada064379a6900393635217ddf898a112146580be3323756a4951ed5183daf060353fdeb302a6dd20ee6570b4d216cfee51a52832746d57b4b232674f0cbf16b0dcba8d61571f6da4173e8d71643d269c0e61a0d782621c3a1a5c61822bedcd83f7759557394ee7d6c922ae5064c9f17f9ad6d7a4d5bd66292d7b0f5094e8ecfb2ae12f6fc4328f0250e3a5785731eaf4bce092481ec472177d251001662831445bbbb2a9d765fc70e4e828b9f16f54500dcb7e9ed9179c4599be223953f6681fc743278b0242050200eabd7631a12e70a04b353c27f99bde80541982f65426bf50a88273ca2edac565367bdc9e40af9c70cdf4d67981d241dffac53a2917c17039b52644bdb3f8bf47936b3a35b274470dc7818b13b4cdc5cfa8d48f353a0fce85d43965c1d3674149f156e736f81edc4a48dd7f1e85eb359a861a24d68bb58734e2e5ea0be2ed2396a6fbc505ae02adb94d2af2e5c257cb8cc3e33cf999c1b551df5aa0654d6ce66ec7e07f8a557572637092ac5c8cfae957081bcc621f2704fa75a999e07a48301186edc612bd3d4249d60a8f6f2d700b1e98653717d75b6bb5a530e02b30ad481bc90bc81835aa52791fc44b0357c491b2a8b61d1116decdfd7536e4c54d9f9f691ebb870c148edb665c577e5a8de8dbf9cdf5f8c22bcaee407bee8127206fe72a64cfe88c36065656162f43e8418078ddc4bd68277c0310dcaeeedb47f837eb3140d192a076005ad069d75bb22ee7c6b19aa4f672fa0afa82eb185feef40ec8dc49b94f4dd91905b61ee9bdc9082c7b937cef8956ef2be7d6bca3c0f4e52a52e87e28d54b2869008a7f6ab290b2724f1473aa7f71e998ecb40cc6d182e955bb2da4a1dbc59abbd61ad29d8dd3dab7b6485c29645a8ab5baa"}}, 0x100b) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1, 0x111) 05:45:01 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x6, "3f74bedd4d21551f6584f84e485aaa9127db757e1d0f64fff154b5095909ff936725dbdfae3277fdc7a7a73c730757b83289ec8c3d02b9874f4cef20179e72e3"}) 05:45:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xc32f, &(0x7f0000001140)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x2000000000000011, 0x0, r0, 0x0) 05:45:01 executing program 4: r0 = memfd_create(&(0x7f0000000340)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x5) fallocate(r0, 0x0, 0x0, 0x8) 05:45:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1, 0x111) 05:45:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:01 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)) [ 440.809757][ T17] usb 6-1: USB disconnect, device number 75 [ 441.025847][ T2521] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 441.295910][ T2521] usb 4-1: Using ep0 maxpacket: 8 05:45:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002a80)=""/4098, 0x1002}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001a80), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x10000}}, 0x50) chown(&(0x7f00000002c0)='./file0/file0/file0/file0\x00', 0x0, 0x0) lchown(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000300)={0x90, 0x0, 0x3, {0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900a5eb}}}, 0x90) 05:45:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}}, {{0x0, 0x12, 0x0}}], 0x4, 0x20, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf250f0000003c000180080003000100000008000300000000001400020076657468315f6d616376746170000000140002007465", @ANYRES32=0x0, @ANYBLOB="08000300040000001400020076657468315f746f5f6873720000", @ANYRES32=0x0, @ANYBLOB="40fd0300000000002400018008000100", @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x4044000}, 0x18001) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400f7ffff16) creat(&(0x7f0000000680)='./bus\x00', 0x0) [ 441.436243][ T2521] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 441.444487][ T2521] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.457293][ T2521] usb 4-1: config 0 has no interface number 0 [ 441.463399][ T2521] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 441.476506][ T2521] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.490881][ T2521] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 441.500738][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.514655][ T2521] usb 4-1: config 0 descriptor?? [ 441.567509][ T2521] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 441.777499][ T2521] usb 4-1: USB disconnect, device number 47 05:45:02 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000001c0)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80001, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000080)={{0x0, @private=0xa010101, 0x4e21, 0x3, 'wlc\x00', 0x10, 0x401, 0x15}, {@private=0xa010102, 0x4e23, 0x10003, 0x5, 0xfffffff7, 0x7}}, 0x44) 05:45:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1, 0x111) 05:45:02 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xcc02, 0x0) 05:45:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002a80)=""/4098, 0x1002}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001a80), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) chown(&(0x7f00000002c0)='./file0/file0/file0/file0\x00', 0x0, 0x0) lchown(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000300)={0x90, 0x0, 0x3, {0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900a5eb}}}, 0x90) 05:45:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) 05:45:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000340)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x5) fallocate(r2, 0x0, 0x0, 0x8) 05:45:03 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) 05:45:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1, 0x111) 05:45:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x2, 0x0) write$9p(r2, &(0x7f00000000c0)="5c5dc679e7b1fca8d7c4b942554ba0a608c5d66dc8545082d2f12ee29f3127e95c4a04d2eac17a4b17a5ef5b814bbe009bc515e602076a9980531be39713c50d80e298dc6a951dc25d77cd3c65a075cbc1fe3c33576ec5e5ff55efc9dc8600003f71aa608acc6968b1cd2d6dbac7234ffc06086c01000010d3f882d617bc1f3d360e37a8529445701fe45cc00fa3205f72b72733c058a5e7f15605000000000000004fff8eb914601124d48797d4d1490d9a074bb02f873ee360202254b271f49d815d09afe2579b0746fbcad14b60e14bca91245822b33ca84e5ae6ebfaf503a630223c933d72966dbd3e099ac94f098f0777691877e94a8bec9a7cda2735393e26de02c4af7128c87203fd0a70f96abc8ec530d18ff43cf0c454c29ac37078eaa6347afffb410e60b3e8809273c2110d1f", 0x132) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x210000, 0x0) 05:45:03 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', 0x0, 0xffffff19, 0x0) 05:45:03 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 442.635743][ T17] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 442.875746][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 442.995712][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 443.003821][ T17] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.014072][ T17] usb 4-1: config 0 has no interface number 0 [ 443.020279][ T17] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 443.030815][ T17] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.043701][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 443.052833][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.064565][ T17] usb 4-1: config 0 descriptor?? [ 443.107832][ T17] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 443.312908][ T2521] usb 4-1: USB disconnect, device number 48 05:45:04 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:04 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5451, 0x0) 05:45:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:04 executing program 5: r0 = gettid() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = dup2(r1, r1) accept$inet6(r2, 0x0, 0x0) tkill(r0, 0xb) 05:45:04 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:04 executing program 0: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="880000000008000000000000000000000000000044000480080008400000000008000a400000000008000540000000000800084000000000080002400000000008000640000000080000000000000000080003400000000005000300000000000500030000000000060002400000000006000240000000000500030000000000050003003a"], 0x88}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c414}, 0x44000) 05:45:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:45:04 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:04 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, 0x0) 05:45:04 executing program 4: 05:45:04 executing program 5: 05:45:04 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 444.165646][ T8485] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 444.415649][ T8485] usb 4-1: Using ep0 maxpacket: 8 [ 444.545856][ T8485] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 444.553888][ T8485] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.575422][ T8485] usb 4-1: config 0 has no interface number 0 [ 444.582235][ T8485] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 444.594226][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 444.604738][ T8485] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.618055][ T8485] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 444.627758][ T8485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.638962][ T8485] usb 4-1: config 0 descriptor?? [ 444.656052][T16809] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 444.715738][ T8485] usb 4-1: invalid MIDI in EP 0 [ 444.721033][ T8485] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 444.885035][ T8485] usb 4-1: USB disconnect, device number 49 05:45:05 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:05 executing program 4: 05:45:05 executing program 5: 05:45:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 05:45:05 executing program 0: 05:45:06 executing program 0: 05:45:06 executing program 5: 05:45:06 executing program 4: 05:45:06 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:06 executing program 0: 05:45:06 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 445.775594][ T2480] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 446.015588][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 446.139004][ T2480] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 446.147035][ T2480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.161125][ T2480] usb 4-1: config 0 has no interface number 0 [ 446.167357][ T2480] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 446.181733][ T2480] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 446.193472][ T2480] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.210059][ T2480] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 446.219133][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.231764][ T2480] usb 4-1: config 0 descriptor?? [ 446.266113][T16858] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 446.325730][ T2480] usb 4-1: invalid MIDI in EP 0 [ 446.331363][ T2480] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 446.495173][ T2521] usb 4-1: USB disconnect, device number 50 [ 446.764226][ T0] NOHZ: local_softirq_pending 08 05:45:07 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7f, 0x0, 0x1, 0x3f, 0x8, 0x4, 0x1, 0xff, 0x2, 0x2, 0x1, 0x1f, 0x80, 0x8}, 0xe) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:07 executing program 5: 05:45:07 executing program 4: 05:45:07 executing program 0: 05:45:07 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:07 executing program 5: 05:45:07 executing program 4: 05:45:07 executing program 0: 05:45:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x7a00) sendto$l2tp6(r3, &(0x7f0000000000)="538eaed7e895f1e75f15cb47d06f7538b770d5a1bf856176fd5b97fb4fd5a46e41639dfc0a5ffb64bb2e95fa1bb887c70302886b6a2e0edbca576b702e2de4f9c97f436bf20561e96b57a2484a19c66217e76500f6b69cf8f6a15a31c7017b3ae362f038bfb59879b63d2db1dcbc2edcd788dc7e5b4fbb575853490f621b123d0957b83d6520d091e8d854d4a21e6c1514cff767d8c7d6c0b1a49b0f0f8e8a40db0b06ee4b57371d", 0xa8, 0x10, &(0x7f00000000c0)={0xa, 0x0, 0x2, @private0, 0x7ff, 0x3}, 0x20) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:07 executing program 0: [ 447.365585][ T2480] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 447.625524][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 447.745627][ T2480] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 447.753622][ T2480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.764788][ T2480] usb 4-1: config 0 has no interface number 0 [ 447.771487][ T2480] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 447.783061][ T2480] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 447.794040][ T2480] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.807687][ T2480] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 447.817294][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.830600][ T2480] usb 4-1: config 0 descriptor?? [ 447.855712][T16898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 447.915694][ T2480] usb 4-1: invalid MIDI in EP 0 [ 447.920992][ T2480] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 448.080830][ T2480] usb 4-1: USB disconnect, device number 51 05:45:09 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:09 executing program 5: 05:45:09 executing program 4: 05:45:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:09 executing program 0: 05:45:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x5d, 0x9}) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:09 executing program 0: 05:45:09 executing program 4: 05:45:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:09 executing program 0: 05:45:09 executing program 5: 05:45:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x8, @multicast1, 0x4e22, 0x1, 'fo\x00', 0x1, 0x2, 0x6f}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xd4, 0x7f}) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 448.981410][ T8485] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 449.225534][ T8485] usb 4-1: Using ep0 maxpacket: 8 [ 449.345474][ T8485] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 449.353584][ T8485] usb 4-1: config 0 has no interface number 0 [ 449.363841][ T8485] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 449.374957][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 449.391736][ T8485] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 449.402321][ T8485] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 449.411482][ T8485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.420623][ T8485] usb 4-1: config 0 descriptor?? [ 449.445882][T16942] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 449.505578][ T8485] usb 4-1: invalid MIDI in EP 0 [ 449.510905][ T8485] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 449.673725][ T8485] usb 4-1: USB disconnect, device number 52 05:45:10 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 05:45:10 executing program 4: 05:45:10 executing program 5: 05:45:10 executing program 0: 05:45:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x6, 0x2, 0x7, 0xc1, 0x4, 0x2, 0x6, 0x2, r1}, &(0x7f0000000240)=0x20) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x7a00) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x20, 0x0, 0x7f, 0xfffc, 0x6}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x30, 0xf0, 0x690, 0x240, 0x708, 0x7, 0x2, 0x0, {0x9, 0x3}, {0x8, 0x8, 0x1}, {0x2, 0xffffffff, 0x1}, {0xe1e5, 0x8}, 0x1, 0xd1, 0x1a, 0x7, 0x1, 0x9, 0x2045fac5, 0x6, 0x6, 0x20, 0x7fff, 0x0, 0x2e, 0x100, 0x1, 0x6}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:10 executing program 5: 05:45:10 executing program 0: 05:45:10 executing program 4: 05:45:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 05:45:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) dup2(r2, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:10 executing program 4: [ 450.555431][ T5] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 450.805365][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 450.926425][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 450.934420][ T5] usb 4-1: config 0 has no interface number 0 [ 450.940698][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 450.951806][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 450.961863][ T5] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 450.972447][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 450.982379][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.000069][ T5] usb 4-1: config 0 descriptor?? [ 451.021406][T16983] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 451.075556][ T5] usb 4-1: invalid MIDI in EP 0 [ 451.081306][ T5] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 451.241686][ T5] usb 4-1: USB disconnect, device number 53 05:45:12 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:12 executing program 0: 05:45:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 05:45:12 executing program 5: 05:45:12 executing program 4: 05:45:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:12 executing program 5: 05:45:12 executing program 0: 05:45:12 executing program 4: 05:45:12 executing program 1: socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 05:45:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x38, 0x0, 0xfffffd3f) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000080)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000000)={0xe2c0, 0x3, [{0xd}, {0x7}, {0xc, 0x1}]}) r5 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:12 executing program 5: setrlimit(0x7, &(0x7f0000000500)) epoll_create(0x1) [ 452.125317][ T8485] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 452.365249][ T8485] usb 4-1: Using ep0 maxpacket: 8 [ 452.495539][ T8485] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 452.503594][ T8485] usb 4-1: config 0 has no interface number 0 [ 452.512367][ T8485] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 452.524013][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 452.534532][ T8485] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 452.545905][ T8485] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 452.554982][ T8485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.568487][ T8485] usb 4-1: config 0 descriptor?? [ 452.587486][T17029] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 452.645486][ T8485] usb 4-1: invalid MIDI in EP 0 [ 452.650764][ T8485] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 452.813343][ T8485] usb 4-1: USB disconnect, device number 54 05:45:13 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 05:45:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') syncfs(r0) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', 0x0, 0x0, 0x0) 05:45:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff322f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c4, r4, 0x0, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x65, 0x3, "b52786abbce8f55c146443178b9ded8147c0699be039c465fd9363cfaeafebb47145c2386394863418c684514bb122b248fd685e67776f3e9faada3a720f8f9b4e84eaed0168ce7c9e82c841a5d7b5a18ae98e4caee488ae5b2aef376ac87e79f9"}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "0ad89e32783fa7590cd4f4c9a944ea202c4e856ced37d7b84a4cb46cacff8a6412aaeae1c45da92cbf1a903f339e3988c89a3c742abfb36c2f06d994f351e610d2852bd749c6fe1f6a1ef64ff7a5087c200f5b4ea3c92bfa632ff5d99f8be8c7aeba089a9e51ce5b90515ac37472638905b06150c41e09cbc1e6ae0f841ebb1db73dac97f240137918533356d185d9fd56944ab2e69359d5e423"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x29c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffd, @local, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @ipv4={[], [], @multicast2}, 0xfffffffa}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1fc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3c4ac0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @rand_addr=0x64010101}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c0}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x48081) 05:45:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x3e}, 0x4e21, 0x2, 'lc\x00', 0x30, 0x4, 0x7b}, 0x2c) 05:45:13 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:45:14 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/7) 05:45:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8400202) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 453.398846][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 05:45:14 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', 0x0}) 05:45:14 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000)="136730a8cb72580497c49ce7f55800", 0xf, 0x0, 0x0, 0x0) 05:45:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) times(&(0x7f0000000040)) 05:45:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_usb_connect$uac1(0x4, 0x107, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x823d, 0x3}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x96, "ffd1713fbd"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x0, 0x8, "b863cf6fed"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x3f, "768c5aa657"}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x4, 0x2, [0x2, 0x3]}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x2, "d8f2df5896"}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x2, 0x6, "62d5d323"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x7, 0x8, 'd'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x0, 0x1, "8268f0", "8b"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7f, 0x1, 0x9, "6b47b7"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x882, 0x4242, 0x1, "8c1f"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x1, 0x48, 0x4, "b2", "61a761"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x1, 0x4, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x6, 0x1, {0x7, 0x25, 0x1, 0x0, 0x80, 0xd8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x4, 0x40, 0xc3, "b5f5b53887b5"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xff, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0xb0, 0x40, {0x7, 0x25, 0x1, 0x80, 0x9, 0x7}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x4, 0x3, 0x20, 0x40, 0x9}, 0x4a, &(0x7f0000000180)={0x5, 0xf, 0x4a, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bf51bd7fed3048f93736b92b5f87e35d"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "030ee6d5d0effbd7f706c63fb3bbc0f7"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "25648acfd788170526e59b83fafe383c"}, @ptm_cap={0x3}]}, 0x1, [{0xcf, &(0x7f0000000200)=@string={0xcf, 0x3, "b6aa726e9f400c86db290d6405df990722e4b491288bf47069431e5528a65969a8aca29731b6de6cb51779d0f79779454557162aac36ac546c7796d051705652eabbede3347125d982a96aac3eb34903da9cedd6ddb158911618847ddc5dd1b5deb1fc41ed10b4b610466ecb602c68176b3c3902376c1ebba2ee67b3bdf2763068964eb23920c2af6179816b425850f47623a59be695b350b7a31404683720dc4e96193dd41936ff8aca509da68a7cccc6f64473883323be784a62cb1d2e0f5e5b78dbd12687c59b0ff4d02f23"}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x0, 0xa, 0xa2, {0xa2, 0x30, "8bd7fd78fd240dfe31099dc37be1b3cc15d98792fd06fcc3be8fc6b1b515eaa145404202930dcb1f7785af2f85e900efae196e12638d5fd28195d923f42f7ff9ce1fdaa472097d0f7fb1b8c7ab754a26a2d404d7fa434f5658c7d2a53bbe915adfd7ad199c025a499a6c5629fed808d1fdb45373aab89f055f85ed9cba7ec3c8e8fdd3378cd31b19f9ce22cfd13fb76b4ceed817511100fa0a4173d9b2fcaa19"}}, &(0x7f0000000480)={0x0, 0x3, 0xca, @string={0xca, 0x3, "e405c58b3d6714d8389e9d74b036ad88e9b756c17f3bb07beceaf158ebdc48f42508bec6a2b21a0c17ae770d91434c51c48991289edf9e215f65f983899e8e0a2abda9d52844ef7c89631449ba28a1d4ceb49dff197c66b2a03f71c7188b084450b00dd34ae07079399cc1f5b13579fad8ef5a83178daff2f43641524ea84dd09aff13b08fb8810af15019ffa3f01c329d050adfc8432f1cb532fa27e5d29971eb71bd4bedfc8bb44d9275fddc05af74620454078677f77a6736416b1a4e12b03c98eeaa7d2b5d75"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x20, 0x17, 0x41, "caebcdb1655f18c88c823ced78f877992013f891704908ef6caf21ba44d14a76f05faffc56470f90593202d33765488ef1872f9d1ae1fa0f90d86beae7ee2e35ee"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x81, 0x1, "e9"}, &(0x7f00000006c0)={0x20, 0x82, 0x3, "853a61"}, &(0x7f0000000700)={0x20, 0x83, 0x1, '\f'}, &(0x7f0000000740)={0x20, 0x84, 0x1, '}'}, &(0x7f0000000780)={0x20, 0x85, 0x3, "c57649"}}) [ 453.685326][ T8485] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 453.935227][ T8485] usb 4-1: Using ep0 maxpacket: 8 [ 454.076757][ T8485] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 454.084956][ T8485] usb 4-1: config 0 has no interface number 0 [ 454.091393][ T8485] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 454.102570][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 454.112654][ T8485] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 454.122722][ T8485] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 454.132722][ T8485] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 454.142079][ T8485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.154063][ T8485] usb 4-1: config 0 descriptor?? [ 454.185510][T17077] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 454.236194][ T8485] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 454.409733][ T8485] usb 4-1: USB disconnect, device number 55 05:45:15 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') pread64(r0, 0x0, 0x0, 0x0) 05:45:15 executing program 0: semop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x1}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 05:45:15 executing program 4: futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) 05:45:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000100)='./file0\x00') futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 05:45:15 executing program 5: syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "07fdff", 0x2c, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x3, 0xa}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) 05:45:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 05:45:15 executing program 0: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000240)={'team_slave_0\x00', 0x3f}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xec, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x69ba}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x660}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc76}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x37e}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8e96f958db52c0be}, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file1\x00', 0x8, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2026c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x8000000200036150, 0x200800007b, 0x0, 0x0, 0x0, 0x10000001, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2008480, &(0x7f000000a000)) 05:45:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB='\"']) 05:45:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="674be777f5930000000000000000acc292597b41cd4c9ce093c2c7b5023de3fbcf2e73cffbce4f26efd9f6f090ea399aab", 0x31}, {&(0x7f0000000e80)="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", 0x550}], 0x2}}], 0x1, 0x0) 05:45:15 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) mlock(&(0x7f000091d000/0x2000)=nil, 0x2000) [ 455.259319][T17158] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 455.305196][ T2480] usb 4-1: new high-speed USB device number 56 using dummy_hcd 05:45:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='{^(^\x00') [ 455.575129][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 455.700948][ T2480] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 455.714058][ T2480] usb 4-1: config 0 has no interface number 0 [ 455.729871][ T2480] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 455.743114][ T2480] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 455.759231][ T2480] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 455.772488][ T2480] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 455.791161][ T2480] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 455.801194][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.811433][ T2480] usb 4-1: config 0 descriptor?? [ 455.835538][T17134] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 455.906283][ T2480] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 456.073523][ T2480] usb 4-1: USB disconnect, device number 56 05:45:17 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x800000000004}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000006f40), 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x37}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:45:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000002d80)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="d109", 0x2}], 0x1, &(0x7f0000000500)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) 05:45:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) close(r2) 05:45:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42e, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e16a13", 0x3f8, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce5402000000053d5dea6b259fe5d00000000000023493b87aa0568f00b1c71a8242373244ad2439adc07ea9f69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a803721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) 05:45:17 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getpeername$netlink(r2, 0x0, 0x0) [ 456.743248][T17197] IPv6: addrconf: prefix option has invalid lifetime 05:45:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 05:45:17 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xe5, 0x209f, 0xffffffff}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) write(r3, 0x0, 0x0) 05:45:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000016c0)="ee", 0x1}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0", 0x7a}, {&(0x7f0000000640)="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", 0x11a}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78bd644a4f358945013c7228ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34c32e6b384f83aae6d36aeb6430fcb2939da257013f355311245f449afac154a6576a3d7f5", 0x93}, {&(0x7f0000001940)="cd96bdb578810f358b2aaaf2bacafe0e46d11b73fdeffa5726afc6a69f941fc2599736bb61d60c3c812d5418a56a3ae461b9528b039a4f69e204b182765bfcff36add10caad94fd56acc52258ccc796153c7484baa5c84b6e151acc1074b87cecf8f792f3d06", 0x66}, {&(0x7f00000019c0)="b65836c3d98df987e963b3f2c6cd9a05289662018771ef0319e3d867bbdf237a39faca25190ea708520ec42d202286b0e1971368ddbefe57a0321b27c8f96fc298daf744180af6729d8334216e730e3b47c1a011a77c60e62147ce42dede17c7719e1c0989322ff56d", 0x69}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}, {&(0x7f00000003c0)="9c5948ce9528017c27de9f5216d452d930531cfa4f71b2", 0x17}, {&(0x7f0000001ec0)="328da01e65d586a9c68a28f1b6767f0cf53ac14b8dcb6f7c26d8e5", 0x1b}], 0x3}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000004c0)="d38874b7ef7ea6f303c4074feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d", 0x69}], 0x1}}], 0x3, 0x0) [ 456.986814][ T2651] usb 4-1: new high-speed USB device number 57 using dummy_hcd 05:45:17 executing program 4: msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x291}) [ 457.260588][ T2651] usb 4-1: Using ep0 maxpacket: 8 05:45:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800000003, 0x8) getpgid(0x0) bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='\b', 0x1, 0x4004001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) [ 457.410973][ T2651] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 457.422810][ T2651] usb 4-1: config 0 has no interface number 0 [ 457.453353][ T2651] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 457.492963][ T2651] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 05:45:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 457.531426][ T2651] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 457.553384][ T2651] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 457.606050][ T2651] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 457.640222][ T2651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.667999][ T2651] usb 4-1: config 0 descriptor?? [ 457.705441][T17192] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 457.776060][ T2651] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 457.944698][ T3790] usb 4-1: USB disconnect, device number 57 05:45:19 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:45:19 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setresgid(0x0, 0x0, 0x0) 05:45:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x14e22, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x14e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) 05:45:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') open(&(0x7f0000000040)='./file0\x00', 0x80, 0x40) preadv(r1, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)={0x1, 0x0, 0x1875a1ccb644a937, 0x1}) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r2) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)='\x00') r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:45:19 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) open(0x0, 0x1c1042, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) 05:45:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4042) r1 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x81805) sendfile(r0, r1, 0x0, 0x2000005) 05:45:19 executing program 0: chdir(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) clone(0xa2040500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:45:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) dup3(r0, r1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000080)) 05:45:19 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) sendmmsg(r0, &(0x7f0000004500)=[{{&(0x7f0000000180)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="64cd8df341b60958ee695fc806b0", 0xe}], 0x1}}], 0x1, 0x0) 05:45:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x2) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB='\"']) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 05:45:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b2e201b74863601501c0d19c1054d359b5c5df8ed23a2e6f7179", 0x1a}, {&(0x7f0000000b80)="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", 0x2b7}], 0x2}}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 458.805085][ T2651] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 459.055103][ T2651] usb 4-1: Using ep0 maxpacket: 8 [ 459.185159][ T2651] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 459.196720][ T2651] usb 4-1: config 0 has no interface number 0 [ 459.211032][ T2651] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 459.244968][ T2651] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 459.254862][ T2651] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 459.275154][ T2651] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 459.284294][ T2651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.300094][ T2651] usb 4-1: config 0 descriptor?? [ 459.325452][T17276] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.332387][T17276] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.573287][ T2651] usb 4-1: USB disconnect, device number 58 05:45:20 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:45:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) 05:45:20 executing program 0: ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'veth1_to_team\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) 05:45:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x9, 0x2) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007757c700c000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x854, 0x2, [@TCA_RSVP_POLICE={0x850, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x2, 0x0, 0x0, 0x0, 0x3ff}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 05:45:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) read(r0, &(0x7f0000000380)=""/42, 0xf0) 05:45:20 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x2bc) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 460.166980][T17363] skbuff: bad partial csum: csum=26740/24369 headroom=64 headlen=3712 05:45:20 executing program 1: rt_sigaction(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000002c0)) 05:45:20 executing program 2: r0 = socket$inet(0x2, 0x6, 0x10000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept4(r1, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80, 0x80800) setsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, 0x62) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x7a00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9cfa000000143e745c0040", @ANYRES16=r7, @ANYBLOB="030700000000000000000b00000004000180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x40881) r8 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0x218, 0x0, 0x0, 0x158, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x7}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "c62d", 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7f, 0x40}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 'bridge_slave_1\x00', 'veth0\x00', {}, {0xff}, 0x5e, 0x0, 0x32}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x532c404a, 0x4, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff64) sendto$inet(r8, &(0x7f00000012c0)='\f', 0x1, 0x4800, 0x0, 0x0) 05:45:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xcc) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb) 05:45:20 executing program 1: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x301}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 05:45:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="5401000024003b0d000000000000010000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x154}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', r5, 0x4, 0x1, 0x95, 0x4, 0x2, @mcast1, @private0, 0x80, 0x40, 0x10001}}) [ 460.391480][T17398] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 460.434931][ T3790] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 460.482918][T17398] dns_resolver: Unsupported server list version (0) [ 460.523326][T17408] dns_resolver: Unsupported server list version (0) [ 460.684906][ T3790] usb 4-1: Using ep0 maxpacket: 8 [ 460.806251][ T3790] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 460.814259][ T3790] usb 4-1: config 0 has no interface number 0 [ 460.830814][ T3790] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 460.849129][ T3790] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 460.860746][ T3790] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 460.871116][ T3790] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 460.880265][ T3790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.890895][ T3790] usb 4-1: config 0 descriptor?? [ 460.915304][T17372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 460.922192][T17372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 461.142261][ T3790] usb 4-1: USB disconnect, device number 59 05:45:22 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:45:22 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_out(r1, 0x5450, 0x0) 05:45:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 05:45:22 executing program 1: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket$inet(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, 0x0, 0x0) 05:45:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:22 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x2bc) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) 05:45:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5608, 0x2) 05:45:22 executing program 0: open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x801e}) 05:45:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x5, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 05:45:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r2) [ 461.984932][ T5] usb 4-1: new high-speed USB device number 60 using dummy_hcd 05:45:22 executing program 4: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f0000000240)='\x17\x86\x16T\xdd\xa4Ga\x1c:\xc5T\xe7\x1e&R\xa33\xebm\xd5\x032\xd4\xb5u\xa7&\xcf\x0f\x92y\xb3\x89\xaf\x9b\xec7\x03\x1a\xb3\x93_\xe2\xf4q\x809\xa6qa\xe6(}\n\x03\xc0Q\xf2\x04&\x7fC\x95\xc4z\x01TK\xe1\x0e\x8fD\x956V\xb5\xd4%\xc2G`\xccR\xb5\xd9\x8es\xf9\xf7%\xa4\xb0\xdc_{\x0f\xe7\"\x7f[\xfa4)\xe4\x9a\xbel\xb4\xa7I\xf8T\x96\xb2cw\xe6b\n\x80<\xecZ\xdb\xb0 \x94\xd77\xf5\xaf\x14\xb5$O\x92<.o_\xef\xed\xe0\xd5\x06\x8f\xcc\xf0\xc6\xab\x8cw&\x06\x90W\xf3c\x9d\xd1N\x8fp\xf3\xcd\xbf\x05\x8f\xd5\xbd\xbd\xed\xc86\xf4\xfbL.\xb8\xc0\x95z\xb7\x9c\xb7\xffk\x13,v:\x0f\xc4\xc7\xd0(\xb20\xe8\xe5\xc9\xaa\xc2\x1dL6\x9e\x81\xa9\x13\x87kb\xd59\xc7c\x1b\x97,\x00'/237) [ 462.133846][T17495] nfs: Unknown parameter '†TݤGa:ÅTç&R£3ëmÕ2Ôµu§&Ï’y³‰¯›ì7³“_âôq€9¦qaæ(} [ 462.133846][T17495] ÀQò&C•ÄzTKáD•6VµÔ%ÂG`ÌRµÙŽsù÷%¤°Ü_{ç"[ú4)äš¾l´§IøT–²cwæb [ 462.133846][T17495] €<ìZÛ° ”×7õ¯µ$O’<.o_ïíàÕÌðÆ«Œw&WócÑNpóÍ¿Õ½½íÈ6ôûL.¸À•z·œ·ÿk' [ 462.168857][T17496] nfs: Unknown parameter '†TݤGa:ÅTç&R£3ëmÕ2Ôµu§&Ï’y³‰¯›ì7³“_âôq€9¦qaæ(} 05:45:22 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0xe4, 0x0) [ 462.168857][T17496] ÀQò&C•ÄzTKáD•6VµÔ%ÂG`ÌRµÙŽsù÷%¤°Ü_{ç"[ú4)äš¾l´§IøT–²cwæb [ 462.168857][T17496] €<ìZÛ° ”×7õ¯µ$O’<.o_ïíàÕÌðÆ«Œw&WócÑNpóÍ¿Õ½½íÈ6ôûL.¸À•z·œ·ÿk' [ 462.224893][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 462.345209][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.353227][ T5] usb 4-1: config 0 has no interface number 0 [ 462.376241][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 462.394874][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 462.434927][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 462.444671][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 462.464990][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.488375][ T5] usb 4-1: config 0 descriptor?? [ 462.505213][T17468] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 462.512140][T17468] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 462.755702][ T5] usb 4-1: USB disconnect, device number 60 05:45:23 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:45:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 05:45:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sync() 05:45:23 executing program 4: 05:45:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x1, 'ipvlan0\x00', {}, 0x2}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:23 executing program 0: 05:45:23 executing program 0: 05:45:23 executing program 4: 05:45:23 executing program 1: 05:45:24 executing program 5: 05:45:24 executing program 4: 05:45:24 executing program 0: [ 463.634956][ T5] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 463.874776][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 463.994823][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.002897][ T5] usb 4-1: config 0 has no interface number 0 [ 464.013246][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 464.024259][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 464.034286][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 464.044675][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 464.054248][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.065400][ T5] usb 4-1: config 0 descriptor?? [ 464.085159][T17563] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 464.095210][T17563] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 464.315149][ T2651] usb 4-1: USB disconnect, device number 61 05:45:25 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:45:25 executing program 1: 05:45:25 executing program 5: 05:45:25 executing program 4: 05:45:25 executing program 0: 05:45:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r2, 0x0, 0x0, 0x4ffc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xffffffffffffff5e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:25 executing program 5: 05:45:25 executing program 0: 05:45:25 executing program 4: 05:45:25 executing program 1: 05:45:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x8) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:25 executing program 0: [ 465.234894][ T3790] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 465.474700][ T3790] usb 4-1: Using ep0 maxpacket: 8 [ 465.594833][ T3790] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 465.602928][ T3790] usb 4-1: config 0 has no interface number 0 [ 465.610137][ T3790] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 465.621783][ T3790] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 465.632298][ T3790] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 465.642858][ T3790] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 465.652502][ T3790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.670354][ T3790] usb 4-1: config 0 descriptor?? [ 465.705960][T17628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 465.712810][T17628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 465.932405][ T3790] usb 4-1: USB disconnect, device number 62 05:45:27 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:45:27 executing program 4: 05:45:27 executing program 5: 05:45:27 executing program 0: 05:45:27 executing program 1: 05:45:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup3(r0, r1, 0x80000) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x31, "c5bba0d9d832eed09ab76e416d5e89c0ba7f01f6ee29d011ad712d92252ae7b4d439ae9adb279af7ecff361ff4d4b893ba"}, &(0x7f0000000080)=0x55) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r3, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:27 executing program 1: 05:45:27 executing program 0: 05:45:27 executing program 1: 05:45:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)="85c2a5", 0x3}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) 05:45:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)) 05:45:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x17, 0x7, 0x1, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x30, 0x5}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\a\x00@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 466.642091][T17697] new mount options do not match the existing superblock, will be ignored [ 466.796722][T17709] new mount options do not match the existing superblock, will be ignored [ 466.894852][ T2651] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 467.154763][ T2651] usb 4-1: Using ep0 maxpacket: 8 [ 467.284716][ T2651] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 467.292737][ T2651] usb 4-1: config 0 has no interface number 0 [ 467.300497][ T2651] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 467.312480][ T2651] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 467.323391][ T2651] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 467.334085][ T2651] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 467.343826][ T2651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.353676][ T2651] usb 4-1: config 0 descriptor?? [ 467.375130][T17692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 467.382035][T17692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 467.609487][ T2651] usb 4-1: USB disconnect, device number 63 05:45:28 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x300, "a3ef07749fa55f625aa6af3c7307f2179cba335a2fd5ede515d502000000feffff63af872a0a18ecf6449fe66884b33c61b3927917b2d8ef665ad9b19f55dd7d020a724232a8b58e9eb39b463929bef2c468429967c5e7be"}, 0x68) 05:45:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x6e24, 0x0, @ipv4={[], [], @local}}, 0x1c) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2020) 05:45:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x17, 0x7, 0x4, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x30, 0x5}, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b34, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 05:45:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0x2, 0x0, 0x0, 0x12}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0x7f, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)="85c2a5", 0x3}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) 05:45:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b61, &(0x7f0000001180)={0x0, 0x2}) [ 468.200783][T17766] dlm: Unknown command passed to DLM device : 0 [ 468.200783][T17766] 05:45:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b61, &(0x7f0000001180)={0x6}) [ 468.249624][T17774] new mount options do not match the existing superblock, will be ignored 05:45:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b61, &(0x7f0000001180)={0x0, 0xff000000}) 05:45:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001180)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 05:45:28 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x2bc) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000010680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x122) [ 468.456255][T17789] new mount options do not match the existing superblock, will be ignored [ 468.755952][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 468.762910][T17706] Bluetooth: hci0: sending frame failed (-49) [ 470.824755][ T8485] Bluetooth: hci0: command 0x1001 tx timeout [ 470.831905][T17706] Bluetooth: hci0: sending frame failed (-49) [ 472.904394][ T3790] Bluetooth: hci0: command 0x1009 tx timeout 05:45:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x1e, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}}, 0x9c) 05:45:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x0, 0x0, 0x325}, 0x9c) 05:45:37 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x4) 05:45:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x44100, 0x0) 05:45:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000480)={0x0, 0x0, 0x1000000}) 05:45:37 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xc5f}) 05:45:37 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x82, &(0x7f0000000300)=""/178, &(0x7f0000000100)=0xb2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x110, 0x110, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x42}, @dev, 0xff, 0x0, 0xa, 0x0, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0x4f, 0xfff8, 0x0, 0x101, 'macvtap0\x00', 'syzkaller0\x00', {0x1fe}, {}, 0x0, 0x300}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x1}}}, {{@arp={@private=0xa010100, @loopback, 0xffffff00, 0x0, 0x7, 0x0, {@mac=@dev={[], 0x35}, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0xfff, 0x0, 0xe1, 0x1, 0x1f, 'veth0_to_bond\x00', 'erspan0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3ff, 0x0, 0xec}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="cdc8e626644c", @empty, @dev={0xac, 0x14, 0x14, 0x2e}, 0xa}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x448) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x0, 0x70, 0x7f, 0x5, 0x0, 0xd3, 0x0, 0xfffffffffffffe00, 0x1480, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000240)}, 0x14020, 0x7, 0x0, 0x8, 0x5, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 05:45:37 executing program 1: pipe(&(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:45:37 executing program 4: 05:45:37 executing program 4: 05:45:37 executing program 4: 05:45:37 executing program 5: 05:45:37 executing program 1: 05:45:37 executing program 4: 05:45:38 executing program 3: 05:45:38 executing program 5: 05:45:38 executing program 1: 05:45:38 executing program 4: 05:45:38 executing program 0: 05:45:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) fremovexattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00') r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x7a00) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040000) 05:45:38 executing program 0: 05:45:38 executing program 5: 05:45:38 executing program 4: 05:45:38 executing program 1: 05:45:38 executing program 3: 05:45:38 executing program 5: 05:45:38 executing program 3: 05:45:38 executing program 0: 05:45:38 executing program 4: 05:45:38 executing program 5: 05:45:38 executing program 1: 05:45:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000000)=0x9) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:39 executing program 5: 05:45:39 executing program 3: 05:45:39 executing program 0: 05:45:39 executing program 4: 05:45:39 executing program 1: 05:45:39 executing program 3: 05:45:39 executing program 0: 05:45:39 executing program 5: 05:45:39 executing program 4: 05:45:39 executing program 1: 05:45:39 executing program 5: 05:45:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getown(r1, 0x9) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:40 executing program 0: 05:45:40 executing program 3: 05:45:40 executing program 4: 05:45:40 executing program 5: 05:45:40 executing program 1: 05:45:40 executing program 1: 05:45:40 executing program 5: 05:45:40 executing program 3: 05:45:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000180), 0x5) 05:45:40 executing program 1: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r3, r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, &(0x7f0000000400)=ANY=[], 0x94) 05:45:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000040"], 0x10}, 0x0) 05:45:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="a3883c6d989a4e965de2baeb4124599f884ec8a8fd7c3a5338afe7d4b45afdc7aa78bebf46e9c314e878e15b23c2d3832fb38503394bcd8b0baa1f0ebb1fbd86ab2f1c81a76065265577d5c17455f92d3919fb32fdfe566963c353a761a2ba5961606a681d13cd7b748fc7b9be1be353a471e68748cf6f3df5a468c24c8cac730ec07e824c0503eabb28aeca210d8b43661fbd60ae926429501a29a16225eb4a1e4cd95d774c524c70d78c91d20b77ab4dd52ef6d6e2b0a033c73dd99ac130d0bfbc10efd00a03be81d71ce788b53a78a1b82e7b7d04f9c8bb90ad86c0c890f66d88996b8f", 0xe5) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200000c0, 0x0, 0x0) r4 = semget(0x3, 0x2, 0x44) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000100)=""/30) 05:45:41 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x10) 05:45:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x761, 0x0, 0xe7}, 0x8) 05:45:41 executing program 4: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/102378, 0x18fea}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000440)=[{0x0}, {&(0x7f00000001c0)=""/96, 0x60}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x896e, 0x0, 0x0, 0x800e00948) shutdown(r2, 0x0) shutdown(r3, 0x0) 05:45:41 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x7e2780e3) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mlockall(0x3) mmap(&(0x7f0000fee000/0x12000)=nil, 0x800000, 0x1, 0x12, r2, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x80000, 0x1, 0x12, r1, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x20011, r3, 0x0) 05:45:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x902, &(0x7f0000000240), 0x4) 05:45:41 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x7e2780e3) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mlockall(0x3) mmap(&(0x7f0000fee000/0x12000)=nil, 0x800000, 0x1, 0x12, r1, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x20011, r2, 0x0) 05:45:41 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f00000003c0)='o', 0x1) 05:45:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001440)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000040), &(0x7f0000000200)=0xb8) 05:45:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000008400000009"], 0x88}, 0x0) 05:45:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x5f9a95533db69d9f, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:system_r:kernel_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20040080) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000180)=0x6a, 0x1) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:41 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 05:45:41 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x0, 0x2}, 0x1c) 05:45:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000040), &(0x7f0000000080)=0x18) 05:45:41 executing program 3: open$dir(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 05:45:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100008"], 0x10}, 0x0) 05:45:42 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) sendmsg$inet_sctp(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@authinfo={0x10}], 0x10}, 0x0) 05:45:42 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[{0xc}], 0xc}, 0x0) 05:45:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, 0x0, 0x10}, 0x0) 05:45:42 executing program 3: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0), &(0x7f00000000c0)=0x4) 05:45:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@init={0x14}], 0x14}, 0x20181) 05:45:42 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x7e2780e3) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mlockall(0x3) mmap(&(0x7f0000fee000/0x12000)=nil, 0x800000, 0x1, 0x12, r2, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x80000, 0x1, 0x12, r1, 0x0) 05:45:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x7a00) getsockopt$inet6_buf(r2, 0x29, 0x30ffcca543936ac9, &(0x7f0000001300)=""/4096, &(0x7f0000000000)=0x1000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) dup2(r2, r0) 05:45:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000140)={r2}, 0x8) 05:45:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000000)=0x84) 05:45:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x1c}], 0x1c}, 0x0) 05:45:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockname$unix(r2, 0x0, &(0x7f0000000080)) 05:45:42 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="1c1c4e200000000015"], &(0x7f0000000140)=0xce) 05:45:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000000), &(0x7f0000000140)=0x8) 05:45:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB='}'], 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @local}, &(0x7f0000000080)=0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000002c002b0d005c9fa0b8440d4a2ead22bc", @ANYRES32=r2, @ANYRES64], 0x50}}, 0x0) 05:45:42 executing program 5: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/102378, 0x18fea}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000440)=[{0x0}, {&(0x7f00000001c0)=""/96, 0x60}, {0x0, 0x3b}, {0x0}, {0x0}, {0x0}], 0x100000000000010a) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x896e, 0x0, 0x0, 0x800e00948) shutdown(r2, 0x0) shutdown(r3, 0x0) 05:45:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe26a}, 0x14) 05:45:42 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x12, &(0x7f0000000140)={0x1}, 0x1) [ 481.918518][T18073] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 481.952411][T18079] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 05:45:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) r4 = mq_open(&(0x7f0000000000)='(^@\x00', 0x40, 0x50, &(0x7f0000000040)={0xfffffffffffffffb, 0x0, 0x2, 0x100}) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000080)={0x4, 0x4, 0x20, 0xfffffffffffff1e5, 0x0, 0x2d3a}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:43 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f00000003c0)='o', 0x1) close(r0) 05:45:43 executing program 1: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/102378, 0x18fea}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000440)=[{0x0}, {&(0x7f00000001c0)=""/96, 0x60}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = getpgid(0x0) fcntl$lock(r3, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000001, r4}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x896e, 0x0, 0x0, 0x800e00948) shutdown(r2, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) fcntl$lock(r6, 0xd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000300010005}) shutdown(r5, 0x0) 05:45:43 executing program 4: 05:45:43 executing program 3: 05:45:43 executing program 4: 05:45:43 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2600000000000010"]}) 05:45:43 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x8, 0xfef3) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) 05:45:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB='{'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000002c00270d000000000000000200000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000a0001006261736963000000380002003400028008000100040000002800028024000100000005"], 0x68}}, 0x0) 05:45:43 executing program 5: 05:45:43 executing program 4: 05:45:43 executing program 3: 05:45:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:44 executing program 3: 05:45:44 executing program 1: 05:45:44 executing program 4: 05:45:44 executing program 5: 05:45:44 executing program 3: 05:45:44 executing program 0: 05:45:44 executing program 5: 05:45:44 executing program 4: 05:45:44 executing program 3: 05:45:44 executing program 1: 05:45:44 executing program 4: 05:45:44 executing program 3: 05:45:44 executing program 5: 05:45:44 executing program 0: 05:45:44 executing program 1: 05:45:44 executing program 4: 05:45:44 executing program 2: r0 = socket$inet(0x2, 0x2, 0x100800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) prctl$PR_SET_PDEATHSIG(0x1, 0x39) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1cfdc1, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r4, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:44 executing program 3: 05:45:44 executing program 5: 05:45:44 executing program 0: 05:45:44 executing program 4: 05:45:44 executing program 1: 05:45:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:45 executing program 3: 05:45:45 executing program 5: 05:45:45 executing program 1: 05:45:45 executing program 0: 05:45:45 executing program 4: 05:45:45 executing program 4: 05:45:45 executing program 5: 05:45:45 executing program 1: 05:45:45 executing program 3: 05:45:45 executing program 0: 05:45:45 executing program 4: 05:45:45 executing program 5: 05:45:45 executing program 3: 05:45:45 executing program 1: 05:45:45 executing program 0: 05:45:45 executing program 4: 05:45:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "8eb9bc5222d88b4440cf4eda1eefd9fbe3839b90b358bc8f4ec40a55249fbefada71602b4dba1719f6c6be6a8a8f3a142ba390e4b1564ce16d4e1af9d959f4d30abaff4d184182162eb8812e835084b4783513e72996d558fdb12687bc1f87e099e8652d488e7845f9e74af7195676f78cc8c1a39572508e1e9e5e73f2cc48a00bd70eca5d84c85de98e528a19f57de0d169c822bb9a064c77784836ee8430ef7223767e17c136d14ecaba6ea44e6b7d25862850ec4de159eb6a12761027f51aa6384758cc2b1f0e6bfaa59ab8c9be786497a9bded446272d4ed98221ada4393d4c0175bd4cbec64b66b095d2619a1989b7e5def73fdc961961276cc315c8020"}]}}]}, 0x154}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000100)=@can={0x1d, r7}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="6d660345b57c4953bd1e0f8fb2c7daf42176fd4b1bd9bf4638f98a5be7dcde1a163da7da3c24a660e495a54b4c1a814e028de72ff3e61d698db1c4cab0053ea5292c3a385f91d6beff88527ee8daeae4d904934a3a97a92174202d9afb62d1e6339426f184c62e0307fb728884981c7ae186d4a07c", 0x75}, {&(0x7f0000000200)="46e9", 0x2}, {&(0x7f0000000240)="3b3def93c57e3ffff6a96789fc5d75f1012daf115d01f3bb5493bf6e02cb409cd2ad430b5fcc527e00347a05d6da692f655adb0908d317805ba36514ce441daba83edd2db382aa91c1c59b2b7e4e", 0x4e}, {&(0x7f0000001300)="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", 0x1000}], 0x4}, 0x4800) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:46 executing program 3: 05:45:46 executing program 5: r0 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r0, 0x2) 05:45:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x2, 0x0) r3 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r3, 0x0, 0xffff, 0x5) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r2, r3, 0x0, 0x10001) 05:45:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000004680)=[{&(0x7f0000001480)="94", 0xfec6}], 0x1) fallocate(r1, 0x8, 0x0, 0x8000) 05:45:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0xc93ee6c35bad86b0, 0x0, 0x0) 05:45:46 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 05:45:46 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:46 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x440f, 0x0) 05:45:46 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:46 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902240001000000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 485.882391][ T8485] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 485.902366][ T5] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 485.944273][ T2651] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 486.062387][ T2480] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 486.072494][ T17] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 486.122442][ T8485] usb 6-1: Using ep0 maxpacket: 8 [ 486.152357][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 486.182352][ T2651] usb 2-1: Using ep0 maxpacket: 8 [ 486.262690][ T8485] usb 6-1: config 0 has no interfaces? [ 486.269360][ T8485] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 486.281213][ T8485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.293989][ T8485] usb 6-1: config 0 descriptor?? [ 486.302330][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 486.302621][ T2651] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 486.310421][ T5] usb 4-1: config 0 has no interface number 0 [ 486.310462][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 486.310480][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 486.310501][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 486.318621][ T2480] usb 5-1: Using ep0 maxpacket: 8 [ 486.318854][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 486.358854][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 486.376978][ T2651] usb 2-1: config 0 has no interface number 0 [ 486.391941][ T2651] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 486.401449][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:45:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 486.406028][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 486.421401][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 486.446852][ T2651] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 486.449325][ T5] usb 4-1: config 0 descriptor?? [ 486.475451][ T2651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.483904][ T2480] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 486.495077][ T2480] usb 5-1: config 0 has no interface number 0 [ 486.498130][T18234] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.510286][T18234] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.510711][ T2480] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 486.532424][ T17] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.545196][ T2651] usb 2-1: config 0 descriptor?? [ 486.554407][ T17] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.581199][ T17] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 486.591339][T18239] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.603118][T18239] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.621855][ T2480] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 486.649944][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.664973][ T2480] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 486.678616][ T17] usb 1-1: config 0 descriptor?? [ 486.709663][ T2480] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 486.728386][ T2480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.747222][ T2480] usb 5-1: config 0 descriptor?? [ 486.772581][T18246] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.786627][T18246] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.968842][ T2480] usb 4-1: USB disconnect, device number 64 [ 487.088346][ T2651] usb 2-1: USB disconnect, device number 8 [ 487.094443][ T17] usb 6-1: USB disconnect, device number 76 05:45:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xffd, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) write$char_usb(r4, &(0x7f0000000000)="03690b39b028b6d3cb5050212552878efaf58995780ff470b070bdd05d6f193c90ab84dda4fc6bc59d50c556ad7ed2b3", 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000800, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x10) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/32) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffffffffffc1, 0x880000) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCGABS0(r7, 0x80184540, &(0x7f0000000280)=""/238) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000200)=[{0x1, 0xb2, 0x81, 0x6}, {0x1, 0xff, 0x0, 0x5}, {0x0, 0x4, 0x4, 0xfb}, {0xffe1, 0x1, 0xff, 0x9}, {0x4, 0x4, 0x8b, 0x101}, {0x3, 0xed, 0xfe, 0x5}, {0x7ff, 0x40, 0x43, 0x50}]}, 0x10) ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4008af13, &(0x7f0000000100)={0x3, 0x6}) sendto$inet(r5, &(0x7f00000012c0)='\f', 0x1b, 0x0, 0x0, 0x0) [ 487.369937][ T2521] usb 1-1: USB disconnect, device number 59 05:45:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r1) pause() ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:48 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:48 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902240001000000000904020002"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:48 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 487.550001][ T2651] usb 5-1: USB disconnect, device number 68 05:45:48 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 487.892081][ T17] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 487.922041][ T2521] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 487.929224][ T8485] usb 6-1: new high-speed USB device number 77 using dummy_hcd 05:45:48 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 488.152136][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 488.182093][ T2521] usb 4-1: Using ep0 maxpacket: 8 [ 488.182293][ T8485] usb 6-1: Using ep0 maxpacket: 8 [ 488.272127][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 488.284511][ T17] usb 2-1: config 0 has no interface number 0 [ 488.290586][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 488.303690][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 488.314224][ T8485] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 488.322396][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 488.332076][ T2521] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 488.334744][ T8485] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.344119][ T2521] usb 4-1: config 0 has no interface number 0 [ 488.351439][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 488.366315][ T8485] usb 6-1: config 0 has no interface number 0 [ 488.371156][ T2521] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 488.374219][ T8485] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.390527][ T2521] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 488.398532][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.412306][ T2521] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 488.415557][ T2651] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 488.431513][ T2521] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 488.441385][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.446359][ T17] usb 2-1: config 0 descriptor?? [ 488.460599][ T2521] usb 4-1: config 0 descriptor?? 05:45:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x4, 0x0, 0x0) 05:45:49 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 488.482559][T18380] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 488.489481][T18380] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 488.491946][ T8485] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 488.542453][T18378] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 488.549374][T18378] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 488.561166][ T8485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.579291][ T8485] usb 6-1: config 0 descriptor?? [ 488.672203][ T2651] usb 5-1: Using ep0 maxpacket: 8 [ 488.690967][ T8485] snd-usb-audio: probe of 6-1:0.2 failed with error -2 [ 488.793072][ T2651] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 488.806086][ T2651] usb 5-1: config 0 has no interface number 0 [ 488.829533][ T2651] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 488.862154][ T8485] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 488.901143][ T2651] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 488.953315][ T2651] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 488.979956][ T2651] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 488.992532][ T2651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.015874][ T2651] usb 5-1: config 0 descriptor?? [ 489.042522][T18391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 489.049482][T18391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 489.131934][ T8485] usb 1-1: Using ep0 maxpacket: 8 [ 489.252273][ T8485] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 489.260287][ T8485] usb 1-1: config 0 has no interface number 0 [ 489.291850][ T8485] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 489.308887][ T8485] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 489.319648][ T2521] usb 4-1: USB disconnect, device number 65 [ 489.344951][ T8485] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 05:45:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x7a00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x7a00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) [ 489.414894][ T8485] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 489.430333][ T8485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.450709][ T8485] usb 1-1: config 0 descriptor?? [ 489.472298][T18405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 489.479566][T18405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 489.526990][ T2651] usb 2-1: USB disconnect, device number 9 [ 489.630722][ T8485] usb 6-1: USB disconnect, device number 77 05:45:50 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 489.937719][ T8485] usb 5-1: USB disconnect, device number 69 05:45:50 executing program 5 (fault-call:1 fault-nth:0): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:50 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 490.270835][ T8485] usb 1-1: USB disconnect, device number 60 [ 490.281850][ T2521] usb 4-1: new high-speed USB device number 66 using dummy_hcd 05:45:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:51 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 490.447606][ T2651] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 490.481817][ T3790] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 490.536701][T18566] FAULT_INJECTION: forcing a failure. [ 490.536701][T18566] name failslab, interval 1, probability 0, space 0, times 0 [ 490.551641][ T2521] usb 4-1: Using ep0 maxpacket: 8 [ 490.558091][T18566] CPU: 1 PID: 18566 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 490.566767][T18566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.576814][T18566] Call Trace: [ 490.580111][T18566] dump_stack+0x18f/0x20d [ 490.584449][T18566] should_fail.cold+0x5/0x14 [ 490.589046][T18566] ? sock_kmalloc+0xb5/0x100 [ 490.593639][T18566] should_failslab+0x5/0xf [ 490.598054][T18566] __kmalloc+0x27d/0x340 [ 490.602301][T18566] sock_kmalloc+0xb5/0x100 [ 490.606762][T18566] __ipv6_sock_mc_join+0x456/0xa20 [ 490.611895][T18566] do_ipv6_mcast_group_source+0x166/0x1e0 [ 490.617596][T18566] do_ipv6_setsockopt.constprop.0+0x3532/0x42b0 [ 490.623820][T18566] ? ipv6_update_options+0x3a0/0x3a0 [ 490.629083][T18566] ? mark_lock+0xbc/0x1710 [ 490.633491][T18566] ? mark_lock+0xbc/0x1710 [ 490.637902][T18566] ? __lock_acquire+0x16e3/0x56e0 [ 490.642909][T18566] ? mark_lock+0xbc/0x1710 [ 490.647304][T18566] ? __lock_acquire+0xc1e/0x56e0 [ 490.652220][T18566] ? aa_label_sk_perm+0xf2/0x560 [ 490.657138][T18566] ? aa_profile_af_perm+0x2e0/0x2e0 [ 490.662313][T18566] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 490.668283][T18566] ? aa_sk_perm+0x316/0xaa0 [ 490.672763][T18566] ? aa_af_perm+0x230/0x230 [ 490.677247][T18566] ipv6_setsockopt+0xc2/0x170 [ 490.681902][T18566] udpv6_setsockopt+0x5d/0xa0 [ 490.686560][T18566] __sys_setsockopt+0x24a/0x480 [ 490.691388][T18566] ? __sock_recv_wifi_status+0x1b0/0x1b0 [ 490.696995][T18566] ? vfs_write+0x1b0/0x6b0 [ 490.701403][T18566] ? fput_many+0x2f/0x1a0 [ 490.705707][T18566] ? ksys_write+0x1a5/0x250 [ 490.710187][T18566] ? lock_is_held_type+0xb0/0xe0 [ 490.715102][T18566] __x64_sys_setsockopt+0xba/0x150 [ 490.720188][T18566] ? lockdep_hardirqs_on+0x6a/0xe0 [ 490.725274][T18566] do_syscall_64+0x60/0xe0 [ 490.729677][T18566] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 490.735557][T18566] RIP: 0033:0x45c1d9 [ 490.739425][T18566] Code: Bad RIP value. [ 490.743474][T18566] RSP: 002b:00007f283b72fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 490.751857][T18566] RAX: ffffffffffffffda RBX: 000000000002d540 RCX: 000000000045c1d9 [ 490.759803][T18566] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 490.767755][T18566] RBP: 00007f283b72fca0 R08: 0000000000000108 R09: 0000000000000000 [ 490.775713][T18566] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 05:45:51 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 490.783659][T18566] R13: 0000000000c9fb6f R14: 00007f283b7309c0 R15: 000000000078bf0c [ 490.879106][T18570] FAULT_INJECTION: forcing a failure. [ 490.879106][T18570] name failslab, interval 1, probability 0, space 0, times 0 [ 490.896741][T18570] CPU: 1 PID: 18570 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 490.905426][T18570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.915473][T18570] Call Trace: [ 490.918764][T18570] dump_stack+0x18f/0x20d [ 490.923129][T18570] should_fail.cold+0x5/0x14 [ 490.927773][T18570] should_failslab+0x5/0xf [ 490.932291][T18570] kmem_cache_alloc+0x40/0x3b0 [ 490.937132][T18570] ? ipv6_sysctl_rtcache_flush+0x110/0x110 [ 490.942993][T18570] dst_alloc+0x9e/0x641 [ 490.947145][T18570] ip6_dst_alloc+0x2e/0x100 [ 490.951654][T18570] ip6_create_rt_rcu+0x295/0x540 [ 490.956580][T18570] ? ip6_mtu+0x470/0x470 [ 490.960827][T18570] ip6_pol_route_lookup+0xbd7/0x1ad0 [ 490.966120][T18570] ? fib6_select_path+0xc90/0xc90 [ 490.971139][T18570] ? save_stack+0x32/0x40 [ 490.975444][T18570] ? save_stack+0x1b/0x40 [ 490.979759][T18570] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 490.985551][T18570] ? __kmalloc+0x17a/0x340 [ 490.989942][T18570] ? sock_kmalloc+0xb5/0x100 [ 490.994519][T18570] ? __ipv6_sock_mc_join+0x456/0xa20 [ 490.999786][T18570] ? do_ipv6_mcast_group_source+0x166/0x1e0 [ 491.005657][T18570] ? do_ipv6_setsockopt.constprop.0+0x3532/0x42b0 [ 491.012045][T18570] ? ipv6_setsockopt+0xc2/0x170 [ 491.016872][T18570] ? udpv6_setsockopt+0x5d/0xa0 [ 491.021758][T18570] fib6_rule_lookup+0x111/0x6f0 [ 491.026592][T18570] ? fib6_select_path+0xc90/0xc90 [ 491.031603][T18570] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 491.037578][T18570] ? fib6_lookup+0x2d0/0x2d0 [ 491.042166][T18570] ? lock_acquire+0x1f1/0xad0 [ 491.046841][T18570] ? fs_reclaim_acquire+0xf/0x40 [ 491.051765][T18570] ? find_held_lock+0x2d/0x110 [ 491.056505][T18570] ? mark_lock+0xbc/0x1710 [ 491.060995][T18570] rt6_lookup+0x15f/0x220 [ 491.065311][T18570] ? dst_discard+0x50/0x50 [ 491.069732][T18570] __ipv6_sock_mc_join+0x80e/0xa20 [ 491.074826][T18570] do_ipv6_mcast_group_source+0x166/0x1e0 [ 491.080525][T18570] do_ipv6_setsockopt.constprop.0+0x3532/0x42b0 [ 491.086756][T18570] ? ipv6_update_options+0x3a0/0x3a0 [ 491.092027][T18570] ? mark_lock+0xbc/0x1710 [ 491.096423][T18570] ? mark_lock+0xbc/0x1710 [ 491.100818][T18570] ? __lock_acquire+0x16e3/0x56e0 [ 491.105834][T18570] ? mark_lock+0xbc/0x1710 [ 491.110355][T18570] ? __lock_acquire+0xc1e/0x56e0 [ 491.115282][T18570] ? aa_label_sk_perm+0xf2/0x560 [ 491.120331][T18570] ? aa_profile_af_perm+0x2e0/0x2e0 [ 491.125515][T18570] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 491.131508][T18570] ? aa_sk_perm+0x316/0xaa0 [ 491.136008][T18570] ? aa_af_perm+0x230/0x230 [ 491.140503][T18570] ipv6_setsockopt+0xc2/0x170 [ 491.145160][T18570] udpv6_setsockopt+0x5d/0xa0 [ 491.149820][T18570] __sys_setsockopt+0x24a/0x480 [ 491.154659][T18570] ? __sock_recv_wifi_status+0x1b0/0x1b0 [ 491.160278][T18570] ? vfs_write+0x1b0/0x6b0 [ 491.164676][T18570] ? fput_many+0x2f/0x1a0 [ 491.168991][T18570] ? ksys_write+0x1a5/0x250 [ 491.173500][T18570] ? lock_is_held_type+0xb0/0xe0 [ 491.178419][T18570] __x64_sys_setsockopt+0xba/0x150 [ 491.183506][T18570] ? lockdep_hardirqs_on+0x6a/0xe0 [ 491.188593][T18570] do_syscall_64+0x60/0xe0 [ 491.192993][T18570] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 491.198864][T18570] RIP: 0033:0x45c1d9 [ 491.202744][T18570] Code: Bad RIP value. [ 491.206803][T18570] RSP: 002b:00007f283b72fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 491.215197][T18570] RAX: ffffffffffffffda RBX: 000000000002d540 RCX: 000000000045c1d9 [ 491.223222][T18570] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 491.231187][T18570] RBP: 00007f283b72fca0 R08: 0000000000000108 R09: 0000000000000000 [ 491.239158][T18570] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.247110][T18570] R13: 0000000000c9fb6f R14: 00007f283b7309c0 R15: 000000000078bf0c [ 491.265810][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 491.269575][ T2521] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 05:45:51 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 491.283289][ T2521] usb 4-1: config 0 has no interface number 0 [ 491.291555][ T3790] usb 2-1: Using ep0 maxpacket: 8 [ 491.311115][ T2521] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 05:45:52 executing program 0 (fault-call:1 fault-nth:0): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 491.369365][ T2521] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 491.387057][ T2651] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 491.393990][T18577] FAULT_INJECTION: forcing a failure. [ 491.393990][T18577] name failslab, interval 1, probability 0, space 0, times 0 [ 491.407306][ T2651] usb 6-1: config 0 has no interface number 0 [ 491.421726][ T3790] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 491.427232][ T2651] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 491.429796][ T3790] usb 2-1: config 0 has no interface number 0 [ 491.429833][ T3790] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 491.429851][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 491.429868][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 491.429894][ T3790] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 491.447917][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 491.465673][ T2521] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 491.474639][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 491.491040][T18577] CPU: 0 PID: 18577 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 491.509131][ T2651] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 491.516104][T18577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.516111][T18577] Call Trace: [ 491.516133][T18577] dump_stack+0x18f/0x20d [ 491.516155][T18577] should_fail.cold+0x5/0x14 [ 491.516176][T18577] should_failslab+0x5/0xf [ 491.516192][T18577] kmem_cache_alloc+0x40/0x3b0 [ 491.516211][T18577] ? ipv6_sysctl_rtcache_flush+0x110/0x110 [ 491.516226][T18577] dst_alloc+0x9e/0x641 [ 491.516247][T18577] ip6_dst_alloc+0x2e/0x100 [ 491.516265][T18577] ip6_create_rt_rcu+0x295/0x540 [ 491.516281][T18577] ? ip6_mtu+0x470/0x470 [ 491.516306][T18577] ip6_pol_route_lookup+0xbd7/0x1ad0 [ 491.530611][ T2651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.533965][T18577] ? fib6_select_path+0xc90/0xc90 [ 491.533984][T18577] ? __lock_acquire+0x16e3/0x56e0 [ 491.534019][T18577] fib6_rule_lookup+0x111/0x6f0 [ 491.534034][T18577] ? fib6_select_path+0xc90/0xc90 [ 491.534048][T18577] ? __lock_acquire+0xc1e/0x56e0 [ 491.534062][T18577] ? fib6_lookup+0x2d0/0x2d0 [ 491.534096][T18577] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 491.553629][ T2651] usb 6-1: config 0 descriptor?? [ 491.556267][T18577] ? mark_held_locks+0x9f/0xe0 [ 491.556280][T18577] ? do_raw_spin_lock+0x120/0x2b0 [ 491.556302][T18577] rt6_lookup+0x15f/0x220 [ 491.556319][T18577] ? dst_discard+0x50/0x50 [ 491.556356][T18577] ip6_mc_find_dev_rcu+0x39/0x210 [ 491.571988][T18539] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 491.575394][T18577] ip6_mc_source+0x1ce/0x15b0 [ 491.596424][T18539] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 491.602230][T18577] ? __ipv6_sock_mc_join+0x6b1/0xa20 [ 491.689268][T18577] do_ipv6_mcast_group_source+0x10f/0x1e0 [ 491.694991][T18577] do_ipv6_setsockopt.constprop.0+0x3532/0x42b0 [ 491.701226][T18577] ? ipv6_update_options+0x3a0/0x3a0 [ 491.706503][T18577] ? mark_lock+0xbc/0x1710 [ 491.710921][T18577] ? mark_lock+0xbc/0x1710 [ 491.715347][T18577] ? __lock_acquire+0x16e3/0x56e0 [ 491.720382][T18577] ? mark_lock+0xbc/0x1710 [ 491.724804][T18577] ? __lock_acquire+0xc1e/0x56e0 [ 491.729748][T18577] ? aa_label_sk_perm+0xf2/0x560 [ 491.734695][T18577] ? aa_profile_af_perm+0x2e0/0x2e0 [ 491.739896][T18577] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 491.745904][T18577] ? aa_sk_perm+0x316/0xaa0 [ 491.750411][T18577] ? aa_af_perm+0x230/0x230 [ 491.754917][T18577] ipv6_setsockopt+0xc2/0x170 [ 491.759596][T18577] udpv6_setsockopt+0x5d/0xa0 [ 491.764280][T18577] __sys_setsockopt+0x24a/0x480 [ 491.769136][T18577] ? __sock_recv_wifi_status+0x1b0/0x1b0 [ 491.774770][T18577] ? vfs_write+0x1b0/0x6b0 [ 491.779187][T18577] ? fput_many+0x2f/0x1a0 [ 491.783518][T18577] ? ksys_write+0x1a5/0x250 [ 491.788019][T18577] ? lock_is_held_type+0xb0/0xe0 [ 491.792962][T18577] __x64_sys_setsockopt+0xba/0x150 [ 491.798070][T18577] ? lockdep_hardirqs_on+0x6a/0xe0 [ 491.803202][T18577] do_syscall_64+0x60/0xe0 [ 491.807622][T18577] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 491.813509][T18577] RIP: 0033:0x45c1d9 [ 491.817395][T18577] Code: Bad RIP value. [ 491.821454][T18577] RSP: 002b:00007f283b72fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 491.829863][T18577] RAX: ffffffffffffffda RBX: 000000000002d540 RCX: 000000000045c1d9 [ 491.837829][T18577] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 491.841517][ T2651] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 491.845979][T18577] RBP: 00007f283b72fca0 R08: 0000000000000108 R09: 0000000000000000 [ 491.845988][T18577] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.845996][T18577] R13: 0000000000c9fb6f R14: 00007f283b7309c0 R15: 000000000078bf0c [ 491.850758][ T2521] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 491.862623][T18539] FAULT_INJECTION: forcing a failure. [ 491.862623][T18539] name failslab, interval 1, probability 0, space 0, times 0 [ 491.869751][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.907665][ T3790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.917011][ T3790] usb 2-1: config 0 descriptor?? [ 491.919907][T18539] CPU: 1 PID: 18539 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 491.923507][ T2521] usb 4-1: config 0 descriptor?? [ 491.930599][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.930605][T18539] Call Trace: [ 491.930625][T18539] dump_stack+0x18f/0x20d [ 491.930646][T18539] should_fail.cold+0x5/0x14 [ 491.957851][T18539] should_failslab+0x5/0xf [ 491.962269][T18539] kmem_cache_alloc+0x2a9/0x3b0 [ 491.967126][T18539] getname_flags.part.0+0x50/0x4f0 [ 491.972240][T18539] getname+0x8e/0xd0 [ 491.976137][T18539] do_sys_openat2+0xf7/0x3b0 [ 491.980806][T18539] ? build_open_flags+0x650/0x650 [ 491.985818][T18539] ? __mutex_unlock_slowpath+0xe2/0x610 [ 491.991365][T18539] ? wait_for_completion+0x260/0x260 [ 491.996674][T18539] __x64_sys_openat+0x13f/0x1f0 [ 492.001611][T18539] ? __ia32_sys_open+0x1c0/0x1c0 [ 492.006547][T18539] ? ksys_write+0x1a5/0x250 [ 492.011048][T18539] ? lock_is_held_type+0xb0/0xe0 [ 492.016002][T18539] ? do_syscall_64+0x1c/0xe0 [ 492.020596][T18539] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 492.026580][T18539] do_syscall_64+0x60/0xe0 [ 492.030996][T18539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 492.036883][T18539] RIP: 0033:0x45c1d9 [ 492.040766][T18539] Code: Bad RIP value. [ 492.044825][T18539] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 492.053231][T18539] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 492.061200][T18539] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c 05:45:52 executing program 4 (fault-call:1 fault-nth:3): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 492.069159][T18539] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 492.077124][T18539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.085094][T18539] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 492.104651][T18529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 492.118209][T18540] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 492.139410][T18540] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 492.147445][T18529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 492.168877][T18605] FAULT_INJECTION: forcing a failure. [ 492.168877][T18605] name failslab, interval 1, probability 0, space 0, times 0 [ 492.181813][T18605] CPU: 1 PID: 18605 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 492.190561][T18605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.200609][T18605] Call Trace: [ 492.203904][T18605] dump_stack+0x18f/0x20d [ 492.208239][T18605] should_fail.cold+0x5/0x14 [ 492.212832][T18605] ? trace_hardirqs_on+0x5f/0x220 [ 492.217858][T18605] ? sock_kmalloc+0xb5/0x100 [ 492.222451][T18605] should_failslab+0x5/0xf [ 492.226867][T18605] __kmalloc+0x69/0x340 [ 492.231026][T18605] sock_kmalloc+0xb5/0x100 [ 492.235449][T18605] ip6_mc_source+0x11cf/0x15b0 [ 492.240231][T18605] do_ipv6_mcast_group_source+0x10f/0x1e0 [ 492.245957][T18605] do_ipv6_setsockopt.constprop.0+0x3532/0x42b0 [ 492.252207][T18605] ? ipv6_update_options+0x3a0/0x3a0 [ 492.257519][T18605] ? mark_lock+0xbc/0x1710 [ 492.261937][T18605] ? mark_lock+0xbc/0x1710 [ 492.266364][T18605] ? __lock_acquire+0x16e3/0x56e0 [ 492.271399][T18605] ? mark_lock+0xbc/0x1710 [ 492.275827][T18605] ? __lock_acquire+0xc1e/0x56e0 [ 492.280773][T18605] ? aa_label_sk_perm+0xf2/0x560 [ 492.285717][T18605] ? aa_profile_af_perm+0x2e0/0x2e0 [ 492.290912][T18605] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 492.296923][T18605] ? aa_sk_perm+0x316/0xaa0 [ 492.301435][T18605] ? aa_af_perm+0x230/0x230 [ 492.301544][ T2504] usb 6-1: USB disconnect, device number 78 [ 492.305935][T18605] ipv6_setsockopt+0xc2/0x170 [ 492.316466][T18605] udpv6_setsockopt+0x5d/0xa0 [ 492.321146][T18605] __sys_setsockopt+0x24a/0x480 [ 492.326000][T18605] ? __sock_recv_wifi_status+0x1b0/0x1b0 [ 492.331641][T18605] ? vfs_write+0x1b0/0x6b0 [ 492.336059][T18605] ? fput_many+0x2f/0x1a0 [ 492.340388][T18605] ? ksys_write+0x1a5/0x250 [ 492.344896][T18605] ? lock_is_held_type+0xb0/0xe0 [ 492.349959][T18605] __x64_sys_setsockopt+0xba/0x150 [ 492.355069][T18605] ? lockdep_hardirqs_on+0x6a/0xe0 [ 492.360178][T18605] do_syscall_64+0x60/0xe0 [ 492.364595][T18605] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 492.370486][T18605] RIP: 0033:0x45c1d9 [ 492.374371][T18605] Code: Bad RIP value. [ 492.378440][T18605] RSP: 002b:00007f283b72fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 05:45:53 executing program 4 (fault-call:1 fault-nth:4): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 492.386846][T18605] RAX: ffffffffffffffda RBX: 000000000002d540 RCX: 000000000045c1d9 [ 492.394808][T18605] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 492.402782][T18605] RBP: 00007f283b72fca0 R08: 0000000000000108 R09: 0000000000000000 [ 492.410749][T18605] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000003 [ 492.418716][T18605] R13: 0000000000c9fb6f R14: 00007f283b7309c0 R15: 000000000078bf0c [ 492.482335][T18621] FAULT_INJECTION: forcing a failure. [ 492.482335][T18621] name failslab, interval 1, probability 0, space 0, times 0 [ 492.495348][T18621] CPU: 1 PID: 18621 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 492.504012][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.514062][T18621] Call Trace: [ 492.517351][T18621] dump_stack+0x18f/0x20d [ 492.521686][T18621] should_fail.cold+0x5/0x14 [ 492.526281][T18621] should_failslab+0x5/0xf [ 492.530700][T18621] kmem_cache_alloc_trace+0x47/0x2d0 [ 492.536087][T18621] ip6_mc_add_src+0x6a4/0x9d0 [ 492.540777][T18621] ip6_mc_source+0xed1/0x15b0 [ 492.545471][T18621] do_ipv6_mcast_group_source+0x10f/0x1e0 [ 492.551199][T18621] do_ipv6_setsockopt.constprop.0+0x3532/0x42b0 [ 492.557456][T18621] ? ipv6_update_options+0x3a0/0x3a0 [ 492.562745][T18621] ? mark_lock+0xbc/0x1710 [ 492.567166][T18621] ? mark_lock+0xbc/0x1710 [ 492.571592][T18621] ? __lock_acquire+0x16e3/0x56e0 [ 492.576623][T18621] ? mark_lock+0xbc/0x1710 [ 492.581042][T18621] ? __lock_acquire+0xc1e/0x56e0 [ 492.581822][ T2521] usb 4-1: USB disconnect, device number 66 [ 492.585978][T18621] ? aa_label_sk_perm+0xf2/0x560 [ 492.596779][T18621] ? aa_profile_af_perm+0x2e0/0x2e0 [ 492.601979][T18621] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 492.608004][T18621] ? aa_sk_perm+0x316/0xaa0 [ 492.612507][T18621] ? aa_af_perm+0x230/0x230 [ 492.617015][T18621] ipv6_setsockopt+0xc2/0x170 [ 492.621692][T18621] udpv6_setsockopt+0x5d/0xa0 [ 492.626373][T18621] __sys_setsockopt+0x24a/0x480 [ 492.631235][T18621] ? __sock_recv_wifi_status+0x1b0/0x1b0 [ 492.636868][T18621] ? vfs_write+0x1b0/0x6b0 [ 492.641285][T18621] ? fput_many+0x2f/0x1a0 [ 492.645615][T18621] ? ksys_write+0x1a5/0x250 [ 492.650131][T18621] ? lock_is_held_type+0xb0/0xe0 [ 492.655086][T18621] __x64_sys_setsockopt+0xba/0x150 [ 492.660309][T18621] ? lockdep_hardirqs_on+0x6a/0xe0 [ 492.665417][T18621] do_syscall_64+0x60/0xe0 [ 492.669834][T18621] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 492.675723][T18621] RIP: 0033:0x45c1d9 [ 492.679608][T18621] Code: Bad RIP value. 05:45:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f00000001c0)) tkill(r3, 0x1b) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 492.683670][T18621] RSP: 002b:00007f283b72fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 492.692080][T18621] RAX: ffffffffffffffda RBX: 000000000002d540 RCX: 000000000045c1d9 [ 492.700045][T18621] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 492.708014][T18621] RBP: 00007f283b72fca0 R08: 0000000000000108 R09: 0000000000000000 [ 492.715984][T18621] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000004 [ 492.723950][T18621] R13: 0000000000c9fb6f R14: 00007f283b7309c0 R15: 000000000078bf0c [ 492.792549][ T2651] usb 1-1: Using ep0 maxpacket: 8 [ 492.829910][ T3790] usb 2-1: USB disconnect, device number 10 [ 492.911549][ T2651] usb 1-1: config 0 has no interfaces? [ 492.917243][ T2651] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 492.930326][ T2651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.948543][ T2651] usb 1-1: config 0 descriptor?? [ 493.195418][T18581] FAULT_INJECTION: forcing a failure. [ 493.195418][T18581] name failslab, interval 1, probability 0, space 0, times 0 [ 493.211299][T18581] CPU: 0 PID: 18581 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 493.219975][T18581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.230023][T18581] Call Trace: [ 493.233314][T18581] dump_stack+0x18f/0x20d [ 493.237648][T18581] should_fail.cold+0x5/0x14 [ 493.242246][T18581] should_failslab+0x5/0xf [ 493.246660][T18581] kmem_cache_alloc+0x2a9/0x3b0 [ 493.251512][T18581] getname_flags.part.0+0x50/0x4f0 [ 493.256626][T18581] getname+0x8e/0xd0 [ 493.260521][T18581] do_sys_openat2+0xf7/0x3b0 [ 493.265133][T18581] ? build_open_flags+0x650/0x650 [ 493.270160][T18581] ? __mutex_unlock_slowpath+0xe2/0x610 [ 493.270224][T18692] FAULT_INJECTION: forcing a failure. [ 493.270224][T18692] name failslab, interval 1, probability 0, space 0, times 0 [ 493.275708][T18581] ? wait_for_completion+0x260/0x260 [ 493.275729][T18581] __x64_sys_openat+0x13f/0x1f0 [ 493.275745][T18581] ? __ia32_sys_open+0x1c0/0x1c0 [ 493.275758][T18581] ? ksys_write+0x1a5/0x250 [ 493.275771][T18581] ? lock_is_held_type+0xb0/0xe0 [ 493.275787][T18581] ? do_syscall_64+0x1c/0xe0 [ 493.275802][T18581] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 493.275820][T18581] do_syscall_64+0x60/0xe0 [ 493.275836][T18581] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 493.275847][T18581] RIP: 0033:0x45c1d9 [ 493.275853][T18581] Code: Bad RIP value. 05:45:53 executing program 3 (fault-call:4 fault-nth:0): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:45:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x40, 0x2) r2 = accept4(r0, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x80800) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x71, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r5, 0xfffc0000}, &(0x7f0000000140)=0x8) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:53 executing program 5 (fault-call:1 fault-nth:1): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:53 executing program 4 (fault-call:1 fault-nth:5): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:53 executing program 1 (fault-call:4 fault-nth:0): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 493.275861][T18581] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 493.275880][T18581] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 493.358833][T18581] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 493.366789][T18581] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 493.374753][T18581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.382721][T18581] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 493.390705][T18692] CPU: 1 PID: 18692 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 493.399371][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.409416][T18692] Call Trace: [ 493.412708][T18692] dump_stack+0x18f/0x20d [ 493.417042][T18692] should_fail.cold+0x5/0x14 [ 493.421634][T18692] should_failslab+0x5/0xf [ 493.426052][T18692] kmem_cache_alloc_node+0x257/0x3c0 [ 493.431340][T18692] __alloc_skb+0x71/0x550 [ 493.435762][T18692] netlink_sendmsg+0x94f/0xd90 [ 493.440532][T18692] ? netlink_unicast+0x7d0/0x7d0 [ 493.445476][T18692] ? netlink_unicast+0x7d0/0x7d0 [ 493.450413][T18692] sock_sendmsg+0xcf/0x120 [ 493.454826][T18692] ____sys_sendmsg+0x6e8/0x810 [ 493.459590][T18692] ? kernel_sendmsg+0x50/0x50 [ 493.464264][T18692] ? do_recvmmsg+0x6d0/0x6d0 [ 493.468857][T18692] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 493.474833][T18692] ? _parse_integer+0x132/0x180 [ 493.479682][T18692] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 493.485662][T18692] ___sys_sendmsg+0xf3/0x170 [ 493.490250][T18692] ? sendmsg_copy_msghdr+0x160/0x160 [ 493.495533][T18692] ? __fget_files+0x272/0x400 [ 493.500214][T18692] ? lock_downgrade+0x820/0x820 [ 493.505064][T18692] ? find_held_lock+0x2d/0x110 [ 493.509825][T18692] ? ksys_write+0x212/0x250 [ 493.514331][T18692] ? __fget_files+0x294/0x400 [ 493.519011][T18692] ? __fget_light+0xea/0x280 [ 493.523692][T18692] __sys_sendmsg+0xe5/0x1b0 [ 493.528200][T18692] ? __sys_sendmsg_sock+0xb0/0xb0 [ 493.533236][T18692] ? do_syscall_64+0x1c/0xe0 [ 493.537830][T18692] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 493.543814][T18692] do_syscall_64+0x60/0xe0 [ 493.548238][T18692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 493.554127][T18692] RIP: 0033:0x45c1d9 [ 493.558030][T18692] Code: Bad RIP value. [ 493.562087][T18692] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.570493][T18692] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 493.578458][T18692] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 493.586428][T18692] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 05:45:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 493.594396][T18692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.602363][T18692] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 493.641814][ T28] usb 1-1: USB disconnect, device number 61 [ 493.711404][ T2651] usb 6-1: new high-speed USB device number 79 using dummy_hcd 05:45:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x11, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:54 executing program 3 (fault-call:4 fault-nth:1): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 493.761192][ T3790] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 493.846626][T18716] FAULT_INJECTION: forcing a failure. [ 493.846626][T18716] name failslab, interval 1, probability 0, space 0, times 0 [ 493.862446][T18716] CPU: 1 PID: 18716 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 493.871124][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.881181][T18716] Call Trace: [ 493.884473][T18716] dump_stack+0x18f/0x20d [ 493.888805][T18716] should_fail.cold+0x5/0x14 [ 493.893397][T18716] should_failslab+0x5/0xf [ 493.897814][T18716] kmem_cache_alloc_node_trace+0x27d/0x400 [ 493.903623][T18716] __kmalloc_node_track_caller+0x38/0x60 [ 493.909252][T18716] __alloc_skb+0xae/0x550 [ 493.913584][T18716] netlink_sendmsg+0x94f/0xd90 [ 493.918351][T18716] ? netlink_unicast+0x7d0/0x7d0 [ 493.923304][T18716] ? netlink_unicast+0x7d0/0x7d0 [ 493.928244][T18716] sock_sendmsg+0xcf/0x120 [ 493.932661][T18716] ____sys_sendmsg+0x6e8/0x810 [ 493.937428][T18716] ? kernel_sendmsg+0x50/0x50 [ 493.942104][T18716] ? do_recvmmsg+0x6d0/0x6d0 [ 493.946702][T18716] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 493.952679][T18716] ? _parse_integer+0x132/0x180 [ 493.957532][T18716] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 493.963516][T18716] ___sys_sendmsg+0xf3/0x170 [ 493.968193][T18716] ? sendmsg_copy_msghdr+0x160/0x160 [ 493.973466][T18716] ? __fget_files+0x272/0x400 [ 493.978143][T18716] ? lock_downgrade+0x820/0x820 [ 493.982974][T18716] ? find_held_lock+0x2d/0x110 [ 493.987731][T18716] ? ksys_write+0x212/0x250 [ 493.992237][T18716] ? __fget_files+0x294/0x400 [ 493.996910][T18716] ? __fget_light+0xea/0x280 [ 494.001480][T18716] __sys_sendmsg+0xe5/0x1b0 [ 494.005969][T18716] ? __sys_sendmsg_sock+0xb0/0xb0 [ 494.011017][T18716] ? do_syscall_64+0x1c/0xe0 [ 494.015606][T18716] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 494.021588][T18716] do_syscall_64+0x60/0xe0 [ 494.026004][T18716] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 494.031891][T18716] RIP: 0033:0x45c1d9 [ 494.035779][T18716] Code: Bad RIP value. [ 494.039841][T18716] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.048248][T18716] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 494.056237][T18716] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 494.064194][T18716] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 494.072140][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.080086][T18716] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 494.141274][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 494.221187][ T3790] usb 2-1: Using ep0 maxpacket: 8 05:45:54 executing program 0 (fault-call:1 fault-nth:1): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:54 executing program 3 (fault-call:4 fault-nth:2): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:45:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x60, 0x7, 0x0, 0x6, 0x20, 0xc, "5dbaf15881427330602921856f0a3d00dcdb88bc1e0f7dfb7a1f3719ced73c39538f8cd84fa89c9f31dfa80a25fa7ffb4bfd11c847b74298480bbd8f39dd410a", "b0bb35a847c6d031dbb74d7c9c59fa6ad555f84e244248d471b120484b8d18725c64d8a7f507282a27bae26b12b6ec1f2edd3371a7d78f9584f26aab9a7e9f6e", "b403db87382532af8e9cf75714b9fa44eb6af34936783e469863833556227a63", [0x100, 0x6b]}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:45:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x88, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 494.271349][ T2651] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 494.279354][ T2651] usb 6-1: config 0 has no interface number 0 [ 494.301197][ T2651] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 494.329193][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 494.358297][T18729] FAULT_INJECTION: forcing a failure. [ 494.358297][T18729] name failslab, interval 1, probability 0, space 0, times 0 [ 494.371451][ T3790] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 494.382164][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 494.383994][ T3790] usb 2-1: config 0 has no interface number 0 [ 494.403517][T18729] CPU: 1 PID: 18729 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 494.412192][T18729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.422243][T18729] Call Trace: [ 494.425531][T18729] dump_stack+0x18f/0x20d [ 494.426877][ T3790] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 494.429859][T18729] should_fail.cold+0x5/0x14 [ 494.429893][T18729] should_failslab+0x5/0xf [ 494.429909][T18729] kmem_cache_alloc+0x40/0x3b0 [ 494.429929][T18729] skb_clone+0x14f/0x3c0 [ 494.444384][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 494.445408][T18729] netlink_deliver_tap+0x990/0xb70 [ 494.445431][T18729] netlink_unicast+0x5e5/0x7d0 05:45:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 494.445451][T18729] ? netlink_attachskb+0x810/0x810 [ 494.445466][T18729] ? _copy_from_iter_full+0x247/0x890 [ 494.445487][T18729] ? __phys_addr+0x9a/0x110 [ 494.450035][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 494.454624][T18729] ? __phys_addr_symbol+0x2c/0x70 [ 494.454641][T18729] ? __check_object_size+0x171/0x3e4 [ 494.454659][T18729] netlink_sendmsg+0x856/0xd90 [ 494.454678][T18729] ? netlink_unicast+0x7d0/0x7d0 [ 494.454701][T18729] ? netlink_unicast+0x7d0/0x7d0 [ 494.454718][T18729] sock_sendmsg+0xcf/0x120 [ 494.454736][T18729] ____sys_sendmsg+0x6e8/0x810 [ 494.465549][ T3790] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 494.468813][T18729] ? kernel_sendmsg+0x50/0x50 [ 494.468826][T18729] ? do_recvmmsg+0x6d0/0x6d0 [ 494.468847][T18729] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 494.468862][T18729] ? _parse_integer+0x132/0x180 [ 494.468881][T18729] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 494.476449][ T3790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.478704][T18729] ___sys_sendmsg+0xf3/0x170 [ 494.478721][T18729] ? sendmsg_copy_msghdr+0x160/0x160 [ 494.478736][T18729] ? __fget_files+0x272/0x400 [ 494.478755][T18729] ? lock_downgrade+0x820/0x820 [ 494.478768][T18729] ? find_held_lock+0x2d/0x110 [ 494.478786][T18729] ? ksys_write+0x212/0x250 [ 494.487882][ T3790] usb 2-1: config 0 descriptor?? [ 494.489221][T18729] ? __fget_files+0x294/0x400 [ 494.489242][T18729] ? __fget_light+0xea/0x280 [ 494.489261][T18729] __sys_sendmsg+0xe5/0x1b0 [ 494.489275][T18729] ? __sys_sendmsg_sock+0xb0/0xb0 [ 494.489301][T18729] ? do_syscall_64+0x1c/0xe0 [ 494.637019][T18729] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 494.643002][T18729] do_syscall_64+0x60/0xe0 [ 494.647424][T18729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 494.653291][T18729] RIP: 0033:0x45c1d9 [ 494.657153][T18729] Code: Bad RIP value. [ 494.661190][T18729] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.669570][T18729] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 494.677520][T18729] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 494.685475][T18729] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 494.693418][T18729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.701487][T18729] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 494.715249][ T2651] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 494.724504][T18688] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 494.733848][T18688] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 494.742666][ T2651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.776037][ T2651] usb 6-1: config 0 descriptor?? [ 494.811566][T18689] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 494.818504][T18689] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 494.975927][T18688] FAULT_INJECTION: forcing a failure. [ 494.975927][T18688] name failslab, interval 1, probability 0, space 0, times 0 [ 494.990761][T18688] CPU: 0 PID: 18688 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 494.999569][T18688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.009616][T18688] Call Trace: [ 495.012908][T18688] dump_stack+0x18f/0x20d [ 495.017252][T18688] should_fail.cold+0x5/0x14 [ 495.021847][T18688] should_failslab+0x5/0xf [ 495.026264][T18688] kmem_cache_alloc+0x2a9/0x3b0 [ 495.031121][T18688] getname_flags.part.0+0x50/0x4f0 [ 495.036237][T18688] getname+0x8e/0xd0 [ 495.040135][T18688] do_sys_openat2+0xf7/0x3b0 [ 495.041046][ T28] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 495.044722][T18688] ? build_open_flags+0x650/0x650 [ 495.056962][T18689] FAULT_INJECTION: forcing a failure. [ 495.056962][T18689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.057261][T18688] ? __mutex_unlock_slowpath+0xe2/0x610 [ 495.075946][T18688] ? wait_for_completion+0x260/0x260 [ 495.081216][T18688] __x64_sys_openat+0x13f/0x1f0 [ 495.086049][T18688] ? __ia32_sys_open+0x1c0/0x1c0 [ 495.090964][T18688] ? ksys_write+0x1a5/0x250 [ 495.095454][T18688] ? lock_is_held_type+0xb0/0xe0 [ 495.100368][T18688] ? do_syscall_64+0x1c/0xe0 [ 495.104939][T18688] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 495.110897][T18688] do_syscall_64+0x60/0xe0 [ 495.115293][T18688] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 495.121162][T18688] RIP: 0033:0x45c1d9 [ 495.125031][T18688] Code: Bad RIP value. [ 495.129071][T18688] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.137457][T18688] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 495.145417][T18688] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 495.153370][T18688] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 495.161320][T18688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.169268][T18688] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 495.177253][T18689] CPU: 1 PID: 18689 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 495.185923][T18689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.195971][T18689] Call Trace: [ 495.199264][T18689] dump_stack+0x18f/0x20d [ 495.203596][T18689] should_fail.cold+0x5/0x14 [ 495.208189][T18689] __alloc_pages_nodemask+0x1a3/0x930 [ 495.213560][T18689] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 495.219543][T18689] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 495.226321][T18689] ? lock_acquire+0x1f1/0xad0 [ 495.231010][T18689] ? fs_reclaim_acquire+0xf/0x40 [ 495.235949][T18689] ? find_held_lock+0x2d/0x110 [ 495.240718][T18689] cache_grow_begin+0x8c/0xb20 [ 495.245480][T18689] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 495.250939][T18689] cache_alloc_refill+0x27b/0x340 [ 495.255961][T18689] ? lockdep_hardirqs_off+0x66/0xa0 [ 495.261163][T18689] kmem_cache_alloc+0x38e/0x3b0 [ 495.266025][T18689] getname_flags.part.0+0x50/0x4f0 [ 495.267801][ T2504] usb 2-1: USB disconnect, device number 11 [ 495.271131][T18689] getname+0x8e/0xd0 [ 495.271147][T18689] do_sys_openat2+0xf7/0x3b0 [ 495.271162][T18689] ? build_open_flags+0x650/0x650 [ 495.271178][T18689] ? __mutex_unlock_slowpath+0xe2/0x610 [ 495.271195][T18689] ? wait_for_completion+0x260/0x260 [ 495.271213][T18689] __x64_sys_openat+0x13f/0x1f0 [ 495.306169][T18689] ? __ia32_sys_open+0x1c0/0x1c0 [ 495.311104][T18689] ? ksys_write+0x1a5/0x250 [ 495.315609][T18689] ? lock_is_held_type+0xb0/0xe0 [ 495.320549][T18689] ? do_syscall_64+0x1c/0xe0 [ 495.325141][T18689] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 495.331124][T18689] do_syscall_64+0x60/0xe0 [ 495.335538][T18689] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 495.341424][T18689] RIP: 0033:0x45c1d9 [ 495.345306][T18689] Code: Bad RIP value. [ 495.349365][T18689] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.357772][T18689] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 495.365739][T18689] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 495.373706][T18689] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 495.381671][T18689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.389659][T18689] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 495.634048][ T2504] usb 6-1: USB disconnect, device number 79 [ 495.671060][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 495.791030][ T28] usb 1-1: config 0 has no interfaces? [ 495.796535][ T28] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 495.805781][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.815952][ T28] usb 1-1: config 0 descriptor?? [ 496.064860][T18733] FAULT_INJECTION: forcing a failure. [ 496.064860][T18733] name failslab, interval 1, probability 0, space 0, times 0 [ 496.077706][T18733] CPU: 1 PID: 18733 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 496.086371][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.096411][T18733] Call Trace: [ 496.099677][T18733] dump_stack+0x18f/0x20d [ 496.103997][T18733] should_fail.cold+0x5/0x14 [ 496.108585][T18733] should_failslab+0x5/0xf 05:45:56 executing program 5 (fault-call:1 fault-nth:2): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x4, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:56 executing program 3 (fault-call:4 fault-nth:3): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:45:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffffe1, 0x480000) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x7c4}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000080)=0x2) 05:45:56 executing program 1 (fault-call:4 fault-nth:1): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 496.112986][T18733] kmem_cache_alloc+0x2a9/0x3b0 [ 496.117822][T18733] __alloc_file+0x21/0x350 [ 496.122215][T18733] alloc_empty_file+0x6d/0x170 [ 496.126983][T18733] path_openat+0xe3/0x2750 [ 496.131396][T18733] ? __lock_acquire+0x16e3/0x56e0 [ 496.136424][T18733] ? path_lookupat+0x830/0x830 [ 496.141189][T18733] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 496.147175][T18733] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 496.153160][T18733] ? lock_is_held_type+0xb0/0xe0 [ 496.158104][T18733] do_filp_open+0x17e/0x3c0 05:45:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x5, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 496.162606][T18733] ? may_open_dev+0xf0/0xf0 [ 496.167113][T18733] ? __alloc_fd+0x28d/0x600 [ 496.171617][T18733] ? lock_downgrade+0x820/0x820 [ 496.176474][T18733] ? do_raw_spin_lock+0x120/0x2b0 [ 496.181505][T18733] ? rwlock_bug.part.0+0x90/0x90 [ 496.186445][T18733] ? _raw_spin_unlock+0x24/0x40 [ 496.191292][T18733] ? __alloc_fd+0x28d/0x600 [ 496.195803][T18733] do_sys_openat2+0x16f/0x3b0 [ 496.200493][T18733] ? build_open_flags+0x650/0x650 [ 496.205518][T18733] ? __mutex_unlock_slowpath+0xe2/0x610 [ 496.211066][T18733] ? wait_for_completion+0x260/0x260 [ 496.216351][T18733] __x64_sys_openat+0x13f/0x1f0 [ 496.221198][T18733] ? __ia32_sys_open+0x1c0/0x1c0 [ 496.226141][T18733] ? ksys_write+0x1a5/0x250 [ 496.230650][T18733] ? lock_is_held_type+0xb0/0xe0 [ 496.235565][T18733] ? do_syscall_64+0x1c/0xe0 [ 496.240143][T18733] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 496.246124][T18733] do_syscall_64+0x60/0xe0 [ 496.250539][T18733] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.256425][T18733] RIP: 0033:0x45c1d9 [ 496.260307][T18733] Code: Bad RIP value. [ 496.264366][T18733] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.272771][T18733] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 496.280737][T18733] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 496.288703][T18733] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 496.296666][T18733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.304643][T18733] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 496.335328][T18826] FAULT_INJECTION: forcing a failure. [ 496.335328][T18826] name failslab, interval 1, probability 0, space 0, times 0 [ 496.349745][T18826] CPU: 1 PID: 18826 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 496.358423][T18826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.368471][T18826] Call Trace: [ 496.371875][T18826] dump_stack+0x18f/0x20d [ 496.376224][T18826] should_fail.cold+0x5/0x14 [ 496.380819][T18826] should_failslab+0x5/0xf [ 496.385236][T18826] kmem_cache_alloc_node+0x257/0x3c0 [ 496.390522][T18826] __alloc_skb+0x71/0x550 [ 496.394914][T18826] qdisc_notify.isra.0+0x7f/0x310 [ 496.399942][T18826] tc_modify_qdisc+0xf45/0x1990 [ 496.404800][T18826] ? qdisc_create+0x12e0/0x12e0 [ 496.409782][T18826] ? lock_is_held_type+0xb0/0xe0 [ 496.414742][T18826] ? qdisc_create+0x12e0/0x12e0 [ 496.419609][T18826] rtnetlink_rcv_msg+0x44e/0xad0 [ 496.424552][T18826] ? rtnetlink_put_metrics+0x510/0x510 [ 496.430014][T18826] ? lock_acquire+0x1f1/0xad0 [ 496.434720][T18826] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 496.440014][T18826] netlink_rcv_skb+0x15a/0x430 [ 496.444780][T18826] ? rtnetlink_put_metrics+0x510/0x510 [ 496.450242][T18826] ? netlink_ack+0xa10/0xa10 [ 496.454843][T18826] netlink_unicast+0x533/0x7d0 [ 496.459615][T18826] ? netlink_attachskb+0x810/0x810 [ 496.461151][ T2504] usb 1-1: USB disconnect, device number 62 [ 496.464722][T18826] ? _copy_from_iter_full+0x247/0x890 [ 496.464795][T18826] ? __phys_addr+0x9a/0x110 [ 496.480518][T18826] ? __phys_addr_symbol+0x2c/0x70 [ 496.485542][T18826] ? __check_object_size+0x171/0x3e4 [ 496.490836][T18826] netlink_sendmsg+0x856/0xd90 [ 496.495607][T18826] ? netlink_unicast+0x7d0/0x7d0 [ 496.500552][T18826] ? netlink_unicast+0x7d0/0x7d0 [ 496.505491][T18826] sock_sendmsg+0xcf/0x120 [ 496.509908][T18826] ____sys_sendmsg+0x6e8/0x810 [ 496.514675][T18826] ? kernel_sendmsg+0x50/0x50 [ 496.519348][T18826] ? do_recvmmsg+0x6d0/0x6d0 [ 496.523943][T18826] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 496.529920][T18826] ? _parse_integer+0x132/0x180 [ 496.534764][T18826] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 496.540725][T18826] ___sys_sendmsg+0xf3/0x170 [ 496.545302][T18826] ? sendmsg_copy_msghdr+0x160/0x160 [ 496.550561][T18826] ? __fget_files+0x272/0x400 [ 496.555214][T18826] ? lock_downgrade+0x820/0x820 [ 496.560049][T18826] ? find_held_lock+0x2d/0x110 [ 496.564801][T18826] ? ksys_write+0x212/0x250 [ 496.569282][T18826] ? __fget_files+0x294/0x400 [ 496.573938][T18826] ? __fget_light+0xea/0x280 [ 496.578504][T18826] __sys_sendmsg+0xe5/0x1b0 [ 496.583024][T18826] ? __sys_sendmsg_sock+0xb0/0xb0 [ 496.588034][T18826] ? do_syscall_64+0x1c/0xe0 [ 496.592602][T18826] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 496.598557][T18826] do_syscall_64+0x60/0xe0 [ 496.602973][T18826] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.608838][T18826] RIP: 0033:0x45c1d9 [ 496.612718][T18826] Code: Bad RIP value. [ 496.616764][T18826] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.625161][T18826] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 496.633106][T18826] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 496.641062][T18826] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 496.649061][T18826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 496.657022][T18826] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 496.814312][ T2651] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 496.831081][ T2521] usb 2-1: new high-speed USB device number 12 using dummy_hcd 05:45:57 executing program 0 (fault-call:1 fault-nth:2): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:57 executing program 3 (fault-call:4 fault-nth:4): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 497.005328][T18845] FAULT_INJECTION: forcing a failure. [ 497.005328][T18845] name failslab, interval 1, probability 0, space 0, times 0 [ 497.028417][T18845] CPU: 0 PID: 18845 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 497.037101][T18845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.047148][T18845] Call Trace: [ 497.050449][T18845] dump_stack+0x18f/0x20d [ 497.054790][T18845] should_fail.cold+0x5/0x14 [ 497.059390][T18845] should_failslab+0x5/0xf [ 497.060734][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 497.063801][T18845] kmem_cache_alloc_node_trace+0x27d/0x400 [ 497.063825][T18845] __kmalloc_node_track_caller+0x38/0x60 [ 497.063841][T18845] __alloc_skb+0xae/0x550 [ 497.063861][T18845] qdisc_notify.isra.0+0x7f/0x310 [ 497.063879][T18845] tc_modify_qdisc+0xf45/0x1990 [ 497.063906][T18845] ? qdisc_create+0x12e0/0x12e0 [ 497.099291][T18845] ? lock_is_held_type+0xb0/0xe0 [ 497.104231][T18845] ? qdisc_create+0x12e0/0x12e0 [ 497.109088][T18845] rtnetlink_rcv_msg+0x44e/0xad0 [ 497.114028][T18845] ? rtnetlink_put_metrics+0x510/0x510 [ 497.119494][T18845] ? lock_acquire+0x1f1/0xad0 [ 497.124176][T18845] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 497.129465][T18845] netlink_rcv_skb+0x15a/0x430 [ 497.134236][T18845] ? rtnetlink_put_metrics+0x510/0x510 [ 497.139696][T18845] ? netlink_ack+0xa10/0xa10 [ 497.144312][T18845] netlink_unicast+0x533/0x7d0 [ 497.149079][T18845] ? netlink_attachskb+0x810/0x810 05:45:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x8, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0xb, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x10, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 497.154276][T18845] ? _copy_from_iter_full+0x247/0x890 [ 497.159638][T18845] ? __phys_addr+0x9a/0x110 [ 497.164130][T18845] ? __phys_addr_symbol+0x2c/0x70 [ 497.169159][T18845] ? __check_object_size+0x171/0x3e4 [ 497.174449][T18845] netlink_sendmsg+0x856/0xd90 [ 497.179216][T18845] ? netlink_unicast+0x7d0/0x7d0 [ 497.180843][ T2651] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 497.184153][T18845] ? netlink_unicast+0x7d0/0x7d0 [ 497.195683][ T2651] usb 6-1: config 0 has no interface number 0 [ 497.197034][T18845] sock_sendmsg+0xcf/0x120 [ 497.197052][T18845] ____sys_sendmsg+0x6e8/0x810 [ 497.197070][T18845] ? kernel_sendmsg+0x50/0x50 [ 497.197082][T18845] ? do_recvmmsg+0x6d0/0x6d0 [ 497.197099][T18845] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 497.197117][T18845] ? _parse_integer+0x132/0x180 [ 497.217570][ T2651] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 497.221513][T18845] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 497.221532][T18845] ___sys_sendmsg+0xf3/0x170 [ 497.221549][T18845] ? sendmsg_copy_msghdr+0x160/0x160 [ 497.221564][T18845] ? __fget_files+0x272/0x400 [ 497.221582][T18845] ? lock_downgrade+0x820/0x820 [ 497.221597][T18845] ? find_held_lock+0x2d/0x110 [ 497.221611][T18845] ? ksys_write+0x212/0x250 [ 497.221629][T18845] ? __fget_files+0x294/0x400 [ 497.221649][T18845] ? __fget_light+0xea/0x280 [ 497.221669][T18845] __sys_sendmsg+0xe5/0x1b0 [ 497.244914][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 497.249307][T18845] ? __sys_sendmsg_sock+0xb0/0xb0 [ 497.249336][T18845] ? do_syscall_64+0x1c/0xe0 [ 497.249351][T18845] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 497.249369][T18845] do_syscall_64+0x60/0xe0 [ 497.249387][T18845] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.267357][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 497.268690][T18845] RIP: 0033:0x45c1d9 [ 497.268696][T18845] Code: Bad RIP value. [ 497.268704][T18845] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.268719][T18845] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 497.268727][T18845] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 497.268736][T18845] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 497.268744][T18845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 497.268753][T18845] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 497.340730][ T2521] usb 2-1: Using ep0 maxpacket: 8 [ 497.341638][ T17] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 497.406952][ T2651] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 497.417889][ T2651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.430196][ T2651] usb 6-1: config 0 descriptor?? [ 497.460872][ T2521] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 497.463635][T18828] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 497.468862][ T2521] usb 2-1: config 0 has no interface number 0 [ 497.480476][T18828] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 497.520649][ T2521] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 497.532718][ T2521] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 497.543751][ T2521] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 497.555324][ T2521] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 497.566582][ T2521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.576888][ T2521] usb 2-1: config 0 descriptor?? [ 497.604202][T18827] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 497.615666][T18827] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 497.640683][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 497.709620][T18828] FAULT_INJECTION: forcing a failure. [ 497.709620][T18828] name failslab, interval 1, probability 0, space 0, times 0 [ 497.761578][ T17] usb 1-1: config 0 has no interfaces? [ 497.767807][T18828] CPU: 0 PID: 18828 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 497.768715][ T17] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 497.776479][T18828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.776486][T18828] Call Trace: [ 497.776506][T18828] dump_stack+0x18f/0x20d [ 497.776527][T18828] should_fail.cold+0x5/0x14 [ 497.776545][T18828] should_failslab+0x5/0xf [ 497.776560][T18828] kmem_cache_alloc+0x2a9/0x3b0 [ 497.776578][T18828] security_file_alloc+0x34/0x170 [ 497.776595][T18828] __alloc_file+0xd8/0x350 [ 497.776613][T18828] alloc_empty_file+0x6d/0x170 [ 497.819538][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.822046][T18828] path_openat+0xe3/0x2750 [ 497.822064][T18828] ? __lock_acquire+0x16e3/0x56e0 [ 497.822087][T18828] ? path_lookupat+0x830/0x830 [ 497.822113][T18828] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 497.822131][T18828] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 497.855038][ T17] usb 1-1: config 0 descriptor?? [ 497.859336][T18828] ? lock_is_held_type+0xb0/0xe0 [ 497.875131][T18828] do_filp_open+0x17e/0x3c0 [ 497.879639][T18828] ? may_open_dev+0xf0/0xf0 [ 497.884141][T18828] ? __alloc_fd+0x28d/0x600 [ 497.888648][T18828] ? lock_downgrade+0x820/0x820 [ 497.893498][T18828] ? do_raw_spin_lock+0x120/0x2b0 [ 497.898521][T18828] ? rwlock_bug.part.0+0x90/0x90 [ 497.903464][T18828] ? _raw_spin_unlock+0x24/0x40 [ 497.908314][T18828] ? __alloc_fd+0x28d/0x600 [ 497.912825][T18828] do_sys_openat2+0x16f/0x3b0 [ 497.917504][T18828] ? build_open_flags+0x650/0x650 [ 497.922543][T18828] ? __mutex_unlock_slowpath+0xe2/0x610 [ 497.928180][T18828] ? wait_for_completion+0x260/0x260 [ 497.933469][T18828] __x64_sys_openat+0x13f/0x1f0 [ 497.938314][T18828] ? __ia32_sys_open+0x1c0/0x1c0 [ 497.943251][T18828] ? ksys_write+0x1a5/0x250 [ 497.947749][T18828] ? lock_is_held_type+0xb0/0xe0 [ 497.952692][T18828] ? do_syscall_64+0x1c/0xe0 [ 497.957287][T18828] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 497.963271][T18828] do_syscall_64+0x60/0xe0 [ 497.967686][T18828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.973575][T18828] RIP: 0033:0x45c1d9 [ 497.977462][T18828] Code: Bad RIP value. [ 497.981524][T18828] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.989929][T18828] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 497.997896][T18828] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 498.005866][T18828] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 498.013954][T18828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.021918][T18828] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 498.050190][T18827] FAULT_INJECTION: forcing a failure. [ 498.050190][T18827] name failslab, interval 1, probability 0, space 0, times 0 [ 498.075034][ T17] usb 6-1: USB disconnect, device number 80 [ 498.099676][T18827] CPU: 0 PID: 18827 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 498.108383][T18827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.118439][T18827] Call Trace: [ 498.121730][T18827] dump_stack+0x18f/0x20d [ 498.126064][T18827] should_fail.cold+0x5/0x14 [ 498.130660][T18827] should_failslab+0x5/0xf [ 498.135077][T18827] kmem_cache_alloc+0x2a9/0x3b0 [ 498.139931][T18827] __alloc_file+0x21/0x350 [ 498.144349][T18827] alloc_empty_file+0x6d/0x170 [ 498.147720][T18847] FAULT_INJECTION: forcing a failure. [ 498.147720][T18847] name failslab, interval 1, probability 0, space 0, times 0 [ 498.149112][T18827] path_openat+0xe3/0x2750 [ 498.166073][T18827] ? __lock_acquire+0x16e3/0x56e0 [ 498.171106][T18827] ? path_lookupat+0x830/0x830 [ 498.175866][T18827] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 498.181838][T18827] ? lock_is_held_type+0xb0/0xe0 [ 498.186765][T18827] do_filp_open+0x17e/0x3c0 [ 498.191254][T18827] ? may_open_dev+0xf0/0xf0 [ 498.195737][T18827] ? __alloc_fd+0x28d/0x600 [ 498.200223][T18827] ? lock_downgrade+0x820/0x820 [ 498.205061][T18827] ? do_raw_spin_lock+0x120/0x2b0 [ 498.210066][T18827] ? rwlock_bug.part.0+0x90/0x90 [ 498.214997][T18827] ? _raw_spin_unlock+0x24/0x40 [ 498.219827][T18827] ? __alloc_fd+0x28d/0x600 [ 498.224326][T18827] do_sys_openat2+0x16f/0x3b0 [ 498.228982][T18827] ? build_open_flags+0x650/0x650 [ 498.233987][T18827] ? __mutex_unlock_slowpath+0xe2/0x610 [ 498.239514][T18827] ? wait_for_completion+0x260/0x260 [ 498.244783][T18827] __x64_sys_openat+0x13f/0x1f0 [ 498.249614][T18827] ? __ia32_sys_open+0x1c0/0x1c0 [ 498.254528][T18827] ? ksys_write+0x1a5/0x250 [ 498.259015][T18827] ? lock_is_held_type+0xb0/0xe0 [ 498.263941][T18827] ? do_syscall_64+0x1c/0xe0 [ 498.268518][T18827] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 498.274488][T18827] do_syscall_64+0x60/0xe0 [ 498.278904][T18827] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.284784][T18827] RIP: 0033:0x45c1d9 [ 498.288656][T18827] Code: Bad RIP value. [ 498.292701][T18827] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 498.301089][T18827] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 498.309047][T18827] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 498.317000][T18827] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 498.324953][T18827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.332908][T18827] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 498.340946][T18847] CPU: 1 PID: 18847 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 498.349701][T18847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.359761][T18847] Call Trace: [ 498.363052][T18847] dump_stack+0x18f/0x20d [ 498.367473][T18847] should_fail.cold+0x5/0x14 [ 498.372066][T18847] should_failslab+0x5/0xf [ 498.376480][T18847] kmem_cache_alloc+0x2a9/0x3b0 [ 498.381328][T18847] security_file_alloc+0x34/0x170 [ 498.386353][T18847] __alloc_file+0xd8/0x350 [ 498.390772][T18847] alloc_empty_file+0x6d/0x170 [ 498.395536][T18847] path_openat+0xe3/0x2750 [ 498.399950][T18847] ? __lock_acquire+0x16e3/0x56e0 [ 498.404980][T18847] ? path_lookupat+0x830/0x830 [ 498.409746][T18847] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 498.415725][T18847] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 498.421710][T18847] ? lock_is_held_type+0xb0/0xe0 [ 498.426667][T18847] do_filp_open+0x17e/0x3c0 [ 498.431166][T18847] ? may_open_dev+0xf0/0xf0 [ 498.435666][T18847] ? __alloc_fd+0x28d/0x600 [ 498.440172][T18847] ? lock_downgrade+0x820/0x820 [ 498.445023][T18847] ? do_raw_spin_lock+0x120/0x2b0 [ 498.450036][T18847] ? rwlock_bug.part.0+0x90/0x90 [ 498.455082][T18847] ? _raw_spin_unlock+0x24/0x40 [ 498.459926][T18847] ? __alloc_fd+0x28d/0x600 [ 498.464405][T18847] do_sys_openat2+0x16f/0x3b0 [ 498.469064][T18847] ? build_open_flags+0x650/0x650 [ 498.474113][T18847] ? __mutex_unlock_slowpath+0xe2/0x610 [ 498.479633][T18847] ? wait_for_completion+0x260/0x260 [ 498.484894][T18847] __x64_sys_openat+0x13f/0x1f0 [ 498.489716][T18847] ? __ia32_sys_open+0x1c0/0x1c0 [ 498.494628][T18847] ? ksys_write+0x1a5/0x250 [ 498.499148][T18847] ? lock_is_held_type+0xb0/0xe0 [ 498.504060][T18847] ? do_syscall_64+0x1c/0xe0 [ 498.508668][T18847] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 498.514796][T18847] do_syscall_64+0x60/0xe0 [ 498.519190][T18847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.525059][T18847] RIP: 0033:0x45c1d9 [ 498.528921][T18847] Code: Bad RIP value. [ 498.532961][T18847] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 498.541343][T18847] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 498.549293][T18847] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 498.557243][T18847] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 498.565213][T18847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.573158][T18847] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 498.588283][ T28] usb 2-1: USB disconnect, device number 12 [ 498.609733][ T2521] usb 1-1: USB disconnect, device number 63 05:45:59 executing program 5 (fault-call:1 fault-nth:3): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:45:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:45:59 executing program 3 (fault-call:4 fault-nth:5): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:45:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x7a00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) sendto$rxrpc(r5, &(0x7f0000000040)="5429ba1b0c52121ce7db54bd75d862ca96e38d37469553922075", 0x1a, 0x4, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 498.851965][T18935] FAULT_INJECTION: forcing a failure. [ 498.851965][T18935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 498.865193][T18935] CPU: 0 PID: 18935 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 498.873855][T18935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.883897][T18935] Call Trace: [ 498.887165][T18935] dump_stack+0x18f/0x20d [ 498.891489][T18935] should_fail.cold+0x5/0x14 [ 498.896137][T18935] __alloc_pages_nodemask+0x1a3/0x930 [ 498.901504][T18935] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 498.907574][T18935] ? do_syscall_64+0x60/0xe0 [ 498.912167][T18935] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.918238][T18935] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 498.925022][T18935] ? lock_acquire+0x1f1/0xad0 [ 498.929704][T18935] ? fs_reclaim_acquire+0xf/0x40 [ 498.934640][T18935] ? find_held_lock+0x2d/0x110 [ 498.939404][T18935] cache_grow_begin+0x8c/0xb20 [ 498.944167][T18935] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 498.949645][T18935] cache_alloc_refill+0x27b/0x340 [ 498.954690][T18935] ? lockdep_hardirqs_off+0x66/0xa0 [ 498.959891][T18935] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 498.965709][T18935] __kmalloc_node_track_caller+0x38/0x60 [ 498.971342][T18935] __alloc_skb+0xae/0x550 [ 498.975683][T18935] qdisc_notify.isra.0+0x7f/0x310 [ 498.980730][T18935] tc_modify_qdisc+0xf45/0x1990 [ 498.985585][T18935] ? qdisc_create+0x12e0/0x12e0 [ 498.990444][T18935] ? lock_is_held_type+0xb0/0xe0 [ 498.995384][T18935] ? qdisc_create+0x12e0/0x12e0 [ 499.000241][T18935] rtnetlink_rcv_msg+0x44e/0xad0 [ 499.005185][T18935] ? rtnetlink_put_metrics+0x510/0x510 [ 499.010647][T18935] ? lock_acquire+0x1f1/0xad0 [ 499.015330][T18935] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 499.020619][T18935] netlink_rcv_skb+0x15a/0x430 [ 499.025385][T18935] ? rtnetlink_put_metrics+0x510/0x510 [ 499.030842][T18935] ? netlink_ack+0xa10/0xa10 [ 499.035442][T18935] netlink_unicast+0x533/0x7d0 [ 499.040224][T18935] ? netlink_attachskb+0x810/0x810 [ 499.045334][T18935] ? _copy_from_iter_full+0x247/0x890 [ 499.050705][T18935] ? __phys_addr+0x9a/0x110 [ 499.055208][T18935] ? __phys_addr_symbol+0x2c/0x70 [ 499.060234][T18935] ? __check_object_size+0x171/0x3e4 [ 499.065520][T18935] netlink_sendmsg+0x856/0xd90 [ 499.070290][T18935] ? netlink_unicast+0x7d0/0x7d0 [ 499.075234][T18935] ? netlink_unicast+0x7d0/0x7d0 [ 499.080170][T18935] sock_sendmsg+0xcf/0x120 [ 499.084585][T18935] ____sys_sendmsg+0x6e8/0x810 [ 499.089345][T18935] ? kernel_sendmsg+0x50/0x50 [ 499.094019][T18935] ? do_recvmmsg+0x6d0/0x6d0 [ 499.098613][T18935] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 499.104588][T18935] ? _parse_integer+0x132/0x180 [ 499.109442][T18935] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 499.115424][T18935] ___sys_sendmsg+0xf3/0x170 [ 499.120034][T18935] ? sendmsg_copy_msghdr+0x160/0x160 [ 499.125319][T18935] ? __fget_files+0x272/0x400 [ 499.130007][T18935] ? lock_downgrade+0x820/0x820 [ 499.130504][ T28] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 499.134849][T18935] ? find_held_lock+0x2d/0x110 [ 499.147239][T18935] ? ksys_write+0x212/0x250 [ 499.151743][T18935] ? __fget_files+0x294/0x400 [ 499.156423][T18935] ? __fget_light+0xea/0x280 [ 499.161036][T18935] __sys_sendmsg+0xe5/0x1b0 [ 499.165530][T18935] ? __sys_sendmsg_sock+0xb0/0xb0 [ 499.170556][T18935] ? do_syscall_64+0x1c/0xe0 [ 499.175140][T18935] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 499.181122][T18935] do_syscall_64+0x60/0xe0 [ 499.185549][T18935] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.191443][T18935] RIP: 0033:0x45c1d9 [ 499.195327][T18935] Code: Bad RIP value. [ 499.199385][T18935] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.207791][T18935] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 499.215774][T18935] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 499.223743][T18935] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 499.231717][T18935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 499.239690][T18935] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 499.380438][ T28] usb 6-1: Using ep0 maxpacket: 8 05:46:00 executing program 1 (fault-call:4 fault-nth:2): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:00 executing program 0 (fault-call:1 fault-nth:3): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:00 executing program 3 (fault-call:4 fault-nth:6): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 499.510724][ T28] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.522184][T18952] FAULT_INJECTION: forcing a failure. [ 499.522184][T18952] name failslab, interval 1, probability 0, space 0, times 0 [ 499.535372][ T28] usb 6-1: config 0 has no interface number 0 [ 499.547071][ T28] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 499.560489][T18952] CPU: 1 PID: 18952 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 499.569257][T18952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.579306][T18952] Call Trace: [ 499.582601][T18952] dump_stack+0x18f/0x20d [ 499.586940][T18952] should_fail.cold+0x5/0x14 [ 499.591533][T18952] ? save_stack+0x1b/0x40 [ 499.595880][T18952] ? gnet_stats_copy_app+0x6b/0x2f0 [ 499.601079][T18952] should_failslab+0x5/0xf [ 499.605504][T18952] __kmalloc_track_caller+0x67/0x330 [ 499.610793][T18952] kmemdup+0x23/0x50 [ 499.614696][T18952] gnet_stats_copy_app+0x6b/0x2f0 [ 499.619783][T18952] choke_dump_stats+0x1e5/0x270 [ 499.624638][T18952] ? choke_peek_head+0x110/0x110 [ 499.629579][T18952] ? nla_put_64bit+0x116/0x150 [ 499.634348][T18952] ? gnet_stats_start_copy_compat+0x1e2/0x470 [ 499.640432][T18952] ? choke_peek_head+0x110/0x110 [ 499.645373][T18952] tc_fill_qdisc+0x9b1/0x1220 [ 499.650065][T18952] ? tclass_notify.constprop.0+0x190/0x190 [ 499.655883][T18952] ? memset+0x20/0x40 [ 499.659868][T18952] ? __alloc_skb+0x34a/0x550 [ 499.664452][T18952] qdisc_notify.isra.0+0x2b1/0x310 [ 499.669553][T18952] tc_modify_qdisc+0xf45/0x1990 [ 499.674399][T18952] ? qdisc_create+0x12e0/0x12e0 [ 499.679233][T18952] ? lock_is_held_type+0xb0/0xe0 [ 499.684149][T18952] ? qdisc_create+0x12e0/0x12e0 [ 499.688985][T18952] rtnetlink_rcv_msg+0x44e/0xad0 [ 499.694021][T18952] ? rtnetlink_put_metrics+0x510/0x510 [ 499.699458][T18952] ? lock_acquire+0x1f1/0xad0 [ 499.704119][T18952] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 499.709393][T18952] netlink_rcv_skb+0x15a/0x430 [ 499.714149][T18952] ? rtnetlink_put_metrics+0x510/0x510 [ 499.719621][T18952] ? netlink_ack+0xa10/0xa10 [ 499.724199][T18952] netlink_unicast+0x533/0x7d0 [ 499.728940][T18952] ? netlink_attachskb+0x810/0x810 [ 499.734024][T18952] ? _copy_from_iter_full+0x247/0x890 [ 499.739369][T18952] ? __phys_addr+0x9a/0x110 [ 499.743846][T18952] ? __phys_addr_symbol+0x2c/0x70 [ 499.748845][T18952] ? __check_object_size+0x171/0x3e4 [ 499.754116][T18952] netlink_sendmsg+0x856/0xd90 [ 499.758869][T18952] ? netlink_unicast+0x7d0/0x7d0 [ 499.763785][T18952] ? netlink_unicast+0x7d0/0x7d0 [ 499.768700][T18952] sock_sendmsg+0xcf/0x120 [ 499.773090][T18952] ____sys_sendmsg+0x6e8/0x810 [ 499.777833][T18952] ? kernel_sendmsg+0x50/0x50 [ 499.782484][T18952] ? do_recvmmsg+0x6d0/0x6d0 [ 499.787053][T18952] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 499.793008][T18952] ? _parse_integer+0x132/0x180 [ 499.797833][T18952] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 499.803786][T18952] ___sys_sendmsg+0xf3/0x170 [ 499.808349][T18952] ? sendmsg_copy_msghdr+0x160/0x160 [ 499.813611][T18952] ? __fget_files+0x272/0x400 [ 499.818263][T18952] ? lock_downgrade+0x820/0x820 [ 499.823092][T18952] ? find_held_lock+0x2d/0x110 [ 499.827830][T18952] ? ksys_write+0x212/0x250 [ 499.832308][T18952] ? __fget_files+0x294/0x400 [ 499.836961][T18952] ? __fget_light+0xea/0x280 [ 499.841640][T18952] __sys_sendmsg+0xe5/0x1b0 [ 499.846118][T18952] ? __sys_sendmsg_sock+0xb0/0xb0 [ 499.851120][T18952] ? do_syscall_64+0x1c/0xe0 [ 499.855690][T18952] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 499.861647][T18952] do_syscall_64+0x60/0xe0 [ 499.866037][T18952] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.871902][T18952] RIP: 0033:0x45c1d9 [ 499.875765][T18952] Code: Bad RIP value. [ 499.879805][T18952] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.888188][T18952] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 499.896141][T18952] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 499.904096][T18952] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 05:46:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x13, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 499.912040][T18952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 499.919986][T18952] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 499.940768][ T28] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 499.954952][ T28] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 499.964908][ T28] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 499.974484][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.983951][ T28] usb 6-1: config 0 descriptor?? [ 500.000799][T18937] raw-gadget gadget: fail, usb_ep_enable returned -22 05:46:00 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xa4402, 0x4, 0x9}, 0x18) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x71, &(0x7f0000000080)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000080)={r7, 0x9, 0x5}, 0x8) r8 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 500.007971][T18937] raw-gadget gadget: fail, usb_ep_enable returned -22 05:46:00 executing program 3 (fault-call:4 fault-nth:7): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x14, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 500.113011][T18970] FAULT_INJECTION: forcing a failure. [ 500.113011][T18970] name failslab, interval 1, probability 0, space 0, times 0 [ 500.130686][ T2521] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 500.154281][T18970] CPU: 1 PID: 18970 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 500.162961][T18970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.173009][T18970] Call Trace: [ 500.176301][T18970] dump_stack+0x18f/0x20d [ 500.180635][T18970] should_fail.cold+0x5/0x14 [ 500.185222][T18970] ? mark_lock+0xbc/0x1710 [ 500.189638][T18970] should_failslab+0x5/0xf [ 500.194055][T18970] kmem_cache_alloc_node_trace+0x58/0x400 [ 500.199780][T18970] __kmalloc_node_track_caller+0x38/0x60 [ 500.205414][T18970] pskb_expand_head+0x15a/0x1040 [ 500.210357][T18970] ? kmem_cache_alloc+0x35f/0x3b0 [ 500.215386][T18970] netlink_trim+0x1ea/0x240 [ 500.219892][T18970] netlink_broadcast_filtered+0x65/0xdc0 [ 500.225539][T18970] netlink_broadcast+0x35/0x40 [ 500.230304][T18970] rtnetlink_send+0x125/0x180 [ 500.234981][T18970] qdisc_notify.isra.0+0x1c5/0x310 [ 500.240093][T18970] tc_modify_qdisc+0xf45/0x1990 [ 500.244952][T18970] ? qdisc_create+0x12e0/0x12e0 [ 500.249815][T18970] ? lock_is_held_type+0xb0/0xe0 [ 500.254757][T18970] ? qdisc_create+0x12e0/0x12e0 [ 500.259606][T18970] rtnetlink_rcv_msg+0x44e/0xad0 [ 500.264546][T18970] ? rtnetlink_put_metrics+0x510/0x510 [ 500.270009][T18970] ? lock_acquire+0x1f1/0xad0 [ 500.274686][T18970] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 500.279976][T18970] netlink_rcv_skb+0x15a/0x430 [ 500.284738][T18970] ? rtnetlink_put_metrics+0x510/0x510 [ 500.290193][T18970] ? netlink_ack+0xa10/0xa10 [ 500.294798][T18970] netlink_unicast+0x533/0x7d0 [ 500.299568][T18970] ? netlink_attachskb+0x810/0x810 [ 500.304681][T18970] ? _copy_from_iter_full+0x247/0x890 [ 500.310071][T18970] ? __phys_addr+0x9a/0x110 [ 500.314581][T18970] ? __phys_addr_symbol+0x2c/0x70 [ 500.319609][T18970] ? __check_object_size+0x171/0x3e4 [ 500.324895][T18970] netlink_sendmsg+0x856/0xd90 [ 500.329660][T18970] ? netlink_unicast+0x7d0/0x7d0 [ 500.334664][T18970] ? netlink_unicast+0x7d0/0x7d0 [ 500.339603][T18970] sock_sendmsg+0xcf/0x120 [ 500.344023][T18970] ____sys_sendmsg+0x6e8/0x810 [ 500.348790][T18970] ? kernel_sendmsg+0x50/0x50 [ 500.353465][T18970] ? do_recvmmsg+0x6d0/0x6d0 [ 500.358057][T18970] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 500.364032][T18970] ? _parse_integer+0x132/0x180 [ 500.368883][T18970] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 500.374861][T18970] ___sys_sendmsg+0xf3/0x170 [ 500.379459][T18970] ? sendmsg_copy_msghdr+0x160/0x160 [ 500.384746][T18970] ? __fget_files+0x272/0x400 [ 500.389440][T18970] ? lock_downgrade+0x820/0x820 [ 500.394288][T18970] ? find_held_lock+0x2d/0x110 [ 500.399049][T18970] ? ksys_write+0x212/0x250 [ 500.403562][T18970] ? __fget_files+0x294/0x400 [ 500.408240][T18970] ? __fget_light+0xea/0x280 [ 500.412836][T18970] __sys_sendmsg+0xe5/0x1b0 [ 500.417349][T18970] ? __sys_sendmsg_sock+0xb0/0xb0 [ 500.422387][T18970] ? do_syscall_64+0x1c/0xe0 [ 500.426974][T18970] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 500.432958][T18970] do_syscall_64+0x60/0xe0 [ 500.437373][T18970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.443262][T18970] RIP: 0033:0x45c1d9 [ 500.447147][T18970] Code: Bad RIP value. [ 500.451209][T18970] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.459618][T18970] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 500.467584][T18970] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 500.475557][T18970] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 500.483525][T18970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 500.491499][T18970] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 500.524809][T18937] FAULT_INJECTION: forcing a failure. [ 500.524809][T18937] name failslab, interval 1, probability 0, space 0, times 0 [ 500.554157][T18937] CPU: 1 PID: 18937 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 500.562831][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.572876][T18937] Call Trace: [ 500.576167][T18937] dump_stack+0x18f/0x20d [ 500.580502][T18937] should_fail.cold+0x5/0x14 [ 500.585103][T18937] should_failslab+0x5/0xf [ 500.589516][T18937] kmem_cache_alloc+0x2a9/0x3b0 [ 500.594388][T18937] security_file_alloc+0x34/0x170 [ 500.599416][T18937] __alloc_file+0xd8/0x350 [ 500.603834][T18937] alloc_empty_file+0x6d/0x170 [ 500.608600][T18937] path_openat+0xe3/0x2750 [ 500.613017][T18937] ? __lock_acquire+0x16e3/0x56e0 [ 500.618047][T18937] ? path_lookupat+0x830/0x830 [ 500.622808][T18937] ? cache_grow_end+0x46/0x170 [ 500.627578][T18937] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 500.633565][T18937] ? lock_is_held_type+0xb0/0xe0 [ 500.638513][T18937] do_filp_open+0x17e/0x3c0 [ 500.643030][T18937] ? may_open_dev+0xf0/0xf0 [ 500.647537][T18937] ? __alloc_fd+0x28d/0x600 [ 500.652044][T18937] ? lock_downgrade+0x820/0x820 [ 500.656897][T18937] ? do_raw_spin_lock+0x120/0x2b0 [ 500.661920][T18937] ? rwlock_bug.part.0+0x90/0x90 [ 500.666866][T18937] ? _raw_spin_unlock+0x24/0x40 [ 500.671696][T18937] ? __alloc_fd+0x28d/0x600 [ 500.676178][T18937] do_sys_openat2+0x16f/0x3b0 [ 500.680827][T18937] ? build_open_flags+0x650/0x650 [ 500.685822][T18937] ? __mutex_unlock_slowpath+0xe2/0x610 [ 500.691341][T18937] ? wait_for_completion+0x260/0x260 [ 500.696603][T18937] __x64_sys_openat+0x13f/0x1f0 [ 500.701425][T18937] ? __ia32_sys_open+0x1c0/0x1c0 [ 500.706332][T18937] ? ksys_write+0x1a5/0x250 [ 500.710807][T18937] ? lock_is_held_type+0xb0/0xe0 [ 500.715718][T18937] ? do_syscall_64+0x1c/0xe0 [ 500.720281][T18937] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 500.726269][T18937] do_syscall_64+0x60/0xe0 [ 500.730659][T18937] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.736526][T18937] RIP: 0033:0x45c1d9 [ 500.740388][T18937] Code: Bad RIP value. [ 500.744424][T18937] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 500.752803][T18937] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 500.760748][T18937] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 500.768696][T18937] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 500.776641][T18937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 500.784585][T18937] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 500.793212][ T28] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 500.809131][ T2651] usb 6-1: USB disconnect, device number 81 [ 500.920396][ T2521] usb 1-1: Using ep0 maxpacket: 8 [ 501.049358][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 501.060501][ T2521] usb 1-1: config 0 has no interfaces? [ 501.065998][ T2521] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 501.089106][ T2521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.128847][ T2521] usb 1-1: config 0 descriptor?? [ 501.180367][ T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 501.188385][ T28] usb 2-1: config 0 has no interface number 0 [ 501.196464][ T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 501.208201][ T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 501.218729][ T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 501.229068][ T28] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 501.238782][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.248077][ T28] usb 2-1: config 0 descriptor?? [ 501.270533][T18956] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 501.277523][T18956] raw-gadget gadget: fail, usb_ep_enable returned -22 05:46:01 executing program 5 (fault-call:1 fault-nth:4): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x15, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:01 executing program 3 (fault-call:4 fault-nth:8): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x7a00) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 501.384653][T18955] FAULT_INJECTION: forcing a failure. [ 501.384653][T18955] name failslab, interval 1, probability 0, space 0, times 0 [ 501.413867][T19035] FAULT_INJECTION: forcing a failure. [ 501.413867][T19035] name failslab, interval 1, probability 0, space 0, times 0 [ 501.424357][T18955] CPU: 0 PID: 18955 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 501.435109][T18955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.445145][T18955] Call Trace: [ 501.448420][T18955] dump_stack+0x18f/0x20d [ 501.452739][T18955] should_fail.cold+0x5/0x14 [ 501.457317][T18955] should_failslab+0x5/0xf [ 501.461714][T18955] kmem_cache_alloc+0x2a9/0x3b0 [ 501.466548][T18955] security_file_alloc+0x34/0x170 [ 501.471557][T18955] __alloc_file+0xd8/0x350 [ 501.475958][T18955] alloc_empty_file+0x6d/0x170 [ 501.480714][T18955] path_openat+0xe3/0x2750 [ 501.485123][T18955] ? __lock_acquire+0x16e3/0x56e0 [ 501.490146][T18955] ? path_lookupat+0x830/0x830 [ 501.494895][T18955] ? cache_grow_end+0x46/0x170 [ 501.499663][T18955] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 501.505631][T18955] ? lock_is_held_type+0xb0/0xe0 [ 501.510552][T18955] do_filp_open+0x17e/0x3c0 [ 501.515050][T18955] ? may_open_dev+0xf0/0xf0 [ 501.519554][T18955] ? __alloc_fd+0x28d/0x600 [ 501.524056][T18955] ? lock_downgrade+0x820/0x820 [ 501.528909][T18955] ? do_raw_spin_lock+0x120/0x2b0 [ 501.533933][T18955] ? rwlock_bug.part.0+0x90/0x90 [ 501.538881][T18955] ? _raw_spin_unlock+0x24/0x40 [ 501.543730][T18955] ? __alloc_fd+0x28d/0x600 [ 501.548235][T18955] do_sys_openat2+0x16f/0x3b0 [ 501.552914][T18955] ? build_open_flags+0x650/0x650 [ 501.557951][T18955] ? __mutex_unlock_slowpath+0xe2/0x610 [ 501.563491][T18955] ? wait_for_completion+0x260/0x260 [ 501.568776][T18955] __x64_sys_openat+0x13f/0x1f0 [ 501.573621][T18955] ? __ia32_sys_open+0x1c0/0x1c0 [ 501.578549][T18955] ? ksys_write+0x1a5/0x250 [ 501.583036][T18955] ? lock_is_held_type+0xb0/0xe0 [ 501.587962][T18955] ? do_syscall_64+0x1c/0xe0 [ 501.592540][T18955] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 501.598511][T18955] do_syscall_64+0x60/0xe0 [ 501.602919][T18955] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 501.608805][T18955] RIP: 0033:0x45c1d9 [ 501.612685][T18955] Code: Bad RIP value. [ 501.616743][T18955] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.625152][T18955] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 501.633119][T18955] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 501.641084][T18955] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 501.649051][T18955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 501.657019][T18955] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 501.664993][T19035] CPU: 1 PID: 19035 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 501.673668][T19035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.680777][ T3790] usb 1-1: USB disconnect, device number 64 [ 501.683710][T19035] Call Trace: [ 501.683729][T19035] dump_stack+0x18f/0x20d [ 501.683749][T19035] should_fail.cold+0x5/0x14 [ 501.683762][T19035] ? mark_lock+0xbc/0x1710 [ 501.683780][T19035] should_failslab+0x5/0xf [ 501.710572][T19035] kmem_cache_alloc_node_trace+0x58/0x400 [ 501.716299][T19035] __kmalloc_node_track_caller+0x38/0x60 [ 501.721932][T19035] pskb_expand_head+0x15a/0x1040 [ 501.726864][T19035] ? kmem_cache_alloc+0x35f/0x3b0 [ 501.731872][T19035] netlink_trim+0x1ea/0x240 [ 501.736367][T19035] netlink_broadcast_filtered+0x65/0xdc0 [ 501.741998][T19035] netlink_broadcast+0x35/0x40 [ 501.746748][T19035] rtnetlink_send+0x125/0x180 [ 501.751460][T19035] qdisc_notify.isra.0+0x1c5/0x310 [ 501.756558][T19035] tc_modify_qdisc+0xf45/0x1990 [ 501.761415][T19035] ? qdisc_create+0x12e0/0x12e0 [ 501.766291][T19035] ? lock_is_held_type+0xb0/0xe0 [ 501.771226][T19035] ? qdisc_create+0x12e0/0x12e0 [ 501.776074][T19035] rtnetlink_rcv_msg+0x44e/0xad0 [ 501.781013][T19035] ? rtnetlink_put_metrics+0x510/0x510 [ 501.786472][T19035] ? lock_acquire+0x1f1/0xad0 [ 501.791152][T19035] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 501.796448][T19035] netlink_rcv_skb+0x15a/0x430 [ 501.801212][T19035] ? rtnetlink_put_metrics+0x510/0x510 [ 501.806667][T19035] ? netlink_ack+0xa10/0xa10 [ 501.811267][T19035] netlink_unicast+0x533/0x7d0 [ 501.816035][T19035] ? netlink_attachskb+0x810/0x810 [ 501.821145][T19035] ? _copy_from_iter_full+0x247/0x890 [ 501.826515][T19035] ? __phys_addr+0x9a/0x110 [ 501.831020][T19035] ? __phys_addr_symbol+0x2c/0x70 [ 501.836044][T19035] ? __check_object_size+0x171/0x3e4 [ 501.841334][T19035] netlink_sendmsg+0x856/0xd90 [ 501.846104][T19035] ? netlink_unicast+0x7d0/0x7d0 [ 501.851050][T19035] ? netlink_unicast+0x7d0/0x7d0 [ 501.855987][T19035] sock_sendmsg+0xcf/0x120 [ 501.860410][T19035] ____sys_sendmsg+0x6e8/0x810 [ 501.865183][T19035] ? kernel_sendmsg+0x50/0x50 [ 501.869859][T19035] ? do_recvmmsg+0x6d0/0x6d0 [ 501.874459][T19035] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 501.880442][T19035] ? _parse_integer+0x132/0x180 [ 501.885293][T19035] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 501.891273][T19035] ___sys_sendmsg+0xf3/0x170 [ 501.895865][T19035] ? sendmsg_copy_msghdr+0x160/0x160 [ 501.901152][T19035] ? __fget_files+0x272/0x400 [ 501.905836][T19035] ? lock_downgrade+0x820/0x820 [ 501.910691][T19035] ? find_held_lock+0x2d/0x110 [ 501.915453][T19035] ? ksys_write+0x212/0x250 [ 501.919961][T19035] ? __fget_files+0x294/0x400 [ 501.923164][T19053] FAULT_INJECTION: forcing a failure. [ 501.923164][T19053] name failslab, interval 1, probability 0, space 0, times 0 [ 501.924636][T19035] ? __fget_light+0xea/0x280 [ 501.924657][T19035] __sys_sendmsg+0xe5/0x1b0 [ 501.924671][T19035] ? __sys_sendmsg_sock+0xb0/0xb0 [ 501.924697][T19035] ? do_syscall_64+0x1c/0xe0 [ 501.955909][T19035] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 501.961890][T19035] do_syscall_64+0x60/0xe0 [ 501.966305][T19035] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 501.972191][T19035] RIP: 0033:0x45c1d9 [ 501.976068][T19035] Code: Bad RIP value. [ 501.980118][T19035] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.988509][T19035] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 501.996460][T19035] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 502.004410][T19035] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 502.012363][T19035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 502.020313][T19035] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 502.028331][T19053] CPU: 0 PID: 19053 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 502.037002][T19053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.047049][T19053] Call Trace: [ 502.050345][T19053] dump_stack+0x18f/0x20d [ 502.054681][T19053] should_fail.cold+0x5/0x14 [ 502.059275][T19053] should_failslab+0x5/0xf [ 502.063698][T19053] kmem_cache_alloc+0x2a9/0x3b0 [ 502.068551][T19053] __alloc_file+0x21/0x350 [ 502.072968][T19053] alloc_empty_file+0x6d/0x170 [ 502.077732][T19053] path_openat+0xe3/0x2750 [ 502.082149][T19053] ? __lock_acquire+0x16e3/0x56e0 [ 502.087177][T19053] ? path_lookupat+0x830/0x830 [ 502.091938][T19053] ? cache_grow_end+0x46/0x170 [ 502.096705][T19053] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 502.102689][T19053] ? lock_is_held_type+0xb0/0xe0 [ 502.107636][T19053] do_filp_open+0x17e/0x3c0 [ 502.112153][T19053] ? may_open_dev+0xf0/0xf0 [ 502.116654][T19053] ? __alloc_fd+0x28d/0x600 [ 502.121171][T19053] ? lock_downgrade+0x820/0x820 [ 502.126017][T19053] ? do_raw_spin_lock+0x120/0x2b0 [ 502.131034][T19053] ? rwlock_bug.part.0+0x90/0x90 [ 502.135954][T19053] ? _raw_spin_unlock+0x24/0x40 [ 502.140791][T19053] ? __alloc_fd+0x28d/0x600 [ 502.145285][T19053] do_sys_openat2+0x16f/0x3b0 [ 502.149942][T19053] ? build_open_flags+0x650/0x650 [ 502.154949][T19053] ? __mutex_unlock_slowpath+0xe2/0x610 [ 502.160472][T19053] ? wait_for_completion+0x260/0x260 [ 502.165737][T19053] __x64_sys_openat+0x13f/0x1f0 [ 502.170579][T19053] ? __ia32_sys_open+0x1c0/0x1c0 [ 502.175489][T19053] ? ksys_write+0x1a5/0x250 [ 502.179976][T19053] ? lock_is_held_type+0xb0/0xe0 [ 502.184987][T19053] ? do_syscall_64+0x1c/0xe0 [ 502.189552][T19053] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 502.195508][T19053] do_syscall_64+0x60/0xe0 [ 502.199900][T19053] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.205770][T19053] RIP: 0033:0x45c1d9 [ 502.209633][T19053] Code: Bad RIP value. [ 502.213674][T19053] RSP: 002b:00007fed86d35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.222056][T19053] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 502.230003][T19053] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 502.237947][T19053] RBP: 00007fed86d35ca0 R08: 0000000000000000 R09: 0000000000000000 [ 502.245894][T19053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.253854][T19053] R13: 0000000000c9fb6f R14: 00007fed86d369c0 R15: 000000000078bfac [ 502.265699][ T17] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 502.310285][ T2651] usb 2-1: USB disconnect, device number 13 [ 502.520088][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 502.640110][ T17] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 502.648251][ T17] usb 6-1: config 0 has no interface number 0 [ 502.658746][ T17] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 502.669840][ T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 502.683438][ T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 502.693264][ T17] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 502.705799][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.717419][ T17] usb 6-1: config 0 descriptor?? [ 502.740409][T19046] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 502.748023][T19046] raw-gadget gadget: fail, usb_ep_enable returned -22 05:46:03 executing program 1 (fault-call:4 fault-nth:3): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x202, 0x0) write$cgroup_devices(r1, &(0x7f0000000040)={'b', ' *:* ', 'm\x00'}, 0x8) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f00000001c0)) ptrace$cont(0x20, r5, 0x70c, 0x6dd) 05:46:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:03 executing program 3 (fault-call:4 fault-nth:9): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:03 executing program 0 (fault-call:1 fault-nth:4): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 502.864803][T19100] FAULT_INJECTION: forcing a failure. [ 502.864803][T19100] name failslab, interval 1, probability 0, space 0, times 0 [ 502.894705][T19100] CPU: 1 PID: 19100 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 502.903395][T19100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.913445][T19100] Call Trace: [ 502.916738][T19100] dump_stack+0x18f/0x20d [ 502.921074][T19100] should_fail.cold+0x5/0x14 [ 502.925670][T19100] should_failslab+0x5/0xf [ 502.930090][T19100] kmem_cache_alloc_node_trace+0x58/0x400 [ 502.935817][T19100] __kmalloc_node_track_caller+0x38/0x60 [ 502.941452][T19100] pskb_expand_head+0x15a/0x1040 [ 502.946392][T19100] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 502.951938][T19100] ? kmem_cache_free+0x261/0x310 [ 502.956879][T19100] netlink_trim+0x1ea/0x240 [ 502.961385][T19100] netlink_unicast+0xb9/0x7d0 [ 502.966068][T19100] ? netlink_attachskb+0x810/0x810 [ 502.971188][T19100] rtnetlink_send+0x138/0x180 [ 502.975869][T19100] qdisc_notify.isra.0+0x1c5/0x310 [ 502.980985][T19100] tc_modify_qdisc+0xf45/0x1990 [ 502.985843][T19100] ? qdisc_create+0x12e0/0x12e0 [ 502.990711][T19100] ? lock_is_held_type+0xb0/0xe0 [ 502.995650][T19100] ? qdisc_create+0x12e0/0x12e0 [ 503.000506][T19100] rtnetlink_rcv_msg+0x44e/0xad0 [ 503.005478][T19100] ? rtnetlink_put_metrics+0x510/0x510 [ 503.010940][T19100] ? lock_acquire+0x1f1/0xad0 [ 503.015620][T19100] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 503.020909][T19100] netlink_rcv_skb+0x15a/0x430 [ 503.025679][T19100] ? rtnetlink_put_metrics+0x510/0x510 [ 503.031142][T19100] ? netlink_ack+0xa10/0xa10 [ 503.035744][T19100] netlink_unicast+0x533/0x7d0 [ 503.040513][T19100] ? netlink_attachskb+0x810/0x810 [ 503.045624][T19100] ? _copy_from_iter_full+0x247/0x890 [ 503.050996][T19100] ? __phys_addr+0x9a/0x110 [ 503.055498][T19100] ? __phys_addr_symbol+0x2c/0x70 [ 503.060524][T19100] ? __check_object_size+0x171/0x3e4 [ 503.065807][T19100] netlink_sendmsg+0x856/0xd90 [ 503.070575][T19100] ? netlink_unicast+0x7d0/0x7d0 [ 503.075520][T19100] ? netlink_unicast+0x7d0/0x7d0 [ 503.080460][T19100] sock_sendmsg+0xcf/0x120 [ 503.084883][T19100] ____sys_sendmsg+0x6e8/0x810 [ 503.089650][T19100] ? kernel_sendmsg+0x50/0x50 [ 503.094341][T19100] ? do_recvmmsg+0x6d0/0x6d0 [ 503.098934][T19100] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 503.104912][T19100] ? _parse_integer+0x132/0x180 [ 503.107875][T19046] FAULT_INJECTION: forcing a failure. [ 503.107875][T19046] name failslab, interval 1, probability 0, space 0, times 0 [ 503.109770][T19100] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 503.128282][T19100] ___sys_sendmsg+0xf3/0x170 [ 503.129909][ T2521] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 503.132862][T19100] ? sendmsg_copy_msghdr+0x160/0x160 [ 503.132877][T19100] ? __fget_files+0x272/0x400 [ 503.132895][T19100] ? lock_downgrade+0x820/0x820 [ 503.132913][T19100] ? find_held_lock+0x2d/0x110 [ 503.140642][ T3790] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 503.145702][T19100] ? ksys_write+0x212/0x250 [ 503.145720][T19100] ? __fget_files+0x294/0x400 [ 503.145740][T19100] ? __fget_light+0xea/0x280 [ 503.145763][T19100] __sys_sendmsg+0xe5/0x1b0 [ 503.185661][T19100] ? __sys_sendmsg_sock+0xb0/0xb0 [ 503.190707][T19100] ? do_syscall_64+0x1c/0xe0 [ 503.195285][T19100] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 503.201270][T19100] do_syscall_64+0x60/0xe0 [ 503.205672][T19100] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.211548][T19100] RIP: 0033:0x45c1d9 [ 503.215416][T19100] Code: Bad RIP value. [ 503.219461][T19100] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.227850][T19100] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 503.235807][T19100] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 503.243769][T19100] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 503.251729][T19100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 503.259684][T19100] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 503.267654][T19046] CPU: 0 PID: 19046 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 503.276326][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.286372][T19046] Call Trace: [ 503.289693][T19046] dump_stack+0x18f/0x20d [ 503.294023][T19046] should_fail.cold+0x5/0x14 [ 503.298706][T19046] ? tomoyo_realpath_from_path+0xc3/0x620 [ 503.304423][T19046] should_failslab+0x5/0xf [ 503.308840][T19046] __kmalloc+0x27d/0x340 05:46:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x17, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 503.313084][T19046] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 503.318634][T19046] tomoyo_realpath_from_path+0xc3/0x620 [ 503.324189][T19046] tomoyo_check_open_permission+0x272/0x380 [ 503.330085][T19046] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 503.335727][T19046] ? lookup_fast+0x6c0/0x6c0 [ 503.340337][T19046] ? lock_downgrade+0x820/0x820 [ 503.345182][T19046] ? do_raw_spin_lock+0x120/0x2b0 [ 503.350205][T19046] tomoyo_file_open+0xa3/0xd0 [ 503.354880][T19046] security_file_open+0x52/0x3f0 [ 503.359837][T19046] do_dentry_open+0x3a0/0x1290 05:46:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x18, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 503.364610][T19046] path_openat+0x1bb9/0x2750 [ 503.369209][T19046] ? path_lookupat+0x830/0x830 [ 503.373971][T19046] ? cache_grow_end+0x46/0x170 [ 503.378739][T19046] ? lock_is_held_type+0xb0/0xe0 [ 503.383681][T19046] do_filp_open+0x17e/0x3c0 [ 503.388184][T19046] ? may_open_dev+0xf0/0xf0 [ 503.392698][T19046] ? do_raw_spin_lock+0x120/0x2b0 [ 503.397720][T19046] ? rwlock_bug.part.0+0x90/0x90 [ 503.402750][T19046] ? _raw_spin_unlock+0x24/0x40 [ 503.407604][T19046] ? __alloc_fd+0x28d/0x600 [ 503.412119][T19046] do_sys_openat2+0x16f/0x3b0 [ 503.416799][T19046] ? build_open_flags+0x650/0x650 [ 503.421821][T19046] ? __mutex_unlock_slowpath+0xe2/0x610 [ 503.427368][T19046] ? wait_for_completion+0x260/0x260 [ 503.432652][T19046] __x64_sys_openat+0x13f/0x1f0 [ 503.437498][T19046] ? __ia32_sys_open+0x1c0/0x1c0 [ 503.442434][T19046] ? ksys_write+0x1a5/0x250 [ 503.446937][T19046] ? lock_is_held_type+0xb0/0xe0 [ 503.451875][T19046] ? do_syscall_64+0x1c/0xe0 [ 503.456463][T19046] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 503.462460][T19046] do_syscall_64+0x60/0xe0 [ 503.466876][T19046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.472762][T19046] RIP: 0033:0x45c1d9 [ 503.476649][T19046] Code: Bad RIP value. [ 503.480716][T19046] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 503.489119][T19046] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 503.497087][T19046] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 503.505052][T19046] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 05:46:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x19, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 503.513017][T19046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 503.520986][T19046] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 503.539269][T19046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.649861][ T3790] usb 2-1: Using ep0 maxpacket: 8 [ 503.655145][ T2521] usb 1-1: Using ep0 maxpacket: 8 [ 503.776649][ T3790] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 503.789271][ T3790] usb 2-1: config 0 has no interface number 0 [ 503.795874][ T2521] usb 1-1: config 0 has no interfaces? [ 503.801733][ T2521] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 503.819875][ T3790] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 503.831589][ T2521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.839920][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 503.851906][ T2521] usb 1-1: config 0 descriptor?? [ 503.857183][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 503.883615][ T8485] usb 6-1: USB disconnect, device number 82 [ 503.904957][ T3790] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 503.943701][ T3790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.969906][ T3790] usb 2-1: config 0 descriptor?? [ 503.990646][T19104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 503.997556][T19104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 504.096552][T19101] FAULT_INJECTION: forcing a failure. [ 504.096552][T19101] name failslab, interval 1, probability 0, space 0, times 0 [ 504.138021][T19101] CPU: 0 PID: 19101 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 504.146727][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.156866][T19101] Call Trace: [ 504.160161][T19101] dump_stack+0x18f/0x20d [ 504.164498][T19101] should_fail.cold+0x5/0x14 [ 504.169094][T19101] ? tomoyo_realpath_from_path+0xc3/0x620 [ 504.174901][T19101] should_failslab+0x5/0xf [ 504.179317][T19101] __kmalloc+0x27d/0x340 [ 504.183560][T19101] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 504.189110][T19101] tomoyo_realpath_from_path+0xc3/0x620 [ 504.194669][T19101] tomoyo_check_open_permission+0x272/0x380 [ 504.200563][T19101] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 504.206201][T19101] ? lookup_fast+0x6c0/0x6c0 [ 504.210834][T19101] ? lock_downgrade+0x820/0x820 [ 504.215698][T19101] ? do_raw_spin_lock+0x120/0x2b0 [ 504.220728][T19101] tomoyo_file_open+0xa3/0xd0 [ 504.225405][T19101] security_file_open+0x52/0x3f0 [ 504.230348][T19101] do_dentry_open+0x3a0/0x1290 [ 504.235123][T19101] path_openat+0x1bb9/0x2750 [ 504.239719][T19101] ? path_lookupat+0x830/0x830 [ 504.244478][T19101] ? cache_grow_end+0x46/0x170 [ 504.249267][T19101] ? lock_is_held_type+0xb0/0xe0 [ 504.254326][T19101] do_filp_open+0x17e/0x3c0 [ 504.258831][T19101] ? may_open_dev+0xf0/0xf0 [ 504.263342][T19101] ? do_raw_spin_lock+0x120/0x2b0 [ 504.268356][T19101] ? rwlock_bug.part.0+0x90/0x90 [ 504.273274][T19101] ? _raw_spin_unlock+0x24/0x40 [ 504.278095][T19101] ? __alloc_fd+0x28d/0x600 [ 504.282578][T19101] do_sys_openat2+0x16f/0x3b0 [ 504.287240][T19101] ? build_open_flags+0x650/0x650 [ 504.292237][T19101] ? __mutex_unlock_slowpath+0xe2/0x610 [ 504.297755][T19101] ? wait_for_completion+0x260/0x260 [ 504.303013][T19101] __x64_sys_openat+0x13f/0x1f0 [ 504.307834][T19101] ? __ia32_sys_open+0x1c0/0x1c0 [ 504.312743][T19101] ? ksys_write+0x1a5/0x250 [ 504.317218][T19101] ? lock_is_held_type+0xb0/0xe0 [ 504.322130][T19101] ? do_syscall_64+0x1c/0xe0 [ 504.326692][T19101] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 504.332648][T19101] do_syscall_64+0x60/0xe0 [ 504.337038][T19101] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 504.342903][T19101] RIP: 0033:0x45c1d9 [ 504.346765][T19101] Code: Bad RIP value. [ 504.350951][T19101] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.359331][T19101] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 504.367275][T19101] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 504.375219][T19101] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 504.383168][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 504.391131][T19101] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 504.403354][T19101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.418679][T19104] FAULT_INJECTION: forcing a failure. [ 504.418679][T19104] name failslab, interval 1, probability 0, space 0, times 0 [ 504.434869][T19104] CPU: 0 PID: 19104 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 504.443646][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.453684][T19104] Call Trace: [ 504.456952][T19104] dump_stack+0x18f/0x20d [ 504.461260][T19104] should_fail.cold+0x5/0x14 [ 504.465828][T19104] should_failslab+0x5/0xf [ 504.470219][T19104] kmem_cache_alloc+0x2a9/0x3b0 [ 504.475062][T19104] security_file_alloc+0x34/0x170 [ 504.480070][T19104] __alloc_file+0xd8/0x350 [ 504.484462][T19104] alloc_empty_file+0x6d/0x170 [ 504.489201][T19104] path_openat+0xe3/0x2750 [ 504.493593][T19104] ? __lock_acquire+0x16e3/0x56e0 [ 504.498596][T19104] ? path_lookupat+0x830/0x830 [ 504.503334][T19104] ? cache_grow_end+0x46/0x170 [ 504.508075][T19104] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 504.514042][T19104] ? lock_is_held_type+0xb0/0xe0 [ 504.518969][T19104] do_filp_open+0x17e/0x3c0 [ 504.523448][T19104] ? may_open_dev+0xf0/0xf0 [ 504.527926][T19104] ? __alloc_fd+0x28d/0x600 [ 504.532406][T19104] ? lock_downgrade+0x820/0x820 [ 504.537236][T19104] ? do_raw_spin_lock+0x120/0x2b0 [ 504.542233][T19104] ? rwlock_bug.part.0+0x90/0x90 [ 504.547147][T19104] ? _raw_spin_unlock+0x24/0x40 [ 504.551968][T19104] ? __alloc_fd+0x28d/0x600 [ 504.556455][T19104] do_sys_openat2+0x16f/0x3b0 [ 504.561104][T19104] ? build_open_flags+0x650/0x650 [ 504.566101][T19104] ? __mutex_unlock_slowpath+0xe2/0x610 [ 504.571621][T19104] ? wait_for_completion+0x260/0x260 [ 504.576881][T19104] __x64_sys_openat+0x13f/0x1f0 [ 504.581714][T19104] ? __ia32_sys_open+0x1c0/0x1c0 [ 504.586631][T19104] ? ksys_write+0x1a5/0x250 [ 504.591107][T19104] ? lock_is_held_type+0xb0/0xe0 [ 504.596018][T19104] ? do_syscall_64+0x1c/0xe0 [ 504.600590][T19104] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 504.606554][T19104] do_syscall_64+0x60/0xe0 [ 504.610945][T19104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 504.616821][T19104] RIP: 0033:0x45c1d9 [ 504.620701][T19104] Code: Bad RIP value. [ 504.624758][T19104] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 05:46:05 executing program 5 (fault-call:1 fault-nth:5): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:05 executing program 3 (fault-call:4 fault-nth:10): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'macvtap0\x00', 0x1}, 0x18) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 504.633162][T19104] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 504.641130][T19104] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 504.649099][T19104] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 504.657065][T19104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 504.665031][T19104] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 504.711240][T19170] FAULT_INJECTION: forcing a failure. [ 504.711240][T19170] name failslab, interval 1, probability 0, space 0, times 0 [ 504.738497][T19170] CPU: 0 PID: 19170 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 504.747177][T19170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.757227][T19170] Call Trace: [ 504.760521][T19170] dump_stack+0x18f/0x20d [ 504.764864][T19170] should_fail.cold+0x5/0x14 [ 504.769460][T19170] should_failslab+0x5/0xf [ 504.773881][T19170] kmem_cache_alloc+0x40/0x3b0 [ 504.778661][T19170] skb_clone+0x14f/0x3c0 [ 504.782909][T19170] netlink_deliver_tap+0x990/0xb70 [ 504.788029][T19170] netlink_unicast+0x697/0x7d0 [ 504.792801][T19170] ? netlink_attachskb+0x810/0x810 [ 504.797276][ T2651] usb 2-1: USB disconnect, device number 14 [ 504.797914][T19170] rtnetlink_send+0x138/0x180 [ 504.797972][T19170] qdisc_notify.isra.0+0x1c5/0x310 [ 504.813596][T19170] tc_modify_qdisc+0xf45/0x1990 [ 504.818462][T19170] ? qdisc_create+0x12e0/0x12e0 [ 504.823326][T19170] ? lock_is_held_type+0xb0/0xe0 [ 504.828267][T19170] ? qdisc_create+0x12e0/0x12e0 [ 504.833123][T19170] rtnetlink_rcv_msg+0x44e/0xad0 [ 504.838081][T19170] ? rtnetlink_put_metrics+0x510/0x510 [ 504.843546][T19170] ? lock_acquire+0x1f1/0xad0 [ 504.848229][T19170] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 504.853518][T19170] netlink_rcv_skb+0x15a/0x430 [ 504.858282][T19170] ? rtnetlink_put_metrics+0x510/0x510 [ 504.863742][T19170] ? netlink_ack+0xa10/0xa10 [ 504.868343][T19170] netlink_unicast+0x533/0x7d0 [ 504.873114][T19170] ? netlink_attachskb+0x810/0x810 [ 504.878230][T19170] ? _copy_from_iter_full+0x247/0x890 [ 504.883599][T19170] ? __phys_addr+0x9a/0x110 [ 504.888103][T19170] ? __phys_addr_symbol+0x2c/0x70 [ 504.893128][T19170] ? __check_object_size+0x171/0x3e4 [ 504.898427][T19170] netlink_sendmsg+0x856/0xd90 [ 504.903185][T19170] ? netlink_unicast+0x7d0/0x7d0 [ 504.908102][T19170] ? netlink_unicast+0x7d0/0x7d0 [ 504.913015][T19170] sock_sendmsg+0xcf/0x120 [ 504.917409][T19170] ____sys_sendmsg+0x6e8/0x810 [ 504.922151][T19170] ? kernel_sendmsg+0x50/0x50 [ 504.926799][T19170] ? do_recvmmsg+0x6d0/0x6d0 [ 504.931378][T19170] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 504.937343][T19170] ? _parse_integer+0x132/0x180 [ 504.942176][T19170] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 504.948163][T19170] ___sys_sendmsg+0xf3/0x170 [ 504.952791][T19170] ? sendmsg_copy_msghdr+0x160/0x160 [ 504.958070][T19170] ? __fget_files+0x272/0x400 [ 504.962749][T19170] ? lock_downgrade+0x820/0x820 [ 504.967584][T19170] ? find_held_lock+0x2d/0x110 [ 504.972324][T19170] ? ksys_write+0x212/0x250 [ 504.976806][T19170] ? __fget_files+0x294/0x400 [ 504.981473][T19170] ? __fget_light+0xea/0x280 [ 504.986052][T19170] __sys_sendmsg+0xe5/0x1b0 [ 504.990529][T19170] ? __sys_sendmsg_sock+0xb0/0xb0 [ 504.995537][T19170] ? do_syscall_64+0x1c/0xe0 [ 505.000102][T19170] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 505.006058][T19170] do_syscall_64+0x60/0xe0 [ 505.010453][T19170] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.016317][T19170] RIP: 0033:0x45c1d9 [ 505.020185][T19170] Code: Bad RIP value. [ 505.024234][T19170] RSP: 002b:00007f8e156f7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.032618][T19170] RAX: ffffffffffffffda RBX: 000000000002af40 RCX: 000000000045c1d9 [ 505.040565][T19170] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 505.048635][T19170] RBP: 00007f8e156f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 505.056705][T19170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 505.064655][T19170] R13: 0000000000c9fb6f R14: 00007f8e156f89c0 R15: 000000000078bf0c [ 505.095520][ T3790] usb 1-1: USB disconnect, device number 65 [ 505.249603][ T17] usb 6-1: new high-speed USB device number 83 using dummy_hcd 05:46:05 executing program 1 (fault-call:4 fault-nth:4): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:05 executing program 3 (fault-call:4 fault-nth:11): r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1c, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 505.509642][ T17] usb 6-1: Using ep0 maxpacket: 8 05:46:06 executing program 0 (fault-call:1 fault-nth:5): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000001140)={0xa10000, 0x8000, 0x5, r1, 0x0, &(0x7f0000001100)={0x980902, 0x8, [], @ptr=0x9}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f0000006300)={0x11c, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "170ff2ec0ca680af2ecdd9b21231b99a08128fad57b3d45bb9b97e10"}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 505.641849][ T17] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 505.649920][ T2651] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 505.681846][ T17] usb 6-1: config 0 has no interface number 0 [ 505.712269][ T17] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 505.742594][ T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 505.753654][ T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 505.765517][ T17] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 505.775759][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.786388][ T17] usb 6-1: config 0 descriptor?? [ 505.809929][T19172] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 505.817611][T19172] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 505.909516][ T2651] usb 2-1: Using ep0 maxpacket: 8 [ 506.029685][ T2651] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 506.037827][ T2651] usb 2-1: config 0 has no interface number 0 [ 506.054773][ T2651] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 506.071298][T19172] FAULT_INJECTION: forcing a failure. [ 506.071298][T19172] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 506.084500][T19172] CPU: 1 PID: 19172 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 506.093166][T19172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.103220][T19172] Call Trace: [ 506.106517][T19172] dump_stack+0x18f/0x20d [ 506.110850][T19172] should_fail.cold+0x5/0x14 [ 506.115447][T19172] __alloc_pages_nodemask+0x1a3/0x930 [ 506.120827][T19172] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 506.127604][T19172] cache_grow_begin+0x8c/0xb20 [ 506.132371][T19172] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 506.137833][T19172] cache_alloc_refill+0x27b/0x340 [ 506.142859][T19172] ? lockdep_hardirqs_off+0x66/0xa0 [ 506.148069][T19172] ? tomoyo_realpath_from_path+0xc3/0x620 [ 506.153789][T19172] __kmalloc+0x319/0x340 [ 506.158044][T19172] tomoyo_realpath_from_path+0xc3/0x620 [ 506.163616][T19172] tomoyo_check_open_permission+0x272/0x380 [ 506.169526][T19172] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 506.175188][T19172] ? lookup_fast+0x6c0/0x6c0 [ 506.179800][T19172] ? lock_downgrade+0x820/0x820 [ 506.184652][T19172] ? do_raw_spin_lock+0x120/0x2b0 [ 506.189682][T19172] tomoyo_file_open+0xa3/0xd0 [ 506.194360][T19172] security_file_open+0x52/0x3f0 [ 506.199315][T19172] do_dentry_open+0x3a0/0x1290 [ 506.204090][T19172] path_openat+0x1bb9/0x2750 [ 506.208683][T19172] ? path_lookupat+0x830/0x830 [ 506.213433][T19172] ? cache_grow_end+0x46/0x170 [ 506.218180][T19172] ? lock_is_held_type+0xb0/0xe0 [ 506.223112][T19172] do_filp_open+0x17e/0x3c0 [ 506.227598][T19172] ? may_open_dev+0xf0/0xf0 [ 506.232101][T19172] ? do_raw_spin_lock+0x120/0x2b0 [ 506.237110][T19172] ? rwlock_bug.part.0+0x90/0x90 [ 506.242045][T19172] ? _raw_spin_unlock+0x24/0x40 [ 506.246882][T19172] ? __alloc_fd+0x28d/0x600 [ 506.251380][T19172] do_sys_openat2+0x16f/0x3b0 [ 506.256041][T19172] ? build_open_flags+0x650/0x650 [ 506.261056][T19172] ? __mutex_unlock_slowpath+0xe2/0x610 [ 506.266603][T19172] ? wait_for_completion+0x260/0x260 [ 506.271890][T19172] __x64_sys_openat+0x13f/0x1f0 [ 506.276728][T19172] ? __ia32_sys_open+0x1c0/0x1c0 [ 506.281646][T19172] ? ksys_write+0x1a5/0x250 [ 506.286135][T19172] ? lock_is_held_type+0xb0/0xe0 [ 506.291060][T19172] ? do_syscall_64+0x1c/0xe0 [ 506.295640][T19172] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 506.301611][T19172] do_syscall_64+0x60/0xe0 [ 506.306023][T19172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.311898][T19172] RIP: 0033:0x45c1d9 [ 506.315774][T19172] Code: Bad RIP value. [ 506.319825][T19172] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.328219][T19172] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 506.336167][T19172] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 506.344123][T19172] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 506.352080][T19172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 506.360041][T19172] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 506.370202][ T17] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 506.389563][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 506.399721][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 506.409543][ T2651] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 506.418557][ T2651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.428042][ T2651] usb 2-1: config 0 descriptor?? [ 506.459717][T19208] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 506.468462][T19208] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 506.649458][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 506.688605][ T3790] usb 6-1: USB disconnect, device number 83 [ 506.715675][T19208] FAULT_INJECTION: forcing a failure. [ 506.715675][T19208] name failslab, interval 1, probability 0, space 0, times 0 [ 506.763750][T19208] CPU: 0 PID: 19208 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 506.772435][T19208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.782485][T19208] Call Trace: [ 506.785781][T19208] dump_stack+0x18f/0x20d [ 506.790116][T19208] should_fail.cold+0x5/0x14 [ 506.794715][T19208] ? tomoyo_realpath_from_path+0xc3/0x620 [ 506.800436][T19208] should_failslab+0x5/0xf [ 506.804851][T19208] __kmalloc+0x27d/0x340 [ 506.809098][T19208] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 506.814652][T19208] tomoyo_realpath_from_path+0xc3/0x620 [ 506.820208][T19208] tomoyo_check_open_permission+0x272/0x380 [ 506.826121][T19208] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 506.831769][T19208] ? lookup_fast+0x6c0/0x6c0 [ 506.836382][T19208] ? lock_downgrade+0x820/0x820 [ 506.841233][T19208] ? do_raw_spin_lock+0x120/0x2b0 [ 506.846250][T19208] tomoyo_file_open+0xa3/0xd0 [ 506.850916][T19208] security_file_open+0x52/0x3f0 [ 506.855826][T19208] do_dentry_open+0x3a0/0x1290 [ 506.860584][T19208] path_openat+0x1bb9/0x2750 [ 506.865150][T19208] ? path_lookupat+0x830/0x830 [ 506.869888][T19208] ? cache_grow_end+0x46/0x170 [ 506.874628][T19208] ? lock_is_held_type+0xb0/0xe0 [ 506.879543][T19208] do_filp_open+0x17e/0x3c0 [ 506.884019][T19208] ? may_open_dev+0xf0/0xf0 [ 506.888497][T19208] ? do_raw_spin_lock+0x120/0x2b0 [ 506.893491][T19208] ? rwlock_bug.part.0+0x90/0x90 [ 506.898420][T19208] ? _raw_spin_unlock+0x24/0x40 [ 506.903249][T19208] ? __alloc_fd+0x28d/0x600 [ 506.907729][T19208] do_sys_openat2+0x16f/0x3b0 [ 506.912383][T19208] ? build_open_flags+0x650/0x650 [ 506.917390][T19208] ? __mutex_unlock_slowpath+0xe2/0x610 [ 506.922911][T19208] ? wait_for_completion+0x260/0x260 [ 506.928169][T19208] __x64_sys_openat+0x13f/0x1f0 [ 506.932992][T19208] ? __ia32_sys_open+0x1c0/0x1c0 [ 506.937952][T19208] ? ksys_write+0x1a5/0x250 [ 506.942442][T19208] ? lock_is_held_type+0xb0/0xe0 [ 506.947351][T19208] ? do_syscall_64+0x1c/0xe0 [ 506.951914][T19208] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 506.957883][T19208] do_syscall_64+0x60/0xe0 [ 506.962271][T19208] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.968134][T19208] RIP: 0033:0x45c1d9 [ 506.971994][T19208] Code: Bad RIP value. [ 506.976033][T19208] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.984413][T19208] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 506.992358][T19208] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 507.000302][T19208] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 507.008244][T19208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 507.016188][T19208] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 507.038824][T19208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.049823][ T17] usb 1-1: config 0 has no interfaces? [ 507.055316][ T17] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 507.085988][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.097578][ T17] usb 1-1: config 0 descriptor?? [ 507.216472][ T2521] usb 2-1: USB disconnect, device number 15 [ 507.374065][T19229] FAULT_INJECTION: forcing a failure. [ 507.374065][T19229] name failslab, interval 1, probability 0, space 0, times 0 [ 507.386814][T19229] CPU: 1 PID: 19229 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 507.395516][T19229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.405679][T19229] Call Trace: [ 507.408960][T19229] dump_stack+0x18f/0x20d [ 507.413271][T19229] should_fail.cold+0x5/0x14 [ 507.417842][T19229] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 507.423192][T19229] should_failslab+0x5/0xf [ 507.427587][T19229] __kmalloc+0x27d/0x340 [ 507.431823][T19229] ? tomoyo_realpath_from_path+0xc3/0x620 [ 507.437544][T19229] tomoyo_encode2.part.0+0xe9/0x3a0 [ 507.442741][T19229] ? tomoyo_realpath_from_path+0xc3/0x620 [ 507.448460][T19229] tomoyo_encode+0x28/0x50 [ 507.452879][T19229] tomoyo_realpath_from_path+0x186/0x620 [ 507.458537][T19229] tomoyo_check_open_permission+0x272/0x380 [ 507.464437][T19229] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 507.470082][T19229] ? lookup_fast+0x6c0/0x6c0 05:46:08 executing program 5 (fault-call:1 fault-nth:6): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x38}, @multicast1, 0x0, 0x5, [@multicast1, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x24) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x154, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffffb}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) [ 507.474697][T19229] ? lock_downgrade+0x820/0x820 [ 507.479545][T19229] ? do_raw_spin_lock+0x120/0x2b0 [ 507.484574][T19229] tomoyo_file_open+0xa3/0xd0 [ 507.489252][T19229] security_file_open+0x52/0x3f0 [ 507.494191][T19229] do_dentry_open+0x3a0/0x1290 [ 507.498969][T19229] path_openat+0x1bb9/0x2750 [ 507.503574][T19229] ? path_lookupat+0x830/0x830 [ 507.508343][T19229] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 507.514334][T19229] ? lock_is_held_type+0xb0/0xe0 [ 507.519280][T19229] do_filp_open+0x17e/0x3c0 [ 507.523777][T19229] ? may_open_dev+0xf0/0xf0 [ 507.528262][T19229] ? do_raw_spin_lock+0x120/0x2b0 [ 507.533276][T19229] ? rwlock_bug.part.0+0x90/0x90 [ 507.538214][T19229] ? _raw_spin_unlock+0x24/0x40 [ 507.543145][T19229] ? __alloc_fd+0x28d/0x600 [ 507.547743][T19229] do_sys_openat2+0x16f/0x3b0 [ 507.552430][T19229] ? build_open_flags+0x650/0x650 [ 507.557463][T19229] ? __mutex_unlock_slowpath+0xe2/0x610 [ 507.563012][T19229] ? wait_for_completion+0x260/0x260 [ 507.568287][T19229] __x64_sys_openat+0x13f/0x1f0 [ 507.573126][T19229] ? __ia32_sys_open+0x1c0/0x1c0 [ 507.578049][T19229] ? ksys_write+0x1a5/0x250 [ 507.582545][T19229] ? lock_is_held_type+0xb0/0xe0 [ 507.587592][T19229] ? do_syscall_64+0x1c/0xe0 [ 507.592182][T19229] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 507.598173][T19229] do_syscall_64+0x60/0xe0 [ 507.602593][T19229] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.608482][T19229] RIP: 0033:0x45c1d9 [ 507.612362][T19229] Code: Bad RIP value. [ 507.616422][T19229] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 507.624828][T19229] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 507.632800][T19229] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 507.640767][T19229] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 507.648754][T19229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 507.656724][T19229] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 507.681501][T19229] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.709642][ T2651] usb 1-1: USB disconnect, device number 66 05:46:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x21, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:08 executing program 1 (fault-call:4 fault-nth:5): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 507.750705][ T2521] usb 6-1: new high-speed USB device number 84 using dummy_hcd 05:46:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0xbd0ca4a9) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000321e3632361d0d2b12b2ac37d70b2cafd576b6f09d7836f19c669b927c879603d7ff01000000000000e79637c7af6d264e228cb3358c7966d6f79458c435599d4a1cb9277b864e3994e47e0c25f7c68c3ecf36c634eaa07b2cccbcc673d5feb33336f4461e7ccee26bcafc876157246213554da9912c68e5ea061105c79719660a2dcdc771a8c26ea11fb895f2dca1987ae637c2bb1777fbec0679788492741e1010eb5c62566393533758c8a620000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x71, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r6, 0x1}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x7a00) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x3b, @multicast2, 0x4e20, 0x4, 'fo\x00', 0x4, 0x80000001, 0x71}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000)="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", 0x14e, 0x20000000, 0x0, 0x0) [ 508.009319][ T2521] usb 6-1: Using ep0 maxpacket: 8 [ 508.129449][ T2521] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 508.137476][ T2521] usb 6-1: config 0 has no interface number 0 [ 508.149370][ T17] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 508.173731][ T2521] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 508.199197][ T2521] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 508.209104][ T2521] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 05:46:08 executing program 0 (fault-call:1 fault-nth:6): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x22, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 508.256435][ T2521] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 508.285659][ T2521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:46:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x23, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 508.355438][ T2521] usb 6-1: config 0 descriptor?? [ 508.389743][T19315] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 508.396685][T19315] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 508.443125][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 508.573871][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 508.589279][ T17] usb 2-1: config 0 has no interface number 0 [ 508.595365][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 508.607052][ T2651] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 508.625338][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 508.636205][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 508.645997][T19315] FAULT_INJECTION: forcing a failure. [ 508.645997][T19315] name failslab, interval 1, probability 0, space 0, times 0 [ 508.646013][T19315] CPU: 0 PID: 19315 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 508.646021][T19315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.646026][T19315] Call Trace: [ 508.646043][T19315] dump_stack+0x18f/0x20d [ 508.646064][T19315] should_fail.cold+0x5/0x14 [ 508.661285][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 508.667280][T19315] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 508.678079][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.680572][T19315] should_failslab+0x5/0xf [ 508.680588][T19315] __kmalloc+0x27d/0x340 [ 508.680603][T19315] ? tomoyo_realpath_from_path+0xc3/0x620 [ 508.680622][T19315] tomoyo_encode2.part.0+0xe9/0x3a0 [ 508.690605][ T17] usb 2-1: config 0 descriptor?? [ 508.698489][T19315] ? tomoyo_realpath_from_path+0xc3/0x620 [ 508.741880][T19315] tomoyo_encode+0x28/0x50 [ 508.746301][T19315] tomoyo_realpath_from_path+0x186/0x620 [ 508.751942][T19315] tomoyo_check_open_permission+0x272/0x380 [ 508.757839][T19315] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 508.763478][T19315] ? lookup_fast+0x6c0/0x6c0 [ 508.768093][T19315] ? lock_downgrade+0x820/0x820 [ 508.772940][T19315] ? do_raw_spin_lock+0x120/0x2b0 [ 508.777966][T19315] tomoyo_file_open+0xa3/0xd0 [ 508.782641][T19315] security_file_open+0x52/0x3f0 [ 508.787595][T19315] do_dentry_open+0x3a0/0x1290 [ 508.792364][T19315] path_openat+0x1bb9/0x2750 [ 508.796962][T19315] ? path_lookupat+0x830/0x830 [ 508.801724][T19315] ? cache_grow_end+0x46/0x170 [ 508.806505][T19315] ? lock_is_held_type+0xb0/0xe0 [ 508.811444][T19315] do_filp_open+0x17e/0x3c0 [ 508.815947][T19315] ? may_open_dev+0xf0/0xf0 [ 508.820458][T19315] ? do_raw_spin_lock+0x120/0x2b0 [ 508.825479][T19315] ? rwlock_bug.part.0+0x90/0x90 [ 508.830417][T19315] ? _raw_spin_unlock+0x24/0x40 [ 508.835261][T19315] ? __alloc_fd+0x28d/0x600 [ 508.839764][T19315] do_sys_openat2+0x16f/0x3b0 [ 508.844427][T19315] ? build_open_flags+0x650/0x650 [ 508.849453][T19315] ? __mutex_unlock_slowpath+0xe2/0x610 [ 508.855002][T19315] ? wait_for_completion+0x260/0x260 [ 508.860307][T19315] __x64_sys_openat+0x13f/0x1f0 [ 508.865157][T19315] ? __ia32_sys_open+0x1c0/0x1c0 [ 508.870084][T19315] ? ksys_write+0x1a5/0x250 [ 508.874564][T19315] ? lock_is_held_type+0xb0/0xe0 [ 508.879478][T19315] ? do_syscall_64+0x1c/0xe0 [ 508.884059][T19315] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 508.890039][T19315] do_syscall_64+0x60/0xe0 [ 508.894453][T19315] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 508.900331][T19315] RIP: 0033:0x45c1d9 [ 508.904195][T19315] Code: Bad RIP value. [ 508.908232][T19315] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 508.916626][T19315] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 508.924590][T19315] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 508.932564][T19315] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 508.940533][T19315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 508.948501][T19315] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 508.973503][T19331] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 508.982971][T19315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 508.991108][T19331] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 509.189947][ T2651] usb 1-1: Using ep0 maxpacket: 8 [ 509.226509][T19331] FAULT_INJECTION: forcing a failure. [ 509.226509][T19331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.239802][T19331] CPU: 1 PID: 19331 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 509.248453][T19331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.258488][T19331] Call Trace: [ 509.261772][T19331] dump_stack+0x18f/0x20d [ 509.266094][T19331] should_fail.cold+0x5/0x14 [ 509.270666][T19331] __alloc_pages_nodemask+0x1a3/0x930 [ 509.276022][T19331] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 509.282789][T19331] cache_grow_begin+0x8c/0xb20 [ 509.287543][T19331] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 509.292996][T19331] cache_alloc_refill+0x27b/0x340 [ 509.297998][T19331] ? lockdep_hardirqs_off+0x66/0xa0 [ 509.303208][T19331] ? tomoyo_realpath_from_path+0xc3/0x620 [ 509.308925][T19331] __kmalloc+0x319/0x340 [ 509.313173][T19331] tomoyo_realpath_from_path+0xc3/0x620 [ 509.318725][T19331] tomoyo_check_open_permission+0x272/0x380 [ 509.324622][T19331] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 509.330265][T19331] ? lookup_fast+0x6c0/0x6c0 [ 509.334875][T19331] ? lock_downgrade+0x820/0x820 [ 509.339724][T19331] ? do_raw_spin_lock+0x120/0x2b0 [ 509.344761][T19331] tomoyo_file_open+0xa3/0xd0 [ 509.349439][T19331] security_file_open+0x52/0x3f0 [ 509.354384][T19331] do_dentry_open+0x3a0/0x1290 [ 509.359163][T19331] path_openat+0x1bb9/0x2750 [ 509.363777][T19331] ? path_lookupat+0x830/0x830 [ 509.368540][T19331] ? cache_grow_end+0x46/0x170 [ 509.373315][T19331] ? lock_is_held_type+0xb0/0xe0 [ 509.378259][T19331] do_filp_open+0x17e/0x3c0 [ 509.382769][T19331] ? may_open_dev+0xf0/0xf0 [ 509.387275][T19331] ? do_raw_spin_lock+0x120/0x2b0 [ 509.392286][T19331] ? rwlock_bug.part.0+0x90/0x90 [ 509.397202][T19331] ? _raw_spin_unlock+0x24/0x40 [ 509.402037][T19331] ? __alloc_fd+0x28d/0x600 [ 509.406542][T19331] do_sys_openat2+0x16f/0x3b0 [ 509.411220][T19331] ? build_open_flags+0x650/0x650 [ 509.416240][T19331] ? __mutex_unlock_slowpath+0xe2/0x610 [ 509.421789][T19331] ? wait_for_completion+0x260/0x260 [ 509.427075][T19331] __x64_sys_openat+0x13f/0x1f0 [ 509.431916][T19331] ? __ia32_sys_open+0x1c0/0x1c0 [ 509.436830][T19331] ? ksys_write+0x1a5/0x250 [ 509.441481][T19331] ? lock_is_held_type+0xb0/0xe0 [ 509.446405][T19331] ? do_syscall_64+0x1c/0xe0 [ 509.450984][T19331] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 509.456947][T19331] do_syscall_64+0x60/0xe0 [ 509.461440][T19331] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.467318][T19331] RIP: 0033:0x45c1d9 [ 509.471183][T19331] Code: Bad RIP value. [ 509.475231][T19331] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 509.483628][T19331] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 509.491590][T19331] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 509.499556][T19331] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 509.507515][T19331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 509.515480][T19331] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 509.609165][ T2651] usb 1-1: config 0 has no interfaces? [ 509.616122][ T2651] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 509.624802][ T3790] usb 6-1: USB disconnect, device number 84 [ 509.629706][ T2651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.661233][ T2651] usb 1-1: config 0 descriptor?? [ 509.842387][ T2651] usb 2-1: USB disconnect, device number 16 [ 509.909942][T19355] FAULT_INJECTION: forcing a failure. [ 509.909942][T19355] name failslab, interval 1, probability 0, space 0, times 0 [ 509.927756][T19355] CPU: 0 PID: 19355 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 509.936433][T19355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.946485][T19355] Call Trace: [ 509.949779][T19355] dump_stack+0x18f/0x20d [ 509.954118][T19355] should_fail.cold+0x5/0x14 [ 509.958702][T19355] should_failslab+0x5/0xf [ 509.963097][T19355] kmem_cache_alloc_trace+0x240/0x2d0 [ 509.968515][T19355] snd_seq_oss_open+0x50/0xa10 [ 509.973262][T19355] ? lock_downgrade+0x820/0x820 [ 509.978104][T19355] odev_open+0x6c/0x90 [ 509.982157][T19355] ? odev_release+0x70/0x70 [ 509.986687][T19355] soundcore_open+0x445/0x600 [ 509.991343][T19355] ? sound_devnode+0xf0/0xf0 [ 509.995909][T19355] chrdev_open+0x266/0x770 [ 510.000302][T19355] ? cdev_device_add+0x210/0x210 [ 510.005217][T19355] ? security_file_open+0x1f5/0x3f0 [ 510.010411][T19355] do_dentry_open+0x501/0x1290 [ 510.015149][T19355] ? cdev_device_add+0x210/0x210 [ 510.020063][T19355] path_openat+0x1bb9/0x2750 [ 510.024633][T19355] ? path_lookupat+0x830/0x830 [ 510.029371][T19355] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 510.035332][T19355] ? lock_is_held_type+0xb0/0xe0 [ 510.040246][T19355] do_filp_open+0x17e/0x3c0 [ 510.044723][T19355] ? may_open_dev+0xf0/0xf0 [ 510.049206][T19355] ? do_raw_spin_lock+0x120/0x2b0 [ 510.054204][T19355] ? rwlock_bug.part.0+0x90/0x90 [ 510.059117][T19355] ? _raw_spin_unlock+0x24/0x40 [ 510.063941][T19355] ? __alloc_fd+0x28d/0x600 [ 510.068441][T19355] do_sys_openat2+0x16f/0x3b0 [ 510.073102][T19355] ? build_open_flags+0x650/0x650 [ 510.078103][T19355] ? __mutex_unlock_slowpath+0xe2/0x610 [ 510.083626][T19355] ? wait_for_completion+0x260/0x260 [ 510.088893][T19355] __x64_sys_openat+0x13f/0x1f0 [ 510.093723][T19355] ? __ia32_sys_open+0x1c0/0x1c0 [ 510.098642][T19355] ? ksys_write+0x1a5/0x250 [ 510.103116][T19355] ? lock_is_held_type+0xb0/0xe0 [ 510.108033][T19355] ? do_syscall_64+0x1c/0xe0 [ 510.112609][T19355] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 510.118571][T19355] do_syscall_64+0x60/0xe0 [ 510.122968][T19355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.128847][T19355] RIP: 0033:0x45c1d9 [ 510.132816][T19355] Code: Bad RIP value. [ 510.136883][T19355] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 510.145294][T19355] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 510.153263][T19355] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c 05:46:10 executing program 5 (fault-call:1 fault-nth:7): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3f, 0x4, 0x5d}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x34, 0x0, 0x40}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x58, 0x2, 0x2, 0x20, 0x1}, 0xe7, &(0x7f0000000080)={0x5, 0xf, 0xe7, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9, 0x6, 0x5}, @generic={0xd8, 0x10, 0x4, "d5ad875b7953d79b1e39d3599697c5ba6deaae30bd3db324c2095a61a87405291b5529b70dacd9c2a84b33ed394b7ff62af56355deb321344a5894a82e9dc17fa9f6b01fd174fcf46333fa18717bd0c4d82d5dbe513310d9b9f8bde994ce8248e7d327bd368cda6184e246161798570ec91b86ddaa3d5e9380d6181a3e7088a6784409110f58e25ef1861d8ad7777dddcbf48a97068657fe160d16e521b87806a7c9e9553eb30dd5c37fe65222be9537388b2758d90ec19d346af5b8a0bdec976fee4364148017dd479a67aad29ceaca360b52b3d7"}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x814}}, {0xdb, &(0x7f00000001c0)=@string={0xdb, 0x3, "922e05c7114f575a8fea1df5efa2245329234f5e78a31ee6e85c1e22ae97665175b53b797ad21c3c1faaf848e29f09563604abbe8ca82444af663b3f809ed6bf3482c897c86b81ec33b21cd04a93bdbf0e32ca50879310846462aae82651f86eaf87d774eec30c90acaef73b82d5e4bb0a4f79c6f18b2f871d5b86108b55664974f633e8e3ae8da3496ecdb8ffc6427533ab7fe4069686573133d7f9d02838a4c86b4ba97014b23be944623244e7a2a72562f12be7d5a1a6a816a96de3476cbd6d45054cfdcf2c925c6877ae0bd4fcc3bc8525eb207945aeb7"}}, {0x18, &(0x7f00000002c0)=@string={0x18, 0x3, "52468e025fe60dd7fa3d4f2516063fd3be4f898a6186"}}]}) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 510.161231][T19355] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 510.169216][T19355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 510.177183][T19355] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 510.270268][ T8485] usb 1-1: USB disconnect, device number 67 05:46:10 executing program 1 (fault-call:4 fault-nth:6): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 510.479022][ T3790] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 510.499264][ T2521] usb 3-1: new high-speed USB device number 2 using dummy_hcd 05:46:11 executing program 0 (fault-call:1 fault-nth:7): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 510.708984][ T2651] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 510.718888][ T3790] usb 6-1: Using ep0 maxpacket: 8 [ 510.739111][ T2521] usb 3-1: Using ep0 maxpacket: 8 05:46:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 510.849097][ T3790] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 510.857119][ T3790] usb 6-1: config 0 has no interface number 0 [ 510.886028][ T3790] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 510.904311][ T3790] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 510.915039][ T3790] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 510.939022][ T2521] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32 [ 510.948755][ T2521] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 510.974595][ T3790] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 511.002958][ T3790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.008900][ T2651] usb 2-1: Using ep0 maxpacket: 8 [ 511.012125][ T2521] usb 3-1: config 1 interface 0 has no altsetting 0 [ 511.038329][ T3790] usb 6-1: config 0 descriptor?? [ 511.059422][T19440] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.067393][T19440] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.083435][ T8485] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 511.149029][ T2651] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 511.164176][ T2651] usb 2-1: config 0 has no interface number 0 [ 511.179716][ T2651] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 511.191902][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 511.203301][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 511.203497][ T2521] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 511.214397][ T2651] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 511.232823][ T2651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.237977][ T2521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.263091][ T2521] usb 3-1: Product: 䙒ʎíœã·ºâ•Ø–팿侾誉虡 [ 511.284731][ T2521] usb 3-1: Manufacturer: ⺒윅休婗îªï”ꋯ匤〈å¹ê¸î˜žå³¨âˆžéž®å…¦ë•µç¤»í‰ºã°œê¨Ÿä£¸é¿¢å˜‰Ð¶ëº«ê¢Œä¤æš¯ã¼»éº€ë¿–舴韈毈î²ëˆ³í€œéŠë¾½ãˆŽåƒŠéŽ‡è扤儦滸螯瓗ì®é€Œêº¬ã¯·í–‚믤伊왹诱蜯å¬á‚†å–‹ä¥¦ï™´î ³ê»£êŽæ¹‰ë£ì›¿ç•‚ꬳ阆垆㌱輪â£ê¸æ¯ˆê¥‹á‘°ã®²ä“©ã‰¢î„Ꞣ戥⯱헧ꚡᚨ涩䟣뵬䕭䰅쿽鈬桜깷í‹ì¼è–¼î¬¥ç¤ ê¹… [ 511.289629][ T2651] usb 2-1: config 0 descriptor?? [ 511.327812][T19440] FAULT_INJECTION: forcing a failure. [ 511.327812][T19440] name failslab, interval 1, probability 0, space 0, times 0 [ 511.368788][ T8485] usb 1-1: Using ep0 maxpacket: 8 [ 511.379934][T19440] CPU: 1 PID: 19440 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 511.388611][T19440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.394761][ T2521] usb 3-1: SerialNumber: syz [ 511.398667][T19440] Call Trace: [ 511.398709][T19440] dump_stack+0x18f/0x20d [ 511.398729][T19440] should_fail.cold+0x5/0x14 [ 511.398749][T19440] should_failslab+0x5/0xf [ 511.398765][T19440] kmem_cache_alloc_trace+0x240/0x2d0 [ 511.398785][T19440] snd_seq_oss_open+0x50/0xa10 [ 511.398800][T19440] ? lock_downgrade+0x820/0x820 [ 511.398818][T19440] odev_open+0x6c/0x90 [ 511.430231][T19443] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.434867][T19440] ? odev_release+0x70/0x70 [ 511.450147][T19440] soundcore_open+0x445/0x600 [ 511.450764][T19443] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.454824][T19440] ? sound_devnode+0xf0/0xf0 [ 511.466123][T19440] chrdev_open+0x266/0x770 [ 511.470544][T19440] ? cdev_device_add+0x210/0x210 [ 511.475485][T19440] ? security_file_open+0x1f5/0x3f0 [ 511.480688][T19440] do_dentry_open+0x501/0x1290 [ 511.485448][T19440] ? cdev_device_add+0x210/0x210 [ 511.491000][T19440] path_openat+0x1bb9/0x2750 [ 511.495601][T19440] ? path_lookupat+0x830/0x830 [ 511.500369][T19440] ? cache_grow_end+0x46/0x170 [ 511.505142][T19440] ? lock_is_held_type+0xb0/0xe0 [ 511.510095][T19440] do_filp_open+0x17e/0x3c0 [ 511.514603][T19440] ? may_open_dev+0xf0/0xf0 [ 511.519115][T19440] ? do_raw_spin_lock+0x120/0x2b0 [ 511.524137][T19440] ? rwlock_bug.part.0+0x90/0x90 [ 511.529081][T19440] ? _raw_spin_unlock+0x24/0x40 [ 511.533928][T19440] ? __alloc_fd+0x28d/0x600 [ 511.538439][T19440] do_sys_openat2+0x16f/0x3b0 [ 511.543117][T19440] ? build_open_flags+0x650/0x650 [ 511.548145][T19440] ? __mutex_unlock_slowpath+0xe2/0x610 [ 511.553694][T19440] ? wait_for_completion+0x260/0x260 [ 511.558984][T19440] __x64_sys_openat+0x13f/0x1f0 [ 511.563833][T19440] ? __ia32_sys_open+0x1c0/0x1c0 [ 511.568767][T19440] ? ksys_write+0x1a5/0x250 [ 511.573266][T19440] ? lock_is_held_type+0xb0/0xe0 [ 511.578201][T19440] ? do_syscall_64+0x1c/0xe0 [ 511.582795][T19440] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 511.588778][T19440] do_syscall_64+0x60/0xe0 [ 511.593194][T19440] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.599085][T19440] RIP: 0033:0x45c1d9 [ 511.602971][T19440] Code: Bad RIP value. [ 511.607032][T19440] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.615441][T19440] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 511.623412][T19440] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 511.631407][T19440] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 511.639379][T19440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 511.647347][T19440] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 511.673021][ T3790] usb 6-1: USB disconnect, device number 85 [ 511.692968][T19463] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.703186][T19463] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.751340][ T8485] usb 1-1: config 0 has no interfaces? [ 511.757200][ T8485] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 511.768606][ T8485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.796187][ T8485] usb 1-1: config 0 descriptor?? [ 511.955445][T19463] FAULT_INJECTION: forcing a failure. [ 511.955445][T19463] name failslab, interval 1, probability 0, space 0, times 0 [ 511.968549][T19463] CPU: 1 PID: 19463 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 511.977340][T19463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.987391][T19463] Call Trace: [ 511.990682][T19463] dump_stack+0x18f/0x20d [ 511.995016][T19463] should_fail.cold+0x5/0x14 [ 511.999610][T19463] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 512.004979][T19463] should_failslab+0x5/0xf [ 512.009394][T19463] __kmalloc+0x27d/0x340 [ 512.013647][T19463] ? tomoyo_realpath_from_path+0xc3/0x620 [ 512.019373][T19463] tomoyo_encode2.part.0+0xe9/0x3a0 [ 512.024570][T19463] ? tomoyo_realpath_from_path+0xc3/0x620 [ 512.030308][T19463] tomoyo_encode+0x28/0x50 [ 512.034727][T19463] tomoyo_realpath_from_path+0x186/0x620 [ 512.040369][T19463] tomoyo_check_open_permission+0x272/0x380 [ 512.046254][T19463] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 512.051885][T19463] ? lookup_fast+0x6c0/0x6c0 [ 512.056469][T19463] ? lock_downgrade+0x820/0x820 [ 512.061293][T19463] ? do_raw_spin_lock+0x120/0x2b0 [ 512.066293][T19463] tomoyo_file_open+0xa3/0xd0 [ 512.070955][T19463] security_file_open+0x52/0x3f0 [ 512.075881][T19463] do_dentry_open+0x3a0/0x1290 [ 512.080642][T19463] path_openat+0x1bb9/0x2750 [ 512.085223][T19463] ? path_lookupat+0x830/0x830 [ 512.089970][T19463] ? cache_grow_end+0x46/0x170 [ 512.094722][T19463] ? lock_is_held_type+0xb0/0xe0 [ 512.099638][T19463] do_filp_open+0x17e/0x3c0 [ 512.104116][T19463] ? may_open_dev+0xf0/0xf0 [ 512.108596][T19463] ? do_raw_spin_lock+0x120/0x2b0 [ 512.113604][T19463] ? rwlock_bug.part.0+0x90/0x90 [ 512.118540][T19463] ? _raw_spin_unlock+0x24/0x40 [ 512.123365][T19463] ? __alloc_fd+0x28d/0x600 [ 512.127843][T19463] do_sys_openat2+0x16f/0x3b0 [ 512.132517][T19463] ? build_open_flags+0x650/0x650 [ 512.137529][T19463] ? __mutex_unlock_slowpath+0xe2/0x610 [ 512.143050][T19463] ? wait_for_completion+0x260/0x260 [ 512.148405][T19463] __x64_sys_openat+0x13f/0x1f0 [ 512.153252][T19463] ? __ia32_sys_open+0x1c0/0x1c0 [ 512.158169][T19463] ? ksys_write+0x1a5/0x250 [ 512.162648][T19463] ? lock_is_held_type+0xb0/0xe0 [ 512.167562][T19463] ? do_syscall_64+0x1c/0xe0 [ 512.172136][T19463] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 512.178103][T19463] do_syscall_64+0x60/0xe0 [ 512.182499][T19463] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.188367][T19463] RIP: 0033:0x45c1d9 [ 512.192239][T19463] Code: Bad RIP value. [ 512.196288][T19463] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 512.204670][T19463] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 512.212624][T19463] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 512.220579][T19463] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 512.228521][T19463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 512.236464][T19463] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 512.252714][T19482] FAULT_INJECTION: forcing a failure. [ 512.252714][T19482] name failslab, interval 1, probability 0, space 0, times 0 [ 512.265721][T19482] CPU: 1 PID: 19482 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 512.274391][T19482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.284435][T19482] Call Trace: [ 512.287718][T19482] dump_stack+0x18f/0x20d [ 512.288718][T19463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 512.292034][T19482] should_fail.cold+0x5/0x14 [ 512.303263][T19482] should_failslab+0x5/0xf [ 512.307670][T19482] kmem_cache_alloc_trace+0x240/0x2d0 [ 512.313075][T19482] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 512.318871][T19482] snd_seq_queue_alloc+0x51/0x4d0 [ 512.323884][T19482] snd_seq_ioctl_create_queue+0xab/0x320 [ 512.329489][T19482] ? alloc_seq_queue+0x190/0x190 [ 512.334401][T19482] snd_seq_kernel_client_ctl+0xeb/0x130 [ 512.339933][T19482] alloc_seq_queue+0xf0/0x190 [ 512.344602][T19482] ? async_call_lookup_ports+0x10/0x10 [ 512.350050][T19482] ? trace_kmalloc+0xfd/0x130 [ 512.354702][T19482] snd_seq_oss_open+0x36a/0xa10 [ 512.359538][T19482] odev_open+0x6c/0x90 [ 512.363597][T19482] ? odev_release+0x70/0x70 [ 512.368081][T19482] soundcore_open+0x445/0x600 [ 512.372734][T19482] ? sound_devnode+0xf0/0xf0 [ 512.377294][T19482] chrdev_open+0x266/0x770 [ 512.381695][T19482] ? cdev_device_add+0x210/0x210 [ 512.386618][T19482] ? security_file_open+0x1f5/0x3f0 [ 512.391793][T19482] do_dentry_open+0x501/0x1290 [ 512.396530][T19482] ? cdev_device_add+0x210/0x210 [ 512.401456][T19482] path_openat+0x1bb9/0x2750 [ 512.406037][T19482] ? path_lookupat+0x830/0x830 [ 512.410774][T19482] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 512.416728][T19482] ? lock_is_held_type+0xb0/0xe0 [ 512.421652][T19482] do_filp_open+0x17e/0x3c0 [ 512.426153][T19482] ? may_open_dev+0xf0/0xf0 [ 512.430645][T19482] ? do_raw_spin_lock+0x120/0x2b0 [ 512.435678][T19482] ? rwlock_bug.part.0+0x90/0x90 [ 512.440605][T19482] ? _raw_spin_unlock+0x24/0x40 [ 512.445435][T19482] ? __alloc_fd+0x28d/0x600 [ 512.449919][T19482] do_sys_openat2+0x16f/0x3b0 [ 512.454568][T19482] ? build_open_flags+0x650/0x650 [ 512.459575][T19482] ? __mutex_unlock_slowpath+0xe2/0x610 [ 512.465104][T19482] ? wait_for_completion+0x260/0x260 [ 512.470368][T19482] __x64_sys_openat+0x13f/0x1f0 [ 512.475189][T19482] ? __ia32_sys_open+0x1c0/0x1c0 [ 512.480106][T19482] ? ksys_write+0x1a5/0x250 [ 512.484605][T19482] ? lock_is_held_type+0xb0/0xe0 [ 512.489516][T19482] ? do_syscall_64+0x1c/0xe0 [ 512.494079][T19482] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 512.500052][T19482] do_syscall_64+0x60/0xe0 [ 512.504469][T19482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.510348][T19482] RIP: 0033:0x45c1d9 [ 512.514208][T19482] Code: Bad RIP value. [ 512.518282][T19482] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 512.526664][T19482] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 512.534618][T19482] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 512.542562][T19482] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 05:46:13 executing program 5 (fault-call:1 fault-nth:8): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:13 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 512.550523][T19482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 512.558465][T19482] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 512.592846][ T8485] usb 1-1: USB disconnect, device number 68 [ 512.904880][ T2504] usb 2-1: USB disconnect, device number 17 [ 512.911078][ T3790] usb 6-1: new high-speed USB device number 86 using dummy_hcd 05:46:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000)="973acdde251d5ed96f4f473a0d0c", 0xe, 0x10080, 0x0, 0x0) [ 513.158593][ T3790] usb 6-1: Using ep0 maxpacket: 8 [ 513.231514][ T2521] usb 3-1: USB disconnect, device number 2 [ 513.278901][ T3790] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 513.287561][ T3790] usb 6-1: config 0 has no interface number 0 [ 513.296126][ T3790] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 513.318321][ T3790] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 513.332609][ T3790] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 513.342846][ T3790] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 513.355786][ T3790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.374695][ T3790] usb 6-1: config 0 descriptor?? 05:46:14 executing program 1 (fault-call:4 fault-nth:7): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x31, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:14 executing program 0 (fault-call:1 fault-nth:8): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 513.398909][T19562] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 513.406104][T19562] raw-gadget gadget: fail, usb_ep_enable returned -22 05:46:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x32, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x33, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x35, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 513.655670][T19562] FAULT_INJECTION: forcing a failure. [ 513.655670][T19562] name failslab, interval 1, probability 0, space 0, times 0 [ 513.674448][T19562] CPU: 1 PID: 19562 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 513.683132][T19562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.693177][T19562] Call Trace: [ 513.696468][T19562] dump_stack+0x18f/0x20d [ 513.700809][T19562] should_fail.cold+0x5/0x14 [ 513.705408][T19562] should_failslab+0x5/0xf [ 513.709830][T19562] kmem_cache_alloc_trace+0x240/0x2d0 [ 513.715204][T19562] snd_seq_prioq_new+0x3c/0x120 [ 513.718485][ T2504] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 513.720047][T19562] snd_seq_queue_alloc+0x12f/0x4d0 [ 513.720069][T19562] snd_seq_ioctl_create_queue+0xab/0x320 [ 513.720086][T19562] ? alloc_seq_queue+0x190/0x190 [ 513.743247][T19562] snd_seq_kernel_client_ctl+0xeb/0x130 [ 513.748803][T19562] alloc_seq_queue+0xf0/0x190 [ 513.753474][T19562] ? async_call_lookup_ports+0x10/0x10 [ 513.758946][T19562] ? trace_kmalloc+0xfd/0x130 [ 513.763630][T19562] snd_seq_oss_open+0x36a/0xa10 [ 513.768483][T19562] odev_open+0x6c/0x90 [ 513.772543][T19562] ? odev_release+0x70/0x70 [ 513.777040][T19562] soundcore_open+0x445/0x600 [ 513.781719][T19562] ? sound_devnode+0xf0/0xf0 [ 513.786305][T19562] chrdev_open+0x266/0x770 [ 513.790731][T19562] ? cdev_device_add+0x210/0x210 [ 513.795671][T19562] ? security_file_open+0x1f5/0x3f0 [ 513.800870][T19562] do_dentry_open+0x501/0x1290 [ 513.805640][T19562] ? cdev_device_add+0x210/0x210 [ 513.810586][T19562] path_openat+0x1bb9/0x2750 [ 513.815182][T19562] ? path_lookupat+0x830/0x830 [ 513.819947][T19562] ? lock_is_held_type+0xb0/0xe0 [ 513.824885][T19562] do_filp_open+0x17e/0x3c0 [ 513.829384][T19562] ? may_open_dev+0xf0/0xf0 [ 513.833891][T19562] ? do_raw_spin_lock+0x120/0x2b0 [ 513.838924][T19562] ? rwlock_bug.part.0+0x90/0x90 [ 513.843863][T19562] ? _raw_spin_unlock+0x24/0x40 [ 513.848712][T19562] ? __alloc_fd+0x28d/0x600 [ 513.853253][T19562] do_sys_openat2+0x16f/0x3b0 [ 513.857928][T19562] ? build_open_flags+0x650/0x650 [ 513.862949][T19562] ? __mutex_unlock_slowpath+0xe2/0x610 [ 513.868498][T19562] ? wait_for_completion+0x260/0x260 [ 513.873786][T19562] __x64_sys_openat+0x13f/0x1f0 [ 513.878633][T19562] ? __ia32_sys_open+0x1c0/0x1c0 [ 513.883566][T19562] ? ksys_write+0x1a5/0x250 [ 513.888067][T19562] ? lock_is_held_type+0xb0/0xe0 [ 513.893006][T19562] ? do_syscall_64+0x1c/0xe0 [ 513.897599][T19562] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 513.903580][T19562] do_syscall_64+0x60/0xe0 [ 513.907994][T19562] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.913880][T19562] RIP: 0033:0x45c1d9 [ 513.917766][T19562] Code: Bad RIP value. [ 513.921826][T19562] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 513.930350][T19562] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 513.938324][T19562] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 513.946324][T19562] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 513.954292][T19562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 513.958487][ T2504] usb 1-1: Using ep0 maxpacket: 8 [ 513.962259][T19562] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 514.048561][ T2651] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 514.145408][ T8485] usb 6-1: USB disconnect, device number 86 [ 514.188703][ T2504] usb 1-1: config 0 has no interfaces? [ 514.194213][ T2504] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 514.217768][ T2504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.227656][ T2504] usb 1-1: config 0 descriptor?? [ 514.308603][ T2651] usb 2-1: Using ep0 maxpacket: 8 [ 514.428591][ T2651] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 514.436596][ T2651] usb 2-1: config 0 has no interface number 0 [ 514.443735][ T2651] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 514.455749][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 514.465688][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 514.475470][ T2651] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 514.484708][ T2651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.489980][T19608] FAULT_INJECTION: forcing a failure. [ 514.489980][T19608] name failslab, interval 1, probability 0, space 0, times 0 [ 514.494204][ T2651] usb 2-1: config 0 descriptor?? [ 514.521452][T19608] CPU: 0 PID: 19608 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 514.530154][T19608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.540209][T19608] Call Trace: [ 514.543489][T19608] dump_stack+0x18f/0x20d [ 514.547792][T19608] should_fail.cold+0x5/0x14 [ 514.552364][T19608] should_failslab+0x5/0xf [ 514.556755][T19608] kmem_cache_alloc_trace+0x240/0x2d0 [ 514.562101][T19608] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 514.567880][T19608] snd_seq_queue_alloc+0x51/0x4d0 [ 514.572883][T19608] snd_seq_ioctl_create_queue+0xab/0x320 [ 514.578490][T19608] ? alloc_seq_queue+0x190/0x190 [ 514.583401][T19608] snd_seq_kernel_client_ctl+0xeb/0x130 [ 514.588919][T19608] alloc_seq_queue+0xf0/0x190 [ 514.593571][T19608] ? async_call_lookup_ports+0x10/0x10 [ 514.599013][T19608] ? trace_kmalloc+0xfd/0x130 [ 514.603667][T19608] snd_seq_oss_open+0x36a/0xa10 [ 514.608518][T19608] odev_open+0x6c/0x90 [ 514.612555][T19608] ? odev_release+0x70/0x70 [ 514.617034][T19608] soundcore_open+0x445/0x600 [ 514.621686][T19608] ? sound_devnode+0xf0/0xf0 [ 514.626248][T19608] chrdev_open+0x266/0x770 [ 514.630780][T19608] ? cdev_device_add+0x210/0x210 [ 514.635693][T19608] ? security_file_open+0x1f5/0x3f0 [ 514.640867][T19608] do_dentry_open+0x501/0x1290 [ 514.645602][T19608] ? cdev_device_add+0x210/0x210 [ 514.650585][T19608] path_openat+0x1bb9/0x2750 [ 514.655154][T19608] ? path_lookupat+0x830/0x830 [ 514.659905][T19608] ? cache_grow_end+0x46/0x170 [ 514.664670][T19608] ? lock_is_held_type+0xb0/0xe0 [ 514.669717][T19608] do_filp_open+0x17e/0x3c0 [ 514.674194][T19608] ? may_open_dev+0xf0/0xf0 [ 514.678675][T19608] ? do_raw_spin_lock+0x120/0x2b0 [ 514.683687][T19608] ? rwlock_bug.part.0+0x90/0x90 [ 514.688600][T19608] ? _raw_spin_unlock+0x24/0x40 [ 514.693433][T19608] ? __alloc_fd+0x28d/0x600 [ 514.697918][T19608] do_sys_openat2+0x16f/0x3b0 [ 514.702567][T19608] ? build_open_flags+0x650/0x650 [ 514.707562][T19608] ? __mutex_unlock_slowpath+0xe2/0x610 [ 514.713080][T19608] ? wait_for_completion+0x260/0x260 [ 514.718338][T19608] __x64_sys_openat+0x13f/0x1f0 [ 514.723177][T19608] ? __ia32_sys_open+0x1c0/0x1c0 [ 514.728130][T19608] ? ksys_write+0x1a5/0x250 [ 514.732603][T19608] ? lock_is_held_type+0xb0/0xe0 [ 514.737513][T19608] ? do_syscall_64+0x1c/0xe0 [ 514.742080][T19608] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 514.748034][T19608] do_syscall_64+0x60/0xe0 [ 514.752440][T19608] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.758309][T19608] RIP: 0033:0x45c1d9 [ 514.762178][T19608] Code: Bad RIP value. [ 514.766215][T19608] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 05:46:15 executing program 5 (fault-call:1 fault-nth:9): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xb, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffff2, 0x10, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:46:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 514.774596][T19608] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 514.782540][T19608] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 514.790484][T19608] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 514.798427][T19608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 514.806371][T19608] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 514.819472][T19624] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 514.826390][T19624] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 514.853085][ T3790] usb 1-1: USB disconnect, device number 69 [ 515.114434][T19624] FAULT_INJECTION: forcing a failure. [ 515.114434][T19624] name failslab, interval 1, probability 0, space 0, times 0 [ 515.136662][T19624] CPU: 0 PID: 19624 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 515.145350][T19624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.155393][T19624] Call Trace: [ 515.158686][T19624] dump_stack+0x18f/0x20d [ 515.163027][T19624] should_fail.cold+0x5/0x14 [ 515.167623][T19624] should_failslab+0x5/0xf [ 515.172043][T19624] kmem_cache_alloc_trace+0x240/0x2d0 [ 515.177414][T19624] snd_seq_oss_open+0x50/0xa10 [ 515.182179][T19624] ? lock_downgrade+0x820/0x820 [ 515.187030][T19624] odev_open+0x6c/0x90 [ 515.191095][T19624] ? odev_release+0x70/0x70 [ 515.195593][T19624] soundcore_open+0x445/0x600 [ 515.200272][T19624] ? sound_devnode+0xf0/0xf0 [ 515.204858][T19624] chrdev_open+0x266/0x770 [ 515.209275][T19624] ? cdev_device_add+0x210/0x210 [ 515.214213][T19624] ? security_file_open+0x1f5/0x3f0 [ 515.219413][T19624] do_dentry_open+0x501/0x1290 [ 515.224178][T19624] ? cdev_device_add+0x210/0x210 [ 515.229120][T19624] path_openat+0x1bb9/0x2750 [ 515.233723][T19624] ? path_lookupat+0x830/0x830 [ 515.238486][T19624] ? cache_grow_end+0x46/0x170 [ 515.243258][T19624] ? lock_is_held_type+0xb0/0xe0 [ 515.248210][T19624] do_filp_open+0x17e/0x3c0 [ 515.252713][T19624] ? may_open_dev+0xf0/0xf0 [ 515.257221][T19624] ? do_raw_spin_lock+0x120/0x2b0 [ 515.262247][T19624] ? rwlock_bug.part.0+0x90/0x90 [ 515.267191][T19624] ? _raw_spin_unlock+0x24/0x40 [ 515.272045][T19624] ? __alloc_fd+0x28d/0x600 [ 515.276555][T19624] do_sys_openat2+0x16f/0x3b0 [ 515.281231][T19624] ? build_open_flags+0x650/0x650 [ 515.286255][T19624] ? __mutex_unlock_slowpath+0xe2/0x610 [ 515.291800][T19624] ? wait_for_completion+0x260/0x260 [ 515.297085][T19624] __x64_sys_openat+0x13f/0x1f0 [ 515.301931][T19624] ? __ia32_sys_open+0x1c0/0x1c0 [ 515.306864][T19624] ? ksys_write+0x1a5/0x250 [ 515.311374][T19624] ? lock_is_held_type+0xb0/0xe0 [ 515.316311][T19624] ? do_syscall_64+0x1c/0xe0 [ 515.320905][T19624] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 515.326896][T19624] do_syscall_64+0x60/0xe0 [ 515.331314][T19624] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.337200][T19624] RIP: 0033:0x45c1d9 [ 515.341081][T19624] Code: Bad RIP value. [ 515.345138][T19624] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.353721][T19624] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 515.361704][T19624] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 515.369671][T19624] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 515.377644][T19624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 515.385611][T19624] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 515.404074][ T2504] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 515.471561][ T3790] usb 2-1: USB disconnect, device number 18 [ 515.658288][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 515.778333][ T2504] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 515.786478][ T2504] usb 6-1: config 0 has no interface number 0 [ 515.794109][ T2504] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 515.805669][ T2504] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 515.816202][ T2504] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 515.826546][ T2504] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 515.836142][ T2504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.849801][ T2504] usb 6-1: config 0 descriptor?? [ 515.868655][T19681] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 515.875713][T19681] raw-gadget gadget: fail, usb_ep_enable returned -22 05:46:16 executing program 1 (fault-call:4 fault-nth:8): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400003, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1402, 0x0, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:46:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x37, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:16 executing program 0 (fault-call:1 fault-nth:9): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x38, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 516.093684][T19681] FAULT_INJECTION: forcing a failure. [ 516.093684][T19681] name failslab, interval 1, probability 0, space 0, times 0 [ 516.130126][T19681] CPU: 1 PID: 19681 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 516.138816][T19681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.148863][T19681] Call Trace: [ 516.152164][T19681] dump_stack+0x18f/0x20d [ 516.156501][T19681] should_fail.cold+0x5/0x14 [ 516.161099][T19681] should_failslab+0x5/0xf [ 516.165527][T19681] kmem_cache_alloc_trace+0x240/0x2d0 [ 516.170911][T19681] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 516.176731][T19681] snd_seq_queue_alloc+0x51/0x4d0 [ 516.181766][T19681] snd_seq_ioctl_create_queue+0xab/0x320 [ 516.187393][T19681] ? alloc_seq_queue+0x190/0x190 [ 516.192333][T19681] snd_seq_kernel_client_ctl+0xeb/0x130 [ 516.197878][T19681] alloc_seq_queue+0xf0/0x190 [ 516.202559][T19681] ? async_call_lookup_ports+0x10/0x10 [ 516.208032][T19681] ? trace_kmalloc+0xfd/0x130 [ 516.212717][T19681] snd_seq_oss_open+0x36a/0xa10 [ 516.217574][T19681] odev_open+0x6c/0x90 [ 516.221654][T19681] ? odev_release+0x70/0x70 [ 516.226160][T19681] soundcore_open+0x445/0x600 [ 516.230839][T19681] ? sound_devnode+0xf0/0xf0 [ 516.235439][T19681] chrdev_open+0x266/0x770 [ 516.239855][T19681] ? cdev_device_add+0x210/0x210 [ 516.244795][T19681] ? security_file_open+0x1f5/0x3f0 [ 516.249996][T19681] do_dentry_open+0x501/0x1290 [ 516.254761][T19681] ? cdev_device_add+0x210/0x210 [ 516.259702][T19681] path_openat+0x1bb9/0x2750 [ 516.264300][T19681] ? path_lookupat+0x830/0x830 [ 516.269062][T19681] ? cache_grow_end+0x46/0x170 [ 516.273829][T19681] ? lock_is_held_type+0xb0/0xe0 [ 516.278771][T19681] do_filp_open+0x17e/0x3c0 [ 516.283271][T19681] ? may_open_dev+0xf0/0xf0 [ 516.287780][T19681] ? do_raw_spin_lock+0x120/0x2b0 05:46:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x39, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 516.292799][T19681] ? rwlock_bug.part.0+0x90/0x90 [ 516.298872][T19681] ? _raw_spin_unlock+0x24/0x40 [ 516.303721][T19681] ? __alloc_fd+0x28d/0x600 [ 516.308232][T19681] do_sys_openat2+0x16f/0x3b0 [ 516.312912][T19681] ? build_open_flags+0x650/0x650 [ 516.317937][T19681] ? __mutex_unlock_slowpath+0xe2/0x610 [ 516.323488][T19681] ? wait_for_completion+0x260/0x260 [ 516.328776][T19681] __x64_sys_openat+0x13f/0x1f0 [ 516.333627][T19681] ? __ia32_sys_open+0x1c0/0x1c0 [ 516.338561][T19681] ? ksys_write+0x1a5/0x250 [ 516.343062][T19681] ? lock_is_held_type+0xb0/0xe0 [ 516.348009][T19681] ? do_syscall_64+0x1c/0xe0 [ 516.352608][T19681] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 516.358708][T19681] do_syscall_64+0x60/0xe0 [ 516.363127][T19681] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.369013][T19681] RIP: 0033:0x45c1d9 [ 516.372897][T19681] Code: Bad RIP value. [ 516.376956][T19681] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.385366][T19681] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 516.393334][T19681] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 516.401309][T19681] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 516.409276][T19681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 516.417245][T19681] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c 05:46:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 516.478826][ T2504] usb 6-1: USB disconnect, device number 87 [ 516.588130][ T2651] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 516.595811][ T28] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 516.868138][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 516.873287][ T2651] usb 1-1: Using ep0 maxpacket: 8 05:46:17 executing program 5 (fault-call:1 fault-nth:10): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 517.018391][ T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 517.026619][ T2651] usb 1-1: config 0 has no interfaces? [ 517.032209][ T28] usb 2-1: config 0 has no interface number 0 [ 517.041151][ T2651] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 517.060603][ T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 517.077309][ T2651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.087973][ T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 517.107075][ T2651] usb 1-1: config 0 descriptor?? [ 517.125800][ T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 517.164524][ T28] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 517.182534][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.196687][ T28] usb 2-1: config 0 descriptor?? [ 517.218495][T19750] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 517.233876][T19750] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 517.288131][ T2504] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 517.366108][T19744] FAULT_INJECTION: forcing a failure. [ 517.366108][T19744] name failslab, interval 1, probability 0, space 0, times 0 [ 517.411060][T19744] CPU: 0 PID: 19744 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 517.419746][T19744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.429805][T19744] Call Trace: [ 517.433185][T19744] dump_stack+0x18f/0x20d [ 517.437521][T19744] should_fail.cold+0x5/0x14 [ 517.442134][T19744] should_failslab+0x5/0xf [ 517.446551][T19744] kmem_cache_alloc_trace+0x240/0x2d0 [ 517.451932][T19744] snd_seq_prioq_new+0x3c/0x120 [ 517.456784][T19744] snd_seq_queue_alloc+0x12f/0x4d0 [ 517.461901][T19744] snd_seq_ioctl_create_queue+0xab/0x320 [ 517.467533][T19744] ? alloc_seq_queue+0x190/0x190 [ 517.472475][T19744] snd_seq_kernel_client_ctl+0xeb/0x130 [ 517.478022][T19744] alloc_seq_queue+0xf0/0x190 [ 517.482698][T19744] ? async_call_lookup_ports+0x10/0x10 [ 517.488169][T19744] ? trace_kmalloc+0xfd/0x130 [ 517.492853][T19744] snd_seq_oss_open+0x36a/0xa10 [ 517.497712][T19744] odev_open+0x6c/0x90 [ 517.501782][T19744] ? odev_release+0x70/0x70 [ 517.506286][T19744] soundcore_open+0x445/0x600 [ 517.510970][T19744] ? sound_devnode+0xf0/0xf0 [ 517.515561][T19744] chrdev_open+0x266/0x770 [ 517.519976][T19744] ? cdev_device_add+0x210/0x210 [ 517.524918][T19744] ? security_file_open+0x1f5/0x3f0 [ 517.530123][T19744] do_dentry_open+0x501/0x1290 [ 517.534900][T19744] ? cdev_device_add+0x210/0x210 [ 517.539845][T19744] path_openat+0x1bb9/0x2750 [ 517.544444][T19744] ? path_lookupat+0x830/0x830 [ 517.549204][T19744] ? cache_grow_end+0x46/0x170 [ 517.553975][T19744] ? lock_is_held_type+0xb0/0xe0 [ 517.558913][T19744] do_filp_open+0x17e/0x3c0 [ 517.563412][T19744] ? may_open_dev+0xf0/0xf0 [ 517.567910][T19744] ? do_raw_spin_lock+0x120/0x2b0 [ 517.572928][T19744] ? rwlock_bug.part.0+0x90/0x90 [ 517.577867][T19744] ? _raw_spin_unlock+0x24/0x40 [ 517.582716][T19744] ? __alloc_fd+0x28d/0x600 [ 517.587199][T19744] do_sys_openat2+0x16f/0x3b0 [ 517.591861][T19744] ? build_open_flags+0x650/0x650 [ 517.596869][T19744] ? __mutex_unlock_slowpath+0xe2/0x610 [ 517.602391][T19744] ? wait_for_completion+0x260/0x260 [ 517.607652][T19744] __x64_sys_openat+0x13f/0x1f0 [ 517.612477][T19744] ? __ia32_sys_open+0x1c0/0x1c0 [ 517.617393][T19744] ? ksys_write+0x1a5/0x250 [ 517.621869][T19744] ? lock_is_held_type+0xb0/0xe0 [ 517.626786][T19744] ? do_syscall_64+0x1c/0xe0 [ 517.631349][T19744] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 517.637301][T19744] do_syscall_64+0x60/0xe0 [ 517.641694][T19744] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 517.647566][T19744] RIP: 0033:0x45c1d9 [ 517.651438][T19744] Code: Bad RIP value. [ 517.655482][T19744] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.663874][T19744] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 517.671830][T19744] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 517.679783][T19744] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 517.687736][T19744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 517.695693][T19744] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 517.717734][ T28] usb 1-1: USB disconnect, device number 70 [ 517.724107][T19750] FAULT_INJECTION: forcing a failure. [ 517.724107][T19750] name failslab, interval 1, probability 0, space 0, times 0 [ 517.745078][T19750] CPU: 0 PID: 19750 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 517.753762][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.763818][T19750] Call Trace: [ 517.767100][T19750] dump_stack+0x18f/0x20d [ 517.771427][T19750] should_fail.cold+0x5/0x14 [ 517.776032][T19750] should_failslab+0x5/0xf [ 517.780450][T19750] kmem_cache_alloc_trace+0x240/0x2d0 [ 517.785925][T19750] ? _raw_spin_unlock_irq+0x1f/0x80 [ 517.791105][T19750] snd_seq_create_port+0xb2/0x8a0 [ 517.796109][T19750] ? sprintf+0xc0/0x100 [ 517.800241][T19750] ? snprintf+0xf0/0xf0 [ 517.804376][T19750] ? kmem_cache_alloc_trace+0x14f/0x2d0 [ 517.809902][T19750] snd_seq_ioctl_create_port+0x101/0x6d0 [ 517.815515][T19750] ? do_syscall_64+0x60/0xe0 [ 517.820095][T19750] snd_seq_kernel_client_ctl+0xeb/0x130 [ 517.825634][T19750] create_port+0x17e/0x240 [ 517.830135][T19750] ? alloc_seq_queue+0x190/0x190 [ 517.835063][T19750] ? snd_seq_oss_process_event+0x27d0/0x27d0 [ 517.841017][T19750] ? create_port+0x240/0x240 [ 517.845586][T19750] ? find_held_lock+0x2d/0x110 [ 517.850337][T19750] ? trace_kmalloc+0xfd/0x130 [ 517.854993][T19750] snd_seq_oss_open+0x348/0xa10 [ 517.859833][T19750] odev_open+0x6c/0x90 [ 517.863892][T19750] ? odev_release+0x70/0x70 [ 517.868388][T19750] soundcore_open+0x445/0x600 [ 517.873066][T19750] ? sound_devnode+0xf0/0xf0 [ 517.877649][T19750] chrdev_open+0x266/0x770 [ 517.882063][T19750] ? cdev_device_add+0x210/0x210 [ 517.887001][T19750] ? security_file_open+0x1f5/0x3f0 [ 517.892201][T19750] do_dentry_open+0x501/0x1290 [ 517.896962][T19750] ? cdev_device_add+0x210/0x210 [ 517.901907][T19750] path_openat+0x1bb9/0x2750 [ 517.906511][T19750] ? path_lookupat+0x830/0x830 [ 517.911277][T19750] ? cache_grow_end+0x46/0x170 [ 517.916051][T19750] ? lock_is_held_type+0xb0/0xe0 [ 517.920999][T19750] do_filp_open+0x17e/0x3c0 [ 517.925504][T19750] ? may_open_dev+0xf0/0xf0 [ 517.930028][T19750] ? do_raw_spin_lock+0x120/0x2b0 [ 517.935049][T19750] ? rwlock_bug.part.0+0x90/0x90 [ 517.939994][T19750] ? _raw_spin_unlock+0x24/0x40 [ 517.944844][T19750] ? __alloc_fd+0x28d/0x600 [ 517.949360][T19750] do_sys_openat2+0x16f/0x3b0 [ 517.954155][T19750] ? build_open_flags+0x650/0x650 [ 517.959183][T19750] ? __mutex_unlock_slowpath+0xe2/0x610 [ 517.964736][T19750] ? wait_for_completion+0x260/0x260 [ 517.970024][T19750] __x64_sys_openat+0x13f/0x1f0 [ 517.974884][T19750] ? __ia32_sys_open+0x1c0/0x1c0 [ 517.979928][T19750] ? ksys_write+0x1a5/0x250 [ 517.984419][T19750] ? lock_is_held_type+0xb0/0xe0 [ 517.989335][T19750] ? do_syscall_64+0x1c/0xe0 [ 517.993900][T19750] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 517.999857][T19750] do_syscall_64+0x60/0xe0 [ 518.004296][T19750] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.010182][T19750] RIP: 0033:0x45c1d9 [ 518.014104][T19750] Code: Bad RIP value. [ 518.018146][T19750] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 518.026535][T19750] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 518.034488][T19750] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 518.042435][T19750] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 518.050382][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 518.058414][T19750] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 518.067036][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 518.081253][T19750] ALSA: seq_oss: can't create port [ 518.090714][ T3790] usb 2-1: USB disconnect, device number 19 [ 518.188139][ T2504] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 518.196273][ T2504] usb 6-1: config 0 has no interface number 0 [ 518.202598][ T2504] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 518.213676][ T2504] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 518.235652][ T2504] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 518.246058][ T2504] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 518.255574][ T2504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.265472][ T2504] usb 6-1: config 0 descriptor?? [ 518.288270][T19794] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 518.295307][T19794] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 518.528765][T19794] FAULT_INJECTION: forcing a failure. [ 518.528765][T19794] name failslab, interval 1, probability 0, space 0, times 0 [ 518.541404][T19794] CPU: 0 PID: 19794 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 518.550048][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.560201][T19794] Call Trace: [ 518.563469][T19794] dump_stack+0x18f/0x20d [ 518.567784][T19794] should_fail.cold+0x5/0x14 [ 518.572363][T19794] should_failslab+0x5/0xf [ 518.576757][T19794] kmem_cache_alloc_trace+0x240/0x2d0 [ 518.582105][T19794] snd_seq_prioq_new+0x3c/0x120 [ 518.586942][T19794] snd_seq_queue_alloc+0x12f/0x4d0 [ 518.592033][T19794] snd_seq_ioctl_create_queue+0xab/0x320 [ 518.597637][T19794] ? alloc_seq_queue+0x190/0x190 [ 518.602604][T19794] snd_seq_kernel_client_ctl+0xeb/0x130 [ 518.608128][T19794] alloc_seq_queue+0xf0/0x190 [ 518.612791][T19794] ? async_call_lookup_ports+0x10/0x10 [ 518.618240][T19794] ? trace_kmalloc+0xfd/0x130 [ 518.622911][T19794] snd_seq_oss_open+0x36a/0xa10 [ 518.627750][T19794] odev_open+0x6c/0x90 [ 518.631815][T19794] ? odev_release+0x70/0x70 [ 518.636313][T19794] soundcore_open+0x445/0x600 [ 518.640973][T19794] ? sound_devnode+0xf0/0xf0 [ 518.645538][T19794] chrdev_open+0x266/0x770 [ 518.649935][T19794] ? cdev_device_add+0x210/0x210 [ 518.654851][T19794] ? security_file_open+0x1f5/0x3f0 [ 518.660025][T19794] do_dentry_open+0x501/0x1290 [ 518.664762][T19794] ? cdev_device_add+0x210/0x210 [ 518.669694][T19794] path_openat+0x1bb9/0x2750 [ 518.674274][T19794] ? path_lookupat+0x830/0x830 [ 518.679010][T19794] ? cache_grow_end+0x46/0x170 [ 518.683754][T19794] ? lock_is_held_type+0xb0/0xe0 [ 518.688683][T19794] do_filp_open+0x17e/0x3c0 [ 518.693174][T19794] ? may_open_dev+0xf0/0xf0 [ 518.697658][T19794] ? do_raw_spin_lock+0x120/0x2b0 [ 518.702890][T19794] ? rwlock_bug.part.0+0x90/0x90 [ 518.707817][T19794] ? _raw_spin_unlock+0x24/0x40 [ 518.712642][T19794] ? __alloc_fd+0x28d/0x600 [ 518.717122][T19794] do_sys_openat2+0x16f/0x3b0 [ 518.721773][T19794] ? build_open_flags+0x650/0x650 [ 518.726771][T19794] ? __mutex_unlock_slowpath+0xe2/0x610 [ 518.732296][T19794] ? wait_for_completion+0x260/0x260 [ 518.737558][T19794] __x64_sys_openat+0x13f/0x1f0 [ 518.742382][T19794] ? __ia32_sys_open+0x1c0/0x1c0 [ 518.747312][T19794] ? ksys_write+0x1a5/0x250 [ 518.751877][T19794] ? lock_is_held_type+0xb0/0xe0 [ 518.756789][T19794] ? do_syscall_64+0x1c/0xe0 [ 518.761367][T19794] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 518.767338][T19794] do_syscall_64+0x60/0xe0 [ 518.771732][T19794] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.777597][T19794] RIP: 0033:0x45c1d9 [ 518.781461][T19794] Code: Bad RIP value. [ 518.785508][T19794] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 518.793894][T19794] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 518.801842][T19794] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 518.809801][T19794] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 518.817745][T19794] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a 05:46:19 executing program 1 (fault-call:4 fault-nth:9): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3c, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 518.825696][T19794] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c 05:46:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x7a00) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x40, 0x40, 0x80, 0x3, 0x0, 0x379, 0x5c44ea9158db2e9f, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3f, 0x1, @perf_config_ext={0x7, 0x100000000}, 0xb04e, 0x1, 0x100, 0x0, 0x9, 0x5, 0x3}, r1, 0xd, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x20140, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:46:19 executing program 0 (fault-call:1 fault-nth:10): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 518.882628][ T28] usb 6-1: USB disconnect, device number 88 05:46:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x42, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 519.207927][ T8485] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 519.218848][ T2651] usb 2-1: new high-speed USB device number 20 using dummy_hcd 05:46:20 executing program 5 (fault-call:1 fault-nth:11): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x43, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 519.454483][ T8485] usb 1-1: Using ep0 maxpacket: 8 05:46:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x46, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 519.478046][ T2651] usb 2-1: Using ep0 maxpacket: 8 [ 519.598267][ T8485] usb 1-1: config 0 has no interfaces? [ 519.603779][ T8485] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 519.618089][ T2651] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 519.626075][ T2651] usb 2-1: config 0 has no interface number 0 [ 519.633268][ T8485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.647718][ T2651] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 519.661304][ T8485] usb 1-1: config 0 descriptor?? [ 519.666574][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 519.682404][ T2651] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 519.736176][ T2651] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 519.746048][ T2651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.754343][ T3790] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 519.763454][ T2651] usb 2-1: config 0 descriptor?? [ 519.798070][T19895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 519.804976][T19895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 519.901577][T19880] FAULT_INJECTION: forcing a failure. [ 519.901577][T19880] name failslab, interval 1, probability 0, space 0, times 0 [ 519.926945][T19880] CPU: 1 PID: 19880 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 519.935823][T19880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.945860][T19880] Call Trace: [ 519.949152][T19880] dump_stack+0x18f/0x20d [ 519.953490][T19880] should_fail.cold+0x5/0x14 [ 519.958086][T19880] should_failslab+0x5/0xf [ 519.962502][T19880] kmem_cache_alloc_trace+0x240/0x2d0 [ 519.967882][T19880] snd_seq_prioq_new+0x3c/0x120 [ 519.972736][T19880] snd_seq_queue_alloc+0x159/0x4d0 [ 519.977891][T19880] snd_seq_ioctl_create_queue+0xab/0x320 [ 519.983524][T19880] ? alloc_seq_queue+0x190/0x190 [ 519.988473][T19880] snd_seq_kernel_client_ctl+0xeb/0x130 [ 519.994026][T19880] alloc_seq_queue+0xf0/0x190 [ 519.998706][T19880] ? async_call_lookup_ports+0x10/0x10 [ 520.004181][T19880] ? trace_kmalloc+0xfd/0x130 [ 520.008874][T19880] snd_seq_oss_open+0x36a/0xa10 [ 520.013727][T19880] odev_open+0x6c/0x90 [ 520.017689][ T3790] usb 6-1: Using ep0 maxpacket: 8 [ 520.017800][T19880] ? odev_release+0x70/0x70 [ 520.027314][T19880] soundcore_open+0x445/0x600 [ 520.031995][T19880] ? sound_devnode+0xf0/0xf0 [ 520.036585][T19880] chrdev_open+0x266/0x770 [ 520.041002][T19880] ? cdev_device_add+0x210/0x210 [ 520.045946][T19880] ? security_file_open+0x1f5/0x3f0 [ 520.051150][T19880] do_dentry_open+0x501/0x1290 [ 520.055935][T19880] ? cdev_device_add+0x210/0x210 [ 520.060877][T19880] path_openat+0x1bb9/0x2750 [ 520.065474][T19880] ? path_lookupat+0x830/0x830 [ 520.070236][T19880] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 520.076220][T19880] ? lock_is_held_type+0xb0/0xe0 [ 520.081161][T19880] do_filp_open+0x17e/0x3c0 [ 520.085667][T19880] ? may_open_dev+0xf0/0xf0 [ 520.090177][T19880] ? do_raw_spin_lock+0x120/0x2b0 [ 520.095201][T19880] ? rwlock_bug.part.0+0x90/0x90 [ 520.100144][T19880] ? _raw_spin_unlock+0x24/0x40 [ 520.104993][T19880] ? __alloc_fd+0x28d/0x600 [ 520.109502][T19880] do_sys_openat2+0x16f/0x3b0 [ 520.114180][T19880] ? build_open_flags+0x650/0x650 [ 520.119208][T19880] ? __mutex_unlock_slowpath+0xe2/0x610 [ 520.124769][T19880] ? wait_for_completion+0x260/0x260 [ 520.130071][T19880] __x64_sys_openat+0x13f/0x1f0 [ 520.134934][T19880] ? __ia32_sys_open+0x1c0/0x1c0 [ 520.139869][T19880] ? ksys_write+0x1a5/0x250 [ 520.140662][ T3790] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 520.144372][T19880] ? lock_is_held_type+0xb0/0xe0 [ 520.157248][T19880] ? do_syscall_64+0x1c/0xe0 [ 520.161835][T19880] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 520.167815][T19880] do_syscall_64+0x60/0xe0 [ 520.172233][T19880] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.175616][ T3790] usb 6-1: config 0 has no interface number 0 [ 520.178113][T19880] RIP: 0033:0x45c1d9 [ 520.178119][T19880] Code: Bad RIP value. [ 520.178127][T19880] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.178140][T19880] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 520.178148][T19880] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 520.178156][T19880] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 520.178164][T19880] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 520.178172][T19880] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 520.216638][T19895] FAULT_INJECTION: forcing a failure. [ 520.216638][T19895] name failslab, interval 1, probability 0, space 0, times 0 [ 520.236565][ T3790] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 520.254048][ T2651] usb 1-1: USB disconnect, device number 71 [ 520.281102][T19895] CPU: 1 PID: 19895 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 520.289780][T19895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.299825][T19895] Call Trace: [ 520.303120][T19895] dump_stack+0x18f/0x20d [ 520.307461][T19895] should_fail.cold+0x5/0x14 [ 520.312055][T19895] should_failslab+0x5/0xf [ 520.313362][ T3790] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 520.316465][T19895] kmem_cache_alloc_trace+0x240/0x2d0 [ 520.316485][T19895] snd_seq_prioq_new+0x3c/0x120 [ 520.316503][T19895] snd_seq_queue_alloc+0x12f/0x4d0 [ 520.326508][ T3790] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 520.331740][T19895] snd_seq_ioctl_create_queue+0xab/0x320 [ 520.331753][T19895] ? alloc_seq_queue+0x190/0x190 [ 520.331769][T19895] snd_seq_kernel_client_ctl+0xeb/0x130 [ 520.331784][T19895] alloc_seq_queue+0xf0/0x190 [ 520.331798][T19895] ? async_call_lookup_ports+0x10/0x10 [ 520.331825][T19895] ? trace_kmalloc+0xfd/0x130 [ 520.331866][T19895] snd_seq_oss_open+0x36a/0xa10 [ 520.344030][ T3790] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 520.351597][T19895] odev_open+0x6c/0x90 [ 520.351611][T19895] ? odev_release+0x70/0x70 [ 520.351626][T19895] soundcore_open+0x445/0x600 [ 520.351645][T19895] ? sound_devnode+0xf0/0xf0 [ 520.351657][T19895] chrdev_open+0x266/0x770 [ 520.351670][T19895] ? cdev_device_add+0x210/0x210 [ 520.351689][T19895] ? security_file_open+0x1f5/0x3f0 [ 520.351710][T19895] do_dentry_open+0x501/0x1290 [ 520.372935][ T3790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.377835][T19895] ? cdev_device_add+0x210/0x210 [ 520.377856][T19895] path_openat+0x1bb9/0x2750 [ 520.377901][T19895] ? path_lookupat+0x830/0x830 [ 520.377915][T19895] ? cache_grow_end+0x46/0x170 [ 520.377939][T19895] ? lock_is_held_type+0xb0/0xe0 [ 520.465217][T19895] do_filp_open+0x17e/0x3c0 [ 520.469720][T19895] ? may_open_dev+0xf0/0xf0 [ 520.471117][ T3790] usb 6-1: config 0 descriptor?? [ 520.474232][T19895] ? do_raw_spin_lock+0x120/0x2b0 [ 520.474247][T19895] ? rwlock_bug.part.0+0x90/0x90 [ 520.474280][T19895] ? _raw_spin_unlock+0x24/0x40 [ 520.493934][T19895] ? __alloc_fd+0x28d/0x600 [ 520.498442][T19895] do_sys_openat2+0x16f/0x3b0 [ 520.503117][T19895] ? build_open_flags+0x650/0x650 [ 520.508102][T19922] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 520.508146][T19895] ? __mutex_unlock_slowpath+0xe2/0x610 [ 520.520411][T19895] ? wait_for_completion+0x260/0x260 [ 520.523965][T19922] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 520.525693][T19895] __x64_sys_openat+0x13f/0x1f0 [ 520.537257][T19895] ? __ia32_sys_open+0x1c0/0x1c0 [ 520.542189][T19895] ? ksys_write+0x1a5/0x250 [ 520.546692][T19895] ? lock_is_held_type+0xb0/0xe0 [ 520.551650][T19895] ? do_syscall_64+0x1c/0xe0 [ 520.556238][T19895] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 520.562220][T19895] do_syscall_64+0x60/0xe0 [ 520.566636][T19895] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 520.572540][T19895] RIP: 0033:0x45c1d9 [ 520.576417][T19895] Code: Bad RIP value. [ 520.580464][T19895] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.588877][T19895] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 520.596840][T19895] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 520.604812][T19895] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 520.612782][T19895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 520.620747][T19895] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 520.639820][ T8485] usb 2-1: USB disconnect, device number 20 [ 520.757867][T19922] FAULT_INJECTION: forcing a failure. [ 520.757867][T19922] name failslab, interval 1, probability 0, space 0, times 0 [ 520.786512][T19922] CPU: 0 PID: 19922 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 520.795193][T19922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.805243][T19922] Call Trace: [ 520.808582][T19922] dump_stack+0x18f/0x20d [ 520.812917][T19922] should_fail.cold+0x5/0x14 [ 520.817511][T19922] should_failslab+0x5/0xf [ 520.821933][T19922] kmem_cache_alloc_trace+0x240/0x2d0 [ 520.827309][T19922] snd_seq_prioq_new+0x3c/0x120 [ 520.832173][T19922] snd_seq_queue_alloc+0x159/0x4d0 [ 520.837286][T19922] snd_seq_ioctl_create_queue+0xab/0x320 [ 520.842935][T19922] ? alloc_seq_queue+0x190/0x190 [ 520.847874][T19922] snd_seq_kernel_client_ctl+0xeb/0x130 [ 520.853419][T19922] alloc_seq_queue+0xf0/0x190 [ 520.858116][T19922] ? async_call_lookup_ports+0x10/0x10 [ 520.863591][T19922] ? trace_kmalloc+0xfd/0x130 [ 520.868276][T19922] snd_seq_oss_open+0x36a/0xa10 [ 520.873135][T19922] odev_open+0x6c/0x90 [ 520.877208][T19922] ? odev_release+0x70/0x70 [ 520.881731][T19922] soundcore_open+0x445/0x600 [ 520.886402][T19922] ? sound_devnode+0xf0/0xf0 [ 520.890969][T19922] chrdev_open+0x266/0x770 [ 520.895363][T19922] ? cdev_device_add+0x210/0x210 [ 520.900278][T19922] ? security_file_open+0x1f5/0x3f0 [ 520.905456][T19922] do_dentry_open+0x501/0x1290 [ 520.910197][T19922] ? cdev_device_add+0x210/0x210 [ 520.915122][T19922] path_openat+0x1bb9/0x2750 [ 520.919691][T19922] ? path_lookupat+0x830/0x830 [ 520.924429][T19922] ? cache_grow_end+0x46/0x170 [ 520.929183][T19922] ? lock_is_held_type+0xb0/0xe0 [ 520.934113][T19922] do_filp_open+0x17e/0x3c0 [ 520.938616][T19922] ? may_open_dev+0xf0/0xf0 [ 520.943122][T19922] ? do_raw_spin_lock+0x120/0x2b0 [ 520.948134][T19922] ? rwlock_bug.part.0+0x90/0x90 [ 520.953048][T19922] ? _raw_spin_unlock+0x24/0x40 [ 520.957872][T19922] ? __alloc_fd+0x28d/0x600 [ 520.962353][T19922] do_sys_openat2+0x16f/0x3b0 [ 520.967005][T19922] ? build_open_flags+0x650/0x650 [ 520.972002][T19922] ? __mutex_unlock_slowpath+0xe2/0x610 [ 520.977533][T19922] ? wait_for_completion+0x260/0x260 [ 520.982884][T19922] __x64_sys_openat+0x13f/0x1f0 [ 520.987709][T19922] ? __ia32_sys_open+0x1c0/0x1c0 [ 520.992626][T19922] ? ksys_write+0x1a5/0x250 [ 520.997103][T19922] ? lock_is_held_type+0xb0/0xe0 [ 521.002056][T19922] ? do_syscall_64+0x1c/0xe0 [ 521.006621][T19922] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 521.012578][T19922] do_syscall_64+0x60/0xe0 [ 521.016972][T19922] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.022840][T19922] RIP: 0033:0x45c1d9 [ 521.026705][T19922] Code: Bad RIP value. [ 521.030741][T19922] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.039137][T19922] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 521.047102][T19922] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 521.055068][T19922] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 521.063028][T19922] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 521.070977][T19922] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 521.094970][ T2504] usb 6-1: USB disconnect, device number 89 05:46:21 executing program 1 (fault-call:4 fault-nth:10): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x48, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80280, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x12, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x71, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={r5, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000100)=0x84) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:46:21 executing program 0 (fault-call:1 fault-nth:11): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x13, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x4a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 521.487617][ T8485] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 521.507851][ T3790] usb 2-1: new high-speed USB device number 21 using dummy_hcd 05:46:22 executing program 5 (fault-call:1 fault-nth:12): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x4b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x4c, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 521.747563][ T3790] usb 2-1: Using ep0 maxpacket: 8 [ 521.757729][ T8485] usb 1-1: Using ep0 maxpacket: 8 [ 521.872352][ T3790] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 521.882776][ T3790] usb 2-1: config 0 has no interface number 0 [ 521.895146][ T3790] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 521.901019][ T8485] usb 1-1: config 0 has no interfaces? [ 521.908360][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 521.921215][ T8485] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 521.923106][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 521.942917][ T8485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.946461][ T3790] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 521.963406][ T5] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 521.966283][ T8485] usb 1-1: config 0 descriptor?? [ 521.971876][ T3790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.992751][ T3790] usb 2-1: config 0 descriptor?? [ 522.017926][T20020] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 522.024863][T20020] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 522.217478][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 522.243412][T20014] FAULT_INJECTION: forcing a failure. [ 522.243412][T20014] name failslab, interval 1, probability 0, space 0, times 0 [ 522.265781][T20014] CPU: 1 PID: 20014 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 522.274466][T20014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.284512][T20014] Call Trace: [ 522.287807][T20014] dump_stack+0x18f/0x20d [ 522.292148][T20014] should_fail.cold+0x5/0x14 [ 522.296746][T20014] should_failslab+0x5/0xf [ 522.301158][T20014] kmem_cache_alloc_trace+0x240/0x2d0 [ 522.306531][T20014] snd_seq_prioq_new+0x3c/0x120 [ 522.311382][T20014] snd_seq_queue_alloc+0x159/0x4d0 [ 522.316493][T20014] snd_seq_ioctl_create_queue+0xab/0x320 [ 522.322128][T20014] ? alloc_seq_queue+0x190/0x190 [ 522.327069][T20014] snd_seq_kernel_client_ctl+0xeb/0x130 [ 522.332615][T20014] alloc_seq_queue+0xf0/0x190 [ 522.337294][T20014] ? async_call_lookup_ports+0x10/0x10 [ 522.342765][T20014] ? trace_kmalloc+0xfd/0x130 [ 522.343919][ T5] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 522.347443][T20014] snd_seq_oss_open+0x36a/0xa10 [ 522.347463][T20014] odev_open+0x6c/0x90 [ 522.347483][T20014] ? odev_release+0x70/0x70 [ 522.357277][ T5] usb 6-1: config 0 has no interface number 0 [ 522.360353][T20014] soundcore_open+0x445/0x600 [ 522.360371][T20014] ? sound_devnode+0xf0/0xf0 [ 522.360384][T20014] chrdev_open+0x266/0x770 [ 522.360398][T20014] ? cdev_device_add+0x210/0x210 [ 522.360418][T20014] ? security_file_open+0x1f5/0x3f0 [ 522.360437][T20014] do_dentry_open+0x501/0x1290 [ 522.360452][T20014] ? cdev_device_add+0x210/0x210 [ 522.360473][T20014] path_openat+0x1bb9/0x2750 [ 522.360498][T20014] ? path_lookupat+0x830/0x830 [ 522.377781][ T5] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 522.379807][T20014] ? cache_grow_end+0x46/0x170 [ 522.379830][T20014] ? lock_is_held_type+0xb0/0xe0 [ 522.379850][T20014] do_filp_open+0x17e/0x3c0 [ 522.379863][T20014] ? may_open_dev+0xf0/0xf0 [ 522.379882][T20014] ? do_raw_spin_lock+0x120/0x2b0 [ 522.386882][ T5] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 522.388862][T20014] ? rwlock_bug.part.0+0x90/0x90 [ 522.388882][T20014] ? _raw_spin_unlock+0x24/0x40 [ 522.388894][T20014] ? __alloc_fd+0x28d/0x600 [ 522.388914][T20014] do_sys_openat2+0x16f/0x3b0 [ 522.388929][T20014] ? build_open_flags+0x650/0x650 [ 522.388942][T20014] ? __mutex_unlock_slowpath+0xe2/0x610 [ 522.388958][T20014] ? wait_for_completion+0x260/0x260 [ 522.388974][T20014] __x64_sys_openat+0x13f/0x1f0 [ 522.388990][T20014] ? __ia32_sys_open+0x1c0/0x1c0 [ 522.398505][ T5] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 522.399080][T20014] ? ksys_write+0x1a5/0x250 [ 522.412148][ T5] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 522.413304][T20014] ? lock_is_held_type+0xb0/0xe0 [ 522.413322][T20014] ? do_syscall_64+0x1c/0xe0 [ 522.413339][T20014] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 522.413356][T20014] do_syscall_64+0x60/0xe0 [ 522.413374][T20014] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.423033][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.429014][T20014] RIP: 0033:0x45c1d9 [ 522.429020][T20014] Code: Bad RIP value. [ 522.429027][T20014] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 522.429041][T20014] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 522.429050][T20014] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 522.429058][T20014] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 522.429066][T20014] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 522.429074][T20014] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 522.444339][ T8485] usb 1-1: USB disconnect, device number 72 [ 522.447945][T20020] FAULT_INJECTION: forcing a failure. [ 522.447945][T20020] name failslab, interval 1, probability 0, space 0, times 0 [ 522.640134][T20020] CPU: 1 PID: 20020 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 522.648819][T20020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.650260][ T5] usb 6-1: config 0 descriptor?? [ 522.658862][T20020] Call Trace: [ 522.658883][T20020] dump_stack+0x18f/0x20d [ 522.658902][T20020] should_fail.cold+0x5/0x14 [ 522.658920][T20020] should_failslab+0x5/0xf [ 522.658940][T20020] kmem_cache_alloc_trace+0x240/0x2d0 [ 522.677768][T20041] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 522.680390][T20020] snd_seq_prioq_new+0x3c/0x120 [ 522.685852][T20041] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 522.692478][T20020] snd_seq_queue_alloc+0x12f/0x4d0 [ 522.709140][T20020] snd_seq_ioctl_create_queue+0xab/0x320 [ 522.714771][T20020] ? alloc_seq_queue+0x190/0x190 [ 522.719712][T20020] snd_seq_kernel_client_ctl+0xeb/0x130 [ 522.725258][T20020] alloc_seq_queue+0xf0/0x190 [ 522.729938][T20020] ? async_call_lookup_ports+0x10/0x10 [ 522.735415][T20020] ? trace_kmalloc+0xfd/0x130 [ 522.740085][T20020] snd_seq_oss_open+0x36a/0xa10 [ 522.744914][T20020] odev_open+0x6c/0x90 [ 522.748983][T20020] ? odev_release+0x70/0x70 [ 522.753478][T20020] soundcore_open+0x445/0x600 [ 522.758145][T20020] ? sound_devnode+0xf0/0xf0 [ 522.762728][T20020] chrdev_open+0x266/0x770 [ 522.767150][T20020] ? cdev_device_add+0x210/0x210 [ 522.772092][T20020] ? security_file_open+0x1f5/0x3f0 [ 522.777292][T20020] do_dentry_open+0x501/0x1290 [ 522.782054][T20020] ? cdev_device_add+0x210/0x210 [ 522.787000][T20020] path_openat+0x1bb9/0x2750 [ 522.791599][T20020] ? path_lookupat+0x830/0x830 [ 522.796357][T20020] ? cache_grow_end+0x46/0x170 [ 522.801129][T20020] ? lock_is_held_type+0xb0/0xe0 [ 522.806070][T20020] do_filp_open+0x17e/0x3c0 [ 522.810576][T20020] ? may_open_dev+0xf0/0xf0 [ 522.815086][T20020] ? do_raw_spin_lock+0x120/0x2b0 [ 522.820109][T20020] ? rwlock_bug.part.0+0x90/0x90 [ 522.825055][T20020] ? _raw_spin_unlock+0x24/0x40 [ 522.829908][T20020] ? __alloc_fd+0x28d/0x600 [ 522.834419][T20020] do_sys_openat2+0x16f/0x3b0 [ 522.839093][T20020] ? build_open_flags+0x650/0x650 [ 522.844117][T20020] ? __mutex_unlock_slowpath+0xe2/0x610 [ 522.849668][T20020] ? wait_for_completion+0x260/0x260 [ 522.854957][T20020] __x64_sys_openat+0x13f/0x1f0 [ 522.859807][T20020] ? __ia32_sys_open+0x1c0/0x1c0 [ 522.864741][T20020] ? ksys_write+0x1a5/0x250 [ 522.869243][T20020] ? lock_is_held_type+0xb0/0xe0 [ 522.874184][T20020] ? do_syscall_64+0x1c/0xe0 [ 522.878775][T20020] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 522.884760][T20020] do_syscall_64+0x60/0xe0 [ 522.889180][T20020] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.895071][T20020] RIP: 0033:0x45c1d9 [ 522.898957][T20020] Code: Bad RIP value. [ 522.903016][T20020] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 522.911424][T20020] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 522.919392][T20020] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 522.927356][T20020] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 522.935318][T20020] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 522.943283][T20020] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 522.968288][T20041] FAULT_INJECTION: forcing a failure. [ 522.968288][T20041] name failslab, interval 1, probability 0, space 0, times 0 [ 522.986514][T20041] CPU: 1 PID: 20041 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 522.991371][ T5] usb 2-1: USB disconnect, device number 21 [ 522.995187][T20041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.995193][T20041] Call Trace: [ 522.995214][T20041] dump_stack+0x18f/0x20d [ 522.995239][T20041] should_fail.cold+0x5/0x14 [ 522.995258][T20041] should_failslab+0x5/0xf [ 523.027713][T20041] kmem_cache_alloc_trace+0x240/0x2d0 [ 523.033091][T20041] snd_seq_timer_new+0x41/0x1b0 [ 523.037943][T20041] snd_seq_queue_alloc+0x17e/0x4d0 [ 523.043060][T20041] snd_seq_ioctl_create_queue+0xab/0x320 [ 523.048693][T20041] ? alloc_seq_queue+0x190/0x190 [ 523.053634][T20041] snd_seq_kernel_client_ctl+0xeb/0x130 [ 523.059189][T20041] alloc_seq_queue+0xf0/0x190 [ 523.063964][T20041] ? async_call_lookup_ports+0x10/0x10 [ 523.069535][T20041] ? trace_kmalloc+0xfd/0x130 [ 523.074224][T20041] snd_seq_oss_open+0x36a/0xa10 [ 523.079082][T20041] odev_open+0x6c/0x90 [ 523.083158][T20041] ? odev_release+0x70/0x70 [ 523.087662][T20041] soundcore_open+0x445/0x600 [ 523.092341][T20041] ? sound_devnode+0xf0/0xf0 [ 523.096928][T20041] chrdev_open+0x266/0x770 [ 523.101347][T20041] ? cdev_device_add+0x210/0x210 [ 523.106306][T20041] ? security_file_open+0x1f5/0x3f0 [ 523.111525][T20041] do_dentry_open+0x501/0x1290 [ 523.116289][T20041] ? cdev_device_add+0x210/0x210 [ 523.121235][T20041] path_openat+0x1bb9/0x2750 [ 523.125839][T20041] ? path_lookupat+0x830/0x830 [ 523.130605][T20041] ? cache_grow_end+0x46/0x170 [ 523.135378][T20041] ? lock_is_held_type+0xb0/0xe0 [ 523.140319][T20041] do_filp_open+0x17e/0x3c0 [ 523.144824][T20041] ? may_open_dev+0xf0/0xf0 [ 523.149346][T20041] ? do_raw_spin_lock+0x120/0x2b0 [ 523.154366][T20041] ? rwlock_bug.part.0+0x90/0x90 [ 523.159310][T20041] ? _raw_spin_unlock+0x24/0x40 [ 523.164157][T20041] ? __alloc_fd+0x28d/0x600 [ 523.168665][T20041] do_sys_openat2+0x16f/0x3b0 [ 523.173342][T20041] ? build_open_flags+0x650/0x650 [ 523.178370][T20041] ? __mutex_unlock_slowpath+0xe2/0x610 [ 523.183916][T20041] ? wait_for_completion+0x260/0x260 [ 523.189292][T20041] __x64_sys_openat+0x13f/0x1f0 [ 523.194141][T20041] ? __ia32_sys_open+0x1c0/0x1c0 [ 523.199081][T20041] ? ksys_write+0x1a5/0x250 [ 523.203578][T20041] ? lock_is_held_type+0xb0/0xe0 [ 523.208520][T20041] ? do_syscall_64+0x1c/0xe0 [ 523.213119][T20041] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 523.219092][T20041] do_syscall_64+0x60/0xe0 [ 523.223507][T20041] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 523.229392][T20041] RIP: 0033:0x45c1d9 [ 523.233282][T20041] Code: Bad RIP value. [ 523.237339][T20041] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 523.245733][T20041] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 523.253681][T20041] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 523.261632][T20041] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 523.269592][T20041] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 523.277558][T20041] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 523.294775][ T2651] usb 6-1: USB disconnect, device number 90 05:46:24 executing program 1 (fault-call:4 fault-nth:11): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x4d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:24 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xf0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x7a00) sendto$inet(r4, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) 05:46:24 executing program 0 (fault-call:1 fault-nth:12): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x202042, 0x0) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x101, @local, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000080)="aeed874d3ecdbc238096eb327bc3ab7e90f82780ed579ca5c3624d6fdcd6e992e2af3bf68420f864f060c10e9f33aabe8ddec1a5ee6db0f5f894d16042284a052f92371c07203e32ebf3dd3240277f0275beeeeb06a1e22c0d4d3b76968628", 0x5f}, {&(0x7f0000000100)="63f9ce93bc93bd", 0x7}, {&(0x7f0000000140)="885a1dbbc35a492aec9f82168740f7675926c583b2057081d55e120b992f18441f1ab63bd9cff51b87052d8b59c24921bcd837d9bbf0bb4f9ee72f2c9e0f269edfa2b4460353c1d91d8e818d34a38f879e1637b346d1c2f9d2397b8be0f83297070eb2b725310943bcc335dff42a2297c974a793ca445b7c52449f24e41f8a5ba23aeac30280350c1642d7fec1a256523656c39651019039a755a23b5f8fc5d686655caf6c173a3784d335105b7d9c521e95eb884037d5ad69e3b70d8f0bcfe33594ad2fe547e6e5b9ae8667694bdd18553c63", 0xd3}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000000240)="14e6fb3fa37c4eaad8c120d67fe0003105f24f4a93617a7d5d5295825b1176a107b48ae3ba878662466e908978231bc39b6e4e15c916610318b181f1d98629ea5f9827f9c41350fef6675d8710fddc3f7b6a94143e735383a4931fdbd57996291d96c47ee45b0587d7ab79642b8ad0d3b33dbdbba5f7a241315fb299ff8455956f584f471da9b6cabb284dc9211f5c3c858411eef21f84f65702924650d4d716c50df77639df0ba7eb3c9fc2a725ca8ab6ed4e68b61e439eaa23207e59b0b3da7288c7686be0ee945f649e0d15fc03486398539e2a1a52c89caca09454fd14", 0xdf}, {&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000000340)="973b2601dd4adf0060093ad55e0db341020223c54af831735355c45a4360d590a34086a5eeca5863822a8ce94aa9c5d2ae6d51fe19055985893156fb83897570adea0325cd3eb2831cc8a37fce7f087d26fcffb145b92ec73d7e2158bafc078184f6fee1e0b43364df736f05c3c3d39aa96cf2aaf722861381bb355f88d28317288d643a54bf6d3dec9d6dc5477060394a9b0c3eb5cef9788a31fd6645f0466fd2475217d3f328756b87081ec14fc28dbc1d4d2f16f8bcb6297a90d1eca2994e31ffbacf0140dce2d4886f6567b03703f6fea62bfb6b3c729670cbe437666e8c6318ecf95181b6", 0xe7}], 0x8, &(0x7f0000000500)=[@rthdr={{0x28, 0x29, 0x39, {0x48, 0x2, 0x1, 0x80, 0x0, [@ipv4={[], [], @private=0xa010101}]}}}], 0x28}}], 0x1, 0x8004) 05:46:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x4e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:24 executing program 5 (fault-call:1 fault-nth:13): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:24 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x118, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 523.820548][ T2651] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 523.828229][ T28] usb 2-1: new high-speed USB device number 22 using dummy_hcd 05:46:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 524.070333][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 524.087451][ T2651] usb 1-1: Using ep0 maxpacket: 8 [ 524.118788][ T5] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 524.187541][ T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 524.195528][ T28] usb 2-1: config 0 has no interface number 0 [ 524.201727][ T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 524.213093][ T2651] usb 1-1: config 0 has no interfaces? [ 524.218754][ T2651] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 524.229174][ T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 524.240022][ T2651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.248785][ T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 524.260212][ T28] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 524.270475][ T2651] usb 1-1: config 0 descriptor?? [ 524.275753][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.292551][ T28] usb 2-1: config 0 descriptor?? [ 524.327582][T20140] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 524.334524][T20140] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 524.377219][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 524.497558][ T5] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 524.508950][ T5] usb 6-1: config 0 has no interface number 0 [ 524.513799][T20139] FAULT_INJECTION: forcing a failure. [ 524.513799][T20139] name failslab, interval 1, probability 0, space 0, times 0 [ 524.519859][ T5] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 524.539023][ T5] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 524.551164][ T5] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 524.561939][T20139] CPU: 0 PID: 20139 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 524.570613][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.580659][T20139] Call Trace: [ 524.583954][T20139] dump_stack+0x18f/0x20d [ 524.588291][T20139] should_fail.cold+0x5/0x14 [ 524.592887][T20139] should_failslab+0x5/0xf [ 524.597304][T20139] kmem_cache_alloc_trace+0x240/0x2d0 [ 524.602739][T20139] snd_timer_instance_new+0x44/0x2f0 [ 524.608028][T20139] snd_seq_timer_open+0x1a5/0x530 [ 524.613063][T20139] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 524.618437][T20139] ? mark_held_locks+0x9f/0xe0 [ 524.623214][T20139] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 524.629021][T20139] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 524.635005][T20139] ? trace_hardirqs_on+0x5f/0x220 [ 524.640032][T20139] queue_use+0xe6/0x250 [ 524.644191][T20139] snd_seq_queue_alloc+0x2c6/0x4d0 [ 524.649317][T20139] snd_seq_ioctl_create_queue+0xab/0x320 [ 524.654946][T20139] ? alloc_seq_queue+0x190/0x190 [ 524.659884][T20139] snd_seq_kernel_client_ctl+0xeb/0x130 [ 524.665434][T20139] alloc_seq_queue+0xf0/0x190 [ 524.670137][T20139] ? async_call_lookup_ports+0x10/0x10 [ 524.675611][T20139] ? trace_kmalloc+0xfd/0x130 [ 524.680313][T20139] snd_seq_oss_open+0x36a/0xa10 [ 524.685192][T20139] odev_open+0x6c/0x90 [ 524.689261][T20139] ? odev_release+0x70/0x70 [ 524.693765][T20139] soundcore_open+0x445/0x600 [ 524.698445][T20139] ? sound_devnode+0xf0/0xf0 [ 524.703033][T20139] chrdev_open+0x266/0x770 [ 524.707450][T20139] ? cdev_device_add+0x210/0x210 [ 524.712394][T20139] ? security_file_open+0x1f5/0x3f0 [ 524.717600][T20139] do_dentry_open+0x501/0x1290 [ 524.722366][T20139] ? cdev_device_add+0x210/0x210 [ 524.727311][T20139] path_openat+0x1bb9/0x2750 [ 524.731908][T20139] ? path_lookupat+0x830/0x830 [ 524.736659][T20139] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 524.742621][T20139] ? lock_is_held_type+0xb0/0xe0 [ 524.747554][T20139] do_filp_open+0x17e/0x3c0 [ 524.752057][T20139] ? may_open_dev+0xf0/0xf0 [ 524.756565][T20139] ? do_raw_spin_lock+0x120/0x2b0 [ 524.761587][T20139] ? rwlock_bug.part.0+0x90/0x90 [ 524.766529][T20139] ? _raw_spin_unlock+0x24/0x40 [ 524.771382][T20139] ? __alloc_fd+0x28d/0x600 [ 524.775889][T20139] do_sys_openat2+0x16f/0x3b0 [ 524.780564][T20139] ? build_open_flags+0x650/0x650 [ 524.785588][T20139] ? __mutex_unlock_slowpath+0xe2/0x610 [ 524.791141][T20139] ? wait_for_completion+0x260/0x260 [ 524.796436][T20139] __x64_sys_openat+0x13f/0x1f0 [ 524.801285][T20139] ? __ia32_sys_open+0x1c0/0x1c0 [ 524.806219][T20139] ? ksys_write+0x1a5/0x250 [ 524.810723][T20139] ? lock_is_held_type+0xb0/0xe0 [ 524.815658][T20139] ? do_syscall_64+0x1c/0xe0 [ 524.820247][T20139] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 524.826232][T20139] do_syscall_64+0x60/0xe0 [ 524.830650][T20139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 524.836527][T20139] RIP: 0033:0x45c1d9 [ 524.840401][T20139] Code: Bad RIP value. [ 524.844450][T20139] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 524.852845][T20139] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 524.860798][T20139] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 524.868761][T20139] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 524.876717][T20139] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 524.884664][T20139] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 524.893459][ T5] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 524.902610][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.912144][ T5] usb 6-1: config 0 descriptor?? [ 524.930040][T20140] FAULT_INJECTION: forcing a failure. [ 524.930040][T20140] name failslab, interval 1, probability 0, space 0, times 0 [ 524.943165][T20163] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 524.950351][T20163] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 524.957231][T20140] CPU: 0 PID: 20140 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 524.965902][T20140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.975949][T20140] Call Trace: [ 524.979243][T20140] dump_stack+0x18f/0x20d [ 524.983578][T20140] should_fail.cold+0x5/0x14 [ 524.988173][T20140] should_failslab+0x5/0xf [ 524.992591][T20140] kmem_cache_alloc_trace+0x240/0x2d0 [ 524.997972][T20140] snd_timer_instance_new+0x44/0x2f0 [ 525.003266][T20140] snd_seq_timer_open+0x1a5/0x530 [ 525.008296][T20140] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 525.013660][T20140] ? mark_held_locks+0x9f/0xe0 [ 525.018420][T20140] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 525.024226][T20140] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 525.030199][T20140] ? trace_hardirqs_on+0x5f/0x220 [ 525.035226][T20140] queue_use+0xe6/0x250 [ 525.039382][T20140] snd_seq_queue_alloc+0x2c6/0x4d0 [ 525.044503][T20140] snd_seq_ioctl_create_queue+0xab/0x320 [ 525.050135][T20140] ? alloc_seq_queue+0x190/0x190 [ 525.055062][T20140] snd_seq_kernel_client_ctl+0xeb/0x130 [ 525.060601][T20140] alloc_seq_queue+0xf0/0x190 [ 525.065269][T20140] ? async_call_lookup_ports+0x10/0x10 [ 525.070715][T20140] ? trace_kmalloc+0xfd/0x130 [ 525.075372][T20140] snd_seq_oss_open+0x36a/0xa10 [ 525.080217][T20140] odev_open+0x6c/0x90 [ 525.084276][T20140] ? odev_release+0x70/0x70 [ 525.088769][T20140] soundcore_open+0x445/0x600 [ 525.093451][T20140] ? sound_devnode+0xf0/0xf0 [ 525.098040][T20140] chrdev_open+0x266/0x770 [ 525.102453][T20140] ? cdev_device_add+0x210/0x210 [ 525.107396][T20140] ? security_file_open+0x1f5/0x3f0 [ 525.112585][T20140] do_dentry_open+0x501/0x1290 [ 525.117335][T20140] ? cdev_device_add+0x210/0x210 [ 525.122266][T20140] path_openat+0x1bb9/0x2750 [ 525.126839][T20140] ? path_lookupat+0x830/0x830 [ 525.131595][T20140] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 525.137571][T20140] ? lock_is_held_type+0xb0/0xe0 [ 525.142516][T20140] do_filp_open+0x17e/0x3c0 [ 525.147010][T20140] ? may_open_dev+0xf0/0xf0 [ 525.151519][T20140] ? do_raw_spin_lock+0x120/0x2b0 [ 525.156523][T20140] ? rwlock_bug.part.0+0x90/0x90 [ 525.161458][T20140] ? _raw_spin_unlock+0x24/0x40 [ 525.166295][T20140] ? __alloc_fd+0x28d/0x600 [ 525.170907][T20140] do_sys_openat2+0x16f/0x3b0 [ 525.175572][T20140] ? build_open_flags+0x650/0x650 [ 525.180574][T20140] ? __mutex_unlock_slowpath+0xe2/0x610 [ 525.186097][T20140] ? wait_for_completion+0x260/0x260 [ 525.191361][T20140] __x64_sys_openat+0x13f/0x1f0 [ 525.196188][T20140] ? __ia32_sys_open+0x1c0/0x1c0 [ 525.201100][T20140] ? ksys_write+0x1a5/0x250 [ 525.205580][T20140] ? lock_is_held_type+0xb0/0xe0 [ 525.210496][T20140] ? do_syscall_64+0x1c/0xe0 [ 525.215066][T20140] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 525.221037][T20140] do_syscall_64+0x60/0xe0 [ 525.225450][T20140] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.231327][T20140] RIP: 0033:0x45c1d9 [ 525.235207][T20140] Code: Bad RIP value. [ 525.239253][T20140] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 525.247657][T20140] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 525.255613][T20140] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 525.263564][T20140] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 525.271511][T20140] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 525.279468][T20140] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 525.649333][T20163] FAULT_INJECTION: forcing a failure. [ 525.649333][T20163] name failslab, interval 1, probability 0, space 0, times 0 [ 525.654443][ T2651] usb 1-1: USB disconnect, device number 73 [ 525.665007][ T5] usb 2-1: USB disconnect, device number 22 [ 525.692998][T20163] CPU: 0 PID: 20163 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 525.701682][T20163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.711728][T20163] Call Trace: [ 525.715028][T20163] dump_stack+0x18f/0x20d [ 525.719367][T20163] should_fail.cold+0x5/0x14 [ 525.723963][T20163] should_failslab+0x5/0xf [ 525.728383][T20163] kmem_cache_alloc_trace+0x240/0x2d0 [ 525.733764][T20163] ? snd_hrtimer_callback+0x3c0/0x3c0 [ 525.739138][T20163] snd_hrtimer_open+0x41/0x110 [ 525.743903][T20163] snd_timer_open+0xb0a/0xfe0 [ 525.748585][T20163] ? snd_timer_instance_new+0x62/0x2f0 [ 525.754043][T20163] ? snd_timer_close_locked+0xbb0/0xbb0 [ 525.759579][T20163] ? memcpy+0x39/0x60 [ 525.763540][T20163] ? kstrdup+0x56/0x70 [ 525.767598][T20163] snd_seq_timer_open+0x259/0x530 [ 525.772611][T20163] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 525.777963][T20163] ? mark_held_locks+0x9f/0xe0 [ 525.782706][T20163] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 525.788500][T20163] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 525.794471][T20163] ? trace_hardirqs_on+0x5f/0x220 [ 525.799478][T20163] queue_use+0xe6/0x250 [ 525.803612][T20163] snd_seq_queue_alloc+0x2c6/0x4d0 [ 525.808892][T20163] snd_seq_ioctl_create_queue+0xab/0x320 [ 525.814512][T20163] ? alloc_seq_queue+0x190/0x190 [ 525.819426][T20163] snd_seq_kernel_client_ctl+0xeb/0x130 [ 525.824948][T20163] alloc_seq_queue+0xf0/0x190 [ 525.829613][T20163] ? async_call_lookup_ports+0x10/0x10 [ 525.835081][T20163] ? trace_kmalloc+0xfd/0x130 [ 525.839743][T20163] snd_seq_oss_open+0x36a/0xa10 [ 525.844625][T20163] odev_open+0x6c/0x90 [ 525.848680][T20163] ? odev_release+0x70/0x70 [ 525.853186][T20163] soundcore_open+0x445/0x600 [ 525.857864][T20163] ? sound_devnode+0xf0/0xf0 [ 525.862432][T20163] chrdev_open+0x266/0x770 [ 525.866827][T20163] ? cdev_device_add+0x210/0x210 [ 525.871761][T20163] ? security_file_open+0x1f5/0x3f0 [ 525.876952][T20163] do_dentry_open+0x501/0x1290 [ 525.881692][T20163] ? cdev_device_add+0x210/0x210 [ 525.886607][T20163] path_openat+0x1bb9/0x2750 [ 525.891192][T20163] ? path_lookupat+0x830/0x830 [ 525.895941][T20163] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 525.901918][T20163] ? lock_is_held_type+0xb0/0xe0 [ 525.906845][T20163] do_filp_open+0x17e/0x3c0 [ 525.911338][T20163] ? may_open_dev+0xf0/0xf0 [ 525.915831][T20163] ? do_raw_spin_lock+0x120/0x2b0 [ 525.920830][T20163] ? rwlock_bug.part.0+0x90/0x90 [ 525.925751][T20163] ? _raw_spin_unlock+0x24/0x40 [ 525.930586][T20163] ? __alloc_fd+0x28d/0x600 [ 525.935082][T20163] do_sys_openat2+0x16f/0x3b0 [ 525.939752][T20163] ? build_open_flags+0x650/0x650 [ 525.944763][T20163] ? __mutex_unlock_slowpath+0xe2/0x610 [ 525.950296][T20163] ? wait_for_completion+0x260/0x260 [ 525.955569][T20163] __x64_sys_openat+0x13f/0x1f0 [ 525.960395][T20163] ? __ia32_sys_open+0x1c0/0x1c0 [ 525.965305][T20163] ? ksys_write+0x1a5/0x250 [ 525.969803][T20163] ? lock_is_held_type+0xb0/0xe0 [ 525.974739][T20163] ? do_syscall_64+0x1c/0xe0 [ 525.979308][T20163] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 525.985263][T20163] do_syscall_64+0x60/0xe0 [ 525.989663][T20163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.995546][T20163] RIP: 0033:0x45c1d9 [ 525.999415][T20163] Code: Bad RIP value. [ 526.003453][T20163] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 526.011844][T20163] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 526.019801][T20163] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 526.027754][T20163] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 526.035710][T20163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 526.043658][T20163] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 526.281790][ T2521] usb 6-1: USB disconnect, device number 91 05:46:27 executing program 1 (fault-call:4 fault-nth:12): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:27 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x198, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x5, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) futimesat(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) pidfd_getfd(0xffffffffffffffff, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x7a00) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 05:46:27 executing program 0 (fault-call:1 fault-nth:13): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x500, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:27 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3f00, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:27 executing program 5 (fault-call:1 fault-nth:14): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x40000, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:27 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 526.777254][ T5] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 526.806984][ T2521] usb 2-1: new high-speed USB device number 23 using dummy_hcd 05:46:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1000000, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 527.026982][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 527.057059][ T2521] usb 2-1: Using ep0 maxpacket: 8 [ 527.136979][ T2651] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 527.153000][ T5] usb 1-1: config 0 has no interfaces? [ 527.158588][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 527.167778][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.176499][ T5] usb 1-1: config 0 descriptor?? [ 527.206906][ T2521] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 527.214967][ T2521] usb 2-1: config 0 has no interface number 0 [ 527.222492][ T2521] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 527.234920][ T2521] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 527.246438][ T2521] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 527.256884][ T2521] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 527.265939][ T2521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.275514][ T2521] usb 2-1: config 0 descriptor?? [ 527.297235][T20277] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 527.305663][T20277] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 527.382133][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 527.450045][T20273] FAULT_INJECTION: forcing a failure. [ 527.450045][T20273] name failslab, interval 1, probability 0, space 0, times 0 [ 527.480399][T20273] CPU: 1 PID: 20273 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 527.489096][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.499145][T20273] Call Trace: [ 527.502444][T20273] dump_stack+0x18f/0x20d [ 527.506785][T20273] should_fail.cold+0x5/0x14 [ 527.511384][T20273] should_failslab+0x5/0xf [ 527.515823][T20273] kmem_cache_alloc_trace+0x240/0x2d0 [ 527.521202][T20273] snd_seq_timer_new+0x41/0x1b0 [ 527.526055][T20273] snd_seq_queue_alloc+0x17e/0x4d0 [ 527.531179][T20273] snd_seq_ioctl_create_queue+0xab/0x320 [ 527.536809][T20273] ? alloc_seq_queue+0x190/0x190 [ 527.541754][T20273] snd_seq_kernel_client_ctl+0xeb/0x130 [ 527.547303][T20273] alloc_seq_queue+0xf0/0x190 [ 527.551984][T20273] ? async_call_lookup_ports+0x10/0x10 [ 527.557456][T20273] ? trace_kmalloc+0xfd/0x130 [ 527.562144][T20273] snd_seq_oss_open+0x36a/0xa10 [ 527.566998][T20273] odev_open+0x6c/0x90 [ 527.571074][T20273] ? odev_release+0x70/0x70 [ 527.575580][T20273] soundcore_open+0x445/0x600 [ 527.580265][T20273] ? sound_devnode+0xf0/0xf0 [ 527.584859][T20273] chrdev_open+0x266/0x770 [ 527.589280][T20273] ? cdev_device_add+0x210/0x210 [ 527.594222][T20273] ? security_file_open+0x1f5/0x3f0 [ 527.599424][T20273] do_dentry_open+0x501/0x1290 [ 527.604190][T20273] ? cdev_device_add+0x210/0x210 [ 527.609134][T20273] path_openat+0x1bb9/0x2750 [ 527.613736][T20273] ? path_lookupat+0x830/0x830 [ 527.618496][T20273] ? cache_grow_end+0x46/0x170 [ 527.623269][T20273] ? lock_is_held_type+0xb0/0xe0 [ 527.628216][T20273] do_filp_open+0x17e/0x3c0 [ 527.632722][T20273] ? may_open_dev+0xf0/0xf0 [ 527.637231][T20273] ? do_raw_spin_lock+0x120/0x2b0 [ 527.642254][T20273] ? rwlock_bug.part.0+0x90/0x90 [ 527.647199][T20273] ? _raw_spin_unlock+0x24/0x40 [ 527.652048][T20273] ? __alloc_fd+0x28d/0x600 [ 527.656566][T20273] do_sys_openat2+0x16f/0x3b0 [ 527.661234][T20273] ? build_open_flags+0x650/0x650 [ 527.666244][T20273] ? __mutex_unlock_slowpath+0xe2/0x610 [ 527.671787][T20273] ? wait_for_completion+0x260/0x260 [ 527.677065][T20273] __x64_sys_openat+0x13f/0x1f0 [ 527.681904][T20273] ? __ia32_sys_open+0x1c0/0x1c0 [ 527.686823][T20273] ? ksys_write+0x1a5/0x250 [ 527.691339][T20273] ? lock_is_held_type+0xb0/0xe0 [ 527.696312][T20273] ? do_syscall_64+0x1c/0xe0 [ 527.700893][T20273] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 527.706861][T20273] do_syscall_64+0x60/0xe0 [ 527.711252][T20273] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.717118][T20273] RIP: 0033:0x45c1d9 [ 527.720990][T20273] Code: Bad RIP value. [ 527.725041][T20273] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 527.733427][T20273] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 527.741372][T20273] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 527.749317][T20273] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 527.757269][T20273] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 527.765216][T20273] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 527.784710][T20277] FAULT_INJECTION: forcing a failure. [ 527.784710][T20277] name failslab, interval 1, probability 0, space 0, times 0 [ 527.787706][ T2651] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 527.816952][ T2651] usb 6-1: config 0 has no interface number 0 [ 527.817704][T20277] CPU: 0 PID: 20277 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 527.823060][ T2651] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 527.831676][T20277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.831682][T20277] Call Trace: [ 527.831701][T20277] dump_stack+0x18f/0x20d [ 527.831720][T20277] should_fail.cold+0x5/0x14 [ 527.831739][T20277] should_failslab+0x5/0xf [ 527.831755][T20277] kmem_cache_alloc_trace+0x240/0x2d0 [ 527.831778][T20277] snd_timer_instance_new+0x44/0x2f0 [ 527.831794][T20277] snd_seq_timer_open+0x1a5/0x530 [ 527.831811][T20277] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 527.831831][T20277] ? mark_held_locks+0x9f/0xe0 [ 527.831847][T20277] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 527.831860][T20277] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 527.831878][T20277] ? trace_hardirqs_on+0x5f/0x220 [ 527.852661][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 527.852822][T20277] queue_use+0xe6/0x250 [ 527.856085][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 527.860386][T20277] snd_seq_queue_alloc+0x2c6/0x4d0 [ 527.860407][T20277] snd_seq_ioctl_create_queue+0xab/0x320 [ 527.860420][T20277] ? alloc_seq_queue+0x190/0x190 [ 527.860437][T20277] snd_seq_kernel_client_ctl+0xeb/0x130 [ 527.860454][T20277] alloc_seq_queue+0xf0/0x190 [ 527.860468][T20277] ? async_call_lookup_ports+0x10/0x10 [ 527.860496][T20277] ? trace_kmalloc+0xfd/0x130 [ 527.875298][ T2651] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 527.880067][T20277] snd_seq_oss_open+0x36a/0xa10 [ 527.880087][T20277] odev_open+0x6c/0x90 [ 527.880100][T20277] ? odev_release+0x70/0x70 [ 527.880115][T20277] soundcore_open+0x445/0x600 [ 527.880132][T20277] ? sound_devnode+0xf0/0xf0 [ 527.880147][T20277] chrdev_open+0x266/0x770 [ 527.889472][ T2651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.890501][T20277] ? cdev_device_add+0x210/0x210 [ 527.898802][ T28] usb 1-1: USB disconnect, device number 74 [ 527.901025][T20277] ? security_file_open+0x1f5/0x3f0 [ 527.931826][ T2651] usb 6-1: config 0 descriptor?? [ 527.935797][T20277] do_dentry_open+0x501/0x1290 [ 527.959868][T20301] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 527.961585][T20277] ? cdev_device_add+0x210/0x210 [ 527.973787][T20301] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 527.980678][T20277] path_openat+0x1bb9/0x2750 [ 528.064159][T20277] ? path_lookupat+0x830/0x830 [ 528.068909][T20277] ? cache_grow_end+0x46/0x170 [ 528.073661][T20277] ? lock_is_held_type+0xb0/0xe0 [ 528.078592][T20277] do_filp_open+0x17e/0x3c0 [ 528.083093][T20277] ? may_open_dev+0xf0/0xf0 [ 528.087603][T20277] ? do_raw_spin_lock+0x120/0x2b0 [ 528.092623][T20277] ? rwlock_bug.part.0+0x90/0x90 [ 528.097562][T20277] ? _raw_spin_unlock+0x24/0x40 [ 528.102411][T20277] ? __alloc_fd+0x28d/0x600 [ 528.106920][T20277] do_sys_openat2+0x16f/0x3b0 [ 528.111592][T20277] ? build_open_flags+0x650/0x650 [ 528.116612][T20277] ? __mutex_unlock_slowpath+0xe2/0x610 [ 528.122159][T20277] ? wait_for_completion+0x260/0x260 [ 528.127446][T20277] __x64_sys_openat+0x13f/0x1f0 [ 528.132299][T20277] ? __ia32_sys_open+0x1c0/0x1c0 [ 528.137230][T20277] ? ksys_write+0x1a5/0x250 [ 528.141734][T20277] ? lock_is_held_type+0xb0/0xe0 [ 528.146672][T20277] ? do_syscall_64+0x1c/0xe0 [ 528.151266][T20277] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 528.157246][T20277] do_syscall_64+0x60/0xe0 [ 528.161663][T20277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.167547][T20277] RIP: 0033:0x45c1d9 [ 528.171427][T20277] Code: Bad RIP value. [ 528.175486][T20277] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 528.183896][T20277] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 528.191866][T20277] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 528.199832][T20277] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 528.207800][T20277] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 528.215774][T20277] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 528.246086][T20301] FAULT_INJECTION: forcing a failure. [ 528.246086][T20301] name failslab, interval 1, probability 0, space 0, times 0 [ 528.259226][T20301] CPU: 0 PID: 20301 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 528.267901][T20301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.277950][T20301] Call Trace: [ 528.281244][T20301] dump_stack+0x18f/0x20d [ 528.285579][T20301] should_fail.cold+0x5/0x14 [ 528.290176][T20301] should_failslab+0x5/0xf [ 528.294595][T20301] kmem_cache_alloc_trace+0x240/0x2d0 [ 528.299968][T20301] ? snd_hrtimer_callback+0x3c0/0x3c0 [ 528.305337][T20301] snd_hrtimer_open+0x41/0x110 [ 528.310098][T20301] snd_timer_open+0xb0a/0xfe0 [ 528.314778][T20301] ? snd_timer_instance_new+0x62/0x2f0 [ 528.320234][T20301] ? snd_timer_close_locked+0xbb0/0xbb0 [ 528.325778][T20301] ? memcpy+0x39/0x60 [ 528.329774][T20301] ? kstrdup+0x56/0x70 [ 528.333867][T20301] snd_seq_timer_open+0x259/0x530 [ 528.338895][T20301] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 528.344271][T20301] ? mark_held_locks+0x9f/0xe0 [ 528.349050][T20301] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 528.354859][T20301] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 528.360838][T20301] ? trace_hardirqs_on+0x5f/0x220 [ 528.365865][T20301] queue_use+0xe6/0x250 [ 528.370026][T20301] snd_seq_queue_alloc+0x2c6/0x4d0 [ 528.375149][T20301] snd_seq_ioctl_create_queue+0xab/0x320 [ 528.380781][T20301] ? alloc_seq_queue+0x190/0x190 [ 528.385721][T20301] snd_seq_kernel_client_ctl+0xeb/0x130 [ 528.391264][T20301] alloc_seq_queue+0xf0/0x190 [ 528.395940][T20301] ? async_call_lookup_ports+0x10/0x10 [ 528.401411][T20301] ? trace_kmalloc+0xfd/0x130 [ 528.406097][T20301] snd_seq_oss_open+0x36a/0xa10 [ 528.410952][T20301] odev_open+0x6c/0x90 [ 528.415021][T20301] ? odev_release+0x70/0x70 [ 528.419523][T20301] soundcore_open+0x445/0x600 [ 528.424203][T20301] ? sound_devnode+0xf0/0xf0 [ 528.428794][T20301] chrdev_open+0x266/0x770 [ 528.433198][T20301] ? cdev_device_add+0x210/0x210 [ 528.438125][T20301] ? security_file_open+0x1f5/0x3f0 [ 528.443308][T20301] do_dentry_open+0x501/0x1290 [ 528.448057][T20301] ? cdev_device_add+0x210/0x210 [ 528.452985][T20301] path_openat+0x1bb9/0x2750 [ 528.457572][T20301] ? path_lookupat+0x830/0x830 [ 528.462321][T20301] ? cache_grow_end+0x46/0x170 [ 528.467076][T20301] ? lock_is_held_type+0xb0/0xe0 [ 528.472003][T20301] do_filp_open+0x17e/0x3c0 [ 528.476478][T20301] ? may_open_dev+0xf0/0xf0 [ 528.480959][T20301] ? do_raw_spin_lock+0x120/0x2b0 [ 528.485991][T20301] ? rwlock_bug.part.0+0x90/0x90 [ 528.490914][T20301] ? _raw_spin_unlock+0x24/0x40 [ 528.495740][T20301] ? __alloc_fd+0x28d/0x600 [ 528.500237][T20301] do_sys_openat2+0x16f/0x3b0 [ 528.504900][T20301] ? build_open_flags+0x650/0x650 [ 528.509900][T20301] ? __mutex_unlock_slowpath+0xe2/0x610 [ 528.515421][T20301] ? wait_for_completion+0x260/0x260 [ 528.520683][T20301] __x64_sys_openat+0x13f/0x1f0 [ 528.525507][T20301] ? __ia32_sys_open+0x1c0/0x1c0 [ 528.530418][T20301] ? ksys_write+0x1a5/0x250 [ 528.534893][T20301] ? lock_is_held_type+0xb0/0xe0 [ 528.539804][T20301] ? do_syscall_64+0x1c/0xe0 [ 528.544368][T20301] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 528.550324][T20301] do_syscall_64+0x60/0xe0 [ 528.554753][T20301] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.560731][T20301] RIP: 0033:0x45c1d9 [ 528.564602][T20301] Code: Bad RIP value. [ 528.568649][T20301] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 528.577049][T20301] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 528.585004][T20301] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 528.592948][T20301] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 528.600896][T20301] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 528.608858][T20301] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 528.812255][ T3790] usb 6-1: USB disconnect, device number 92 [ 529.414518][ T2651] usb 2-1: USB disconnect, device number 23 05:46:30 executing program 1 (fault-call:4 fault-nth:13): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:30 executing program 5 (fault-call:1 fault-nth:15): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2000000, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x600, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$bt_bnep(0x1f, 0x3, 0x4) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 05:46:30 executing program 0 (fault-call:1 fault-nth:14): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x5000000, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3f000000, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0xa4ffffff, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x612, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0xf5ffffff, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0xffffffa4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 530.236559][ T3790] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 530.241542][ T2651] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 530.276486][ T8485] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 530.476438][ T3790] usb 1-1: Using ep0 maxpacket: 8 [ 530.536447][ T8485] usb 2-1: Using ep0 maxpacket: 8 [ 530.556637][ T2651] usb 6-1: Using ep0 maxpacket: 8 [ 530.596489][ T3790] usb 1-1: config 0 has no interfaces? [ 530.602328][ T3790] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 530.612295][ T3790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.624167][ T3790] usb 1-1: config 0 descriptor?? [ 530.666839][ T8485] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 530.674865][ T8485] usb 2-1: config 0 has no interface number 0 [ 530.681312][ T8485] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 530.692554][ T2651] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 530.700570][ T8485] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 530.710537][ T2651] usb 6-1: config 0 has no interface number 0 [ 530.716807][ T2651] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 530.727835][ T8485] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 530.737677][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 530.747676][ T8485] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 530.756772][ T8485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.764874][ T2651] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 530.776628][ T8485] usb 2-1: config 0 descriptor?? [ 530.781753][ T2651] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 530.796702][T20413] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 530.803597][T20413] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 530.826365][ T2651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.844673][ T2651] usb 6-1: config 0 descriptor?? [ 530.866848][T20409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 530.883216][T20408] FAULT_INJECTION: forcing a failure. [ 530.883216][T20408] name failslab, interval 1, probability 0, space 0, times 0 [ 530.891442][T20409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 530.915906][T20408] CPU: 0 PID: 20408 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 530.924622][T20408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.934669][T20408] Call Trace: [ 530.937962][T20408] dump_stack+0x18f/0x20d [ 530.942301][T20408] should_fail.cold+0x5/0x14 [ 530.946895][T20408] should_failslab+0x5/0xf [ 530.951358][T20408] kmem_cache_alloc_trace+0x240/0x2d0 [ 530.956737][T20408] snd_seq_oss_readq_new+0x46/0x2d0 [ 530.961943][T20408] snd_seq_oss_open+0x53a/0xa10 [ 530.966805][T20408] odev_open+0x6c/0x90 [ 530.970995][T20408] ? odev_release+0x70/0x70 [ 530.975499][T20408] soundcore_open+0x445/0x600 [ 530.980184][T20408] ? sound_devnode+0xf0/0xf0 [ 530.984782][T20408] chrdev_open+0x266/0x770 [ 530.989200][T20408] ? cdev_device_add+0x210/0x210 [ 530.994140][T20408] ? security_file_open+0x1f5/0x3f0 [ 530.999344][T20408] do_dentry_open+0x501/0x1290 [ 531.004104][T20408] ? cdev_device_add+0x210/0x210 [ 531.009051][T20408] path_openat+0x1bb9/0x2750 [ 531.013651][T20408] ? path_lookupat+0x830/0x830 [ 531.018414][T20408] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 531.024400][T20408] ? lock_is_held_type+0xb0/0xe0 [ 531.029341][T20408] do_filp_open+0x17e/0x3c0 [ 531.033847][T20408] ? may_open_dev+0xf0/0xf0 [ 531.038355][T20408] ? do_raw_spin_lock+0x120/0x2b0 [ 531.043378][T20408] ? rwlock_bug.part.0+0x90/0x90 [ 531.048321][T20408] ? _raw_spin_unlock+0x24/0x40 [ 531.053172][T20408] ? __alloc_fd+0x28d/0x600 [ 531.057680][T20408] do_sys_openat2+0x16f/0x3b0 [ 531.062354][T20408] ? build_open_flags+0x650/0x650 [ 531.067378][T20408] ? __mutex_unlock_slowpath+0xe2/0x610 [ 531.072926][T20408] ? wait_for_completion+0x260/0x260 [ 531.078214][T20408] __x64_sys_openat+0x13f/0x1f0 [ 531.083064][T20408] ? __ia32_sys_open+0x1c0/0x1c0 [ 531.088002][T20408] ? ksys_write+0x1a5/0x250 [ 531.092505][T20408] ? lock_is_held_type+0xb0/0xe0 [ 531.097444][T20408] ? do_syscall_64+0x1c/0xe0 [ 531.102035][T20408] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 531.108046][T20408] do_syscall_64+0x60/0xe0 [ 531.112460][T20408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.118346][T20408] RIP: 0033:0x45c1d9 [ 531.122231][T20408] Code: Bad RIP value. [ 531.126287][T20408] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.134692][T20408] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 531.142659][T20408] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 531.150625][T20408] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 531.158609][T20408] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 531.166575][T20408] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 531.195578][T20413] FAULT_INJECTION: forcing a failure. [ 531.195578][T20413] name failslab, interval 1, probability 0, space 0, times 0 [ 531.209673][ T8485] usb 1-1: USB disconnect, device number 75 [ 531.209834][T20413] CPU: 0 PID: 20413 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 531.224227][T20413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.234273][T20413] Call Trace: [ 531.237567][T20413] dump_stack+0x18f/0x20d [ 531.241924][T20413] should_fail.cold+0x5/0x14 [ 531.246518][T20413] should_failslab+0x5/0xf [ 531.250936][T20413] kmem_cache_alloc_trace+0x240/0x2d0 [ 531.256311][T20413] snd_timer_instance_new+0x44/0x2f0 [ 531.261599][T20413] snd_seq_timer_open+0x1a5/0x530 [ 531.266626][T20413] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 531.271989][T20413] ? mark_held_locks+0x9f/0xe0 [ 531.276730][T20413] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 531.282510][T20413] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 531.288461][T20413] ? trace_hardirqs_on+0x5f/0x220 [ 531.293458][T20413] queue_use+0xe6/0x250 [ 531.297586][T20413] snd_seq_queue_alloc+0x2c6/0x4d0 [ 531.302677][T20413] snd_seq_ioctl_create_queue+0xab/0x320 [ 531.308280][T20413] ? alloc_seq_queue+0x190/0x190 [ 531.313190][T20413] snd_seq_kernel_client_ctl+0xeb/0x130 [ 531.318712][T20413] alloc_seq_queue+0xf0/0x190 [ 531.323366][T20413] ? async_call_lookup_ports+0x10/0x10 [ 531.328806][T20413] ? trace_kmalloc+0xfd/0x130 [ 531.333459][T20413] snd_seq_oss_open+0x36a/0xa10 [ 531.338284][T20413] odev_open+0x6c/0x90 [ 531.342323][T20413] ? odev_release+0x70/0x70 [ 531.346798][T20413] soundcore_open+0x445/0x600 [ 531.351460][T20413] ? sound_devnode+0xf0/0xf0 [ 531.356065][T20413] chrdev_open+0x266/0x770 [ 531.360455][T20413] ? cdev_device_add+0x210/0x210 [ 531.365368][T20413] ? security_file_open+0x1f5/0x3f0 [ 531.370544][T20413] do_dentry_open+0x501/0x1290 [ 531.375286][T20413] ? cdev_device_add+0x210/0x210 [ 531.380200][T20413] path_openat+0x1bb9/0x2750 [ 531.384768][T20413] ? path_lookupat+0x830/0x830 [ 531.389505][T20413] ? cache_grow_end+0x46/0x170 [ 531.394244][T20413] ? lock_is_held_type+0xb0/0xe0 [ 531.399186][T20413] do_filp_open+0x17e/0x3c0 [ 531.403679][T20413] ? may_open_dev+0xf0/0xf0 [ 531.408164][T20413] ? do_raw_spin_lock+0x120/0x2b0 [ 531.413163][T20413] ? rwlock_bug.part.0+0x90/0x90 [ 531.418074][T20413] ? _raw_spin_unlock+0x24/0x40 [ 531.422994][T20413] ? __alloc_fd+0x28d/0x600 [ 531.427474][T20413] do_sys_openat2+0x16f/0x3b0 [ 531.432125][T20413] ? build_open_flags+0x650/0x650 [ 531.437120][T20413] ? __mutex_unlock_slowpath+0xe2/0x610 [ 531.442653][T20413] ? wait_for_completion+0x260/0x260 [ 531.447911][T20413] __x64_sys_openat+0x13f/0x1f0 [ 531.452732][T20413] ? __ia32_sys_open+0x1c0/0x1c0 [ 531.457642][T20413] ? ksys_write+0x1a5/0x250 [ 531.462117][T20413] ? lock_is_held_type+0xb0/0xe0 [ 531.467025][T20413] ? do_syscall_64+0x1c/0xe0 [ 531.471611][T20413] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 531.477569][T20413] do_syscall_64+0x60/0xe0 [ 531.481958][T20413] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.487823][T20413] RIP: 0033:0x45c1d9 [ 531.491685][T20413] Code: Bad RIP value. [ 531.495723][T20413] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.504104][T20413] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 531.512048][T20413] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 531.519992][T20413] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 531.527936][T20413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 531.535882][T20413] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 531.556851][T20409] FAULT_INJECTION: forcing a failure. [ 531.556851][T20409] name failslab, interval 1, probability 0, space 0, times 0 [ 531.585344][T20409] CPU: 0 PID: 20409 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 531.594021][T20409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.604068][T20409] Call Trace: [ 531.607359][T20409] dump_stack+0x18f/0x20d [ 531.611697][T20409] should_fail.cold+0x5/0x14 [ 531.616293][T20409] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 531.621657][T20409] should_failslab+0x5/0xf [ 531.626053][T20409] __kmalloc+0x27d/0x340 [ 531.630277][T20409] snd_seq_oss_readq_new+0x94/0x2d0 [ 531.635462][T20409] snd_seq_oss_open+0x53a/0xa10 [ 531.640297][T20409] odev_open+0x6c/0x90 [ 531.644350][T20409] ? odev_release+0x70/0x70 [ 531.648827][T20409] soundcore_open+0x445/0x600 [ 531.653484][T20409] ? sound_devnode+0xf0/0xf0 [ 531.658047][T20409] chrdev_open+0x266/0x770 [ 531.662440][T20409] ? cdev_device_add+0x210/0x210 [ 531.667357][T20409] ? security_file_open+0x1f5/0x3f0 [ 531.672535][T20409] do_dentry_open+0x501/0x1290 [ 531.677278][T20409] ? cdev_device_add+0x210/0x210 [ 531.682199][T20409] path_openat+0x1bb9/0x2750 [ 531.686770][T20409] ? path_lookupat+0x830/0x830 [ 531.691509][T20409] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 531.697483][T20409] ? lock_is_held_type+0xb0/0xe0 [ 531.702419][T20409] do_filp_open+0x17e/0x3c0 [ 531.706897][T20409] ? may_open_dev+0xf0/0xf0 [ 531.711379][T20409] ? do_raw_spin_lock+0x120/0x2b0 [ 531.716377][T20409] ? rwlock_bug.part.0+0x90/0x90 [ 531.721294][T20409] ? _raw_spin_unlock+0x24/0x40 [ 531.726116][T20409] ? __alloc_fd+0x28d/0x600 [ 531.730595][T20409] do_sys_openat2+0x16f/0x3b0 [ 531.735245][T20409] ? build_open_flags+0x650/0x650 [ 531.740245][T20409] ? __mutex_unlock_slowpath+0xe2/0x610 [ 531.745782][T20409] ? wait_for_completion+0x260/0x260 [ 531.751071][T20409] __x64_sys_openat+0x13f/0x1f0 [ 531.755933][T20409] ? __ia32_sys_open+0x1c0/0x1c0 [ 531.760870][T20409] ? ksys_write+0x1a5/0x250 [ 531.765370][T20409] ? lock_is_held_type+0xb0/0xe0 [ 531.770327][T20409] ? do_syscall_64+0x1c/0xe0 [ 531.774921][T20409] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 531.780902][T20409] do_syscall_64+0x60/0xe0 [ 531.785319][T20409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.791205][T20409] RIP: 0033:0x45c1d9 [ 531.795086][T20409] Code: Bad RIP value. [ 531.799143][T20409] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.807552][T20409] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 531.815520][T20409] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 531.823490][T20409] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 531.831455][T20409] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 531.839419][T20409] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 531.923203][ T3790] usb 6-1: USB disconnect, device number 93 [ 532.089744][ T2521] usb 2-1: USB disconnect, device number 24 05:46:33 executing program 1 (fault-call:4 fault-nth:14): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x900, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:33 executing program 2 (fault-call:1 fault-nth:0): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0xfffffff5, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:33 executing program 0 (fault-call:1 fault-nth:15): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:33 executing program 5 (fault-call:1 fault-nth:16): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x2, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x4, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x5, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xb00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 532.926266][ T2521] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 532.936266][ T3790] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 532.936288][ T28] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 532.957210][ T5] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 533.186141][ T3790] usb 3-1: Using ep0 maxpacket: 8 [ 533.191297][ T2521] usb 1-1: Using ep0 maxpacket: 8 [ 533.196551][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 533.226216][ T28] usb 6-1: Using ep0 maxpacket: 8 [ 533.316322][ T5] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 533.324427][ T3790] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 533.332491][ T2521] usb 1-1: config 0 has no interfaces? [ 533.338174][ T2521] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 533.347264][ T5] usb 2-1: config 0 has no interface number 0 [ 533.353352][ T5] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 533.364350][ T3790] usb 3-1: config 0 has no interface number 0 [ 533.370567][ T3790] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 533.376416][ T28] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 533.381586][ T2521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.397577][ T5] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 533.397776][ T28] usb 6-1: config 0 has no interface number 0 [ 533.407567][ T3790] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 533.407587][ T3790] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 533.407618][ T3790] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 533.407633][ T3790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.408735][ T3790] usb 3-1: config 0 descriptor?? [ 533.430638][ T28] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 533.435357][ T2521] usb 1-1: config 0 descriptor?? [ 533.471952][ T28] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 533.486143][ T5] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 533.495884][ T5] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 533.499927][ T28] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 533.512132][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.524145][ T5] usb 2-1: config 0 descriptor?? [ 533.533270][T20528] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 533.546389][T20533] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 533.555733][T20533] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 533.579620][ T28] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 533.594154][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.607187][ T3790] usb 3-1: invalid MIDI in EP 0 [ 533.609759][ T28] usb 6-1: config 0 descriptor?? [ 533.612692][ T3790] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 533.656686][T20527] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 533.663618][T20527] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 533.771312][T20524] FAULT_INJECTION: forcing a failure. [ 533.771312][T20524] name failslab, interval 1, probability 0, space 0, times 0 [ 533.785160][T20528] FAULT_INJECTION: forcing a failure. [ 533.785160][T20528] name failslab, interval 1, probability 0, space 0, times 0 [ 533.822820][T20528] CPU: 0 PID: 20528 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 533.831621][T20528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.841671][T20528] Call Trace: [ 533.844966][T20528] dump_stack+0x18f/0x20d [ 533.849311][T20528] should_fail.cold+0x5/0x14 [ 533.853907][T20528] should_failslab+0x5/0xf [ 533.858325][T20528] kmem_cache_alloc+0x2a9/0x3b0 [ 533.863183][T20528] getname_flags.part.0+0x50/0x4f0 [ 533.868299][T20528] getname+0x8e/0xd0 [ 533.872185][T20528] do_sys_openat2+0xf7/0x3b0 [ 533.876766][T20528] ? build_open_flags+0x650/0x650 [ 533.881785][T20528] ? __mutex_unlock_slowpath+0xe2/0x610 [ 533.887352][T20528] ? wait_for_completion+0x260/0x260 [ 533.892623][T20528] __x64_sys_openat+0x13f/0x1f0 [ 533.897454][T20528] ? __ia32_sys_open+0x1c0/0x1c0 [ 533.902375][T20528] ? ksys_write+0x1a5/0x250 [ 533.906860][T20528] ? lock_is_held_type+0xb0/0xe0 [ 533.911789][T20528] ? do_syscall_64+0x1c/0xe0 [ 533.916374][T20528] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 533.922339][T20528] do_syscall_64+0x60/0xe0 [ 533.926737][T20528] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.932609][T20528] RIP: 0033:0x45c1d9 [ 533.936482][T20528] Code: Bad RIP value. [ 533.940532][T20528] RSP: 002b:00007f98d52d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.948927][T20528] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 533.956881][T20528] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 533.964836][T20528] RBP: 00007f98d52d4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 533.972797][T20528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.980751][T20528] R13: 0000000000c9fb6f R14: 00007f98d52d59c0 R15: 000000000078bf0c [ 534.012121][T20524] CPU: 1 PID: 20524 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 534.020798][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.030845][T20524] Call Trace: [ 534.034139][T20524] dump_stack+0x18f/0x20d [ 534.038473][T20524] should_fail.cold+0x5/0x14 [ 534.043066][T20524] should_failslab+0x5/0xf [ 534.047481][T20524] kmem_cache_alloc_trace+0x240/0x2d0 [ 534.052854][T20524] ? snd_hrtimer_callback+0x3c0/0x3c0 [ 534.058234][T20524] snd_hrtimer_open+0x41/0x110 [ 534.063000][T20524] snd_timer_open+0xb0a/0xfe0 [ 534.067681][T20524] ? snd_timer_instance_new+0x62/0x2f0 [ 534.073134][T20524] ? snd_timer_close_locked+0xbb0/0xbb0 [ 534.078673][T20524] ? memcpy+0x39/0x60 [ 534.082653][T20524] ? kstrdup+0x56/0x70 [ 534.086723][T20524] snd_seq_timer_open+0x259/0x530 [ 534.091748][T20524] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 534.097122][T20524] ? mark_held_locks+0x9f/0xe0 [ 534.101885][T20524] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 534.107801][T20524] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 534.113775][T20524] ? trace_hardirqs_on+0x5f/0x220 [ 534.118799][T20524] queue_use+0xe6/0x250 [ 534.122954][T20524] snd_seq_queue_alloc+0x2c6/0x4d0 [ 534.128073][T20524] snd_seq_ioctl_create_queue+0xab/0x320 [ 534.133700][T20524] ? alloc_seq_queue+0x190/0x190 [ 534.138656][T20524] snd_seq_kernel_client_ctl+0xeb/0x130 [ 534.144215][T20524] alloc_seq_queue+0xf0/0x190 [ 534.148892][T20524] ? async_call_lookup_ports+0x10/0x10 [ 534.154367][T20524] ? trace_kmalloc+0xfd/0x130 [ 534.159052][T20524] snd_seq_oss_open+0x36a/0xa10 [ 534.163908][T20524] odev_open+0x6c/0x90 [ 534.167972][T20524] ? odev_release+0x70/0x70 [ 534.172475][T20524] soundcore_open+0x445/0x600 [ 534.177150][T20524] ? sound_devnode+0xf0/0xf0 [ 534.181734][T20524] chrdev_open+0x266/0x770 [ 534.186147][T20524] ? cdev_device_add+0x210/0x210 [ 534.191085][T20524] ? security_file_open+0x1f5/0x3f0 [ 534.196304][T20524] do_dentry_open+0x501/0x1290 [ 534.201086][T20524] ? cdev_device_add+0x210/0x210 [ 534.206032][T20524] path_openat+0x1bb9/0x2750 [ 534.210632][T20524] ? path_lookupat+0x830/0x830 [ 534.215404][T20524] ? cache_grow_end+0x46/0x170 [ 534.220173][T20524] ? lock_is_held_type+0xb0/0xe0 [ 534.225115][T20524] do_filp_open+0x17e/0x3c0 [ 534.229616][T20524] ? may_open_dev+0xf0/0xf0 [ 534.234125][T20524] ? do_raw_spin_lock+0x120/0x2b0 [ 534.239144][T20524] ? rwlock_bug.part.0+0x90/0x90 [ 534.244083][T20524] ? _raw_spin_unlock+0x24/0x40 [ 534.248931][T20524] ? __alloc_fd+0x28d/0x600 [ 534.253440][T20524] do_sys_openat2+0x16f/0x3b0 [ 534.258117][T20524] ? build_open_flags+0x650/0x650 [ 534.263141][T20524] ? __mutex_unlock_slowpath+0xe2/0x610 [ 534.268721][T20524] ? wait_for_completion+0x260/0x260 [ 534.274010][T20524] __x64_sys_openat+0x13f/0x1f0 [ 534.278859][T20524] ? __ia32_sys_open+0x1c0/0x1c0 [ 534.283801][T20524] ? ksys_write+0x1a5/0x250 [ 534.288304][T20524] ? lock_is_held_type+0xb0/0xe0 [ 534.293247][T20524] ? do_syscall_64+0x1c/0xe0 [ 534.297837][T20524] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 534.303816][T20524] do_syscall_64+0x60/0xe0 [ 534.308231][T20524] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.314118][T20524] RIP: 0033:0x45c1d9 [ 534.318001][T20524] Code: Bad RIP value. [ 534.322058][T20524] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.330468][T20524] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 534.338432][T20524] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 534.346504][T20524] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 534.354463][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 534.362430][T20524] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 534.376248][ T5] usb 3-1: USB disconnect, device number 3 [ 534.387784][T20533] FAULT_INJECTION: forcing a failure. [ 534.387784][T20533] name failslab, interval 1, probability 0, space 0, times 0 [ 534.409944][T20533] CPU: 1 PID: 20533 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 534.418625][T20533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.428692][T20533] Call Trace: [ 534.431998][T20533] dump_stack+0x18f/0x20d [ 534.436340][T20533] should_fail.cold+0x5/0x14 [ 534.440935][T20533] ? snd_timer_instance_new+0x62/0x2f0 [ 534.446408][T20533] ? snd_timer_instance_new+0x62/0x2f0 [ 534.451871][T20533] should_failslab+0x5/0xf [ 534.456303][T20533] __kmalloc_track_caller+0x27b/0x330 [ 534.461677][T20533] kstrdup+0x36/0x70 [ 534.465580][T20533] snd_timer_instance_new+0x62/0x2f0 [ 534.470870][T20533] snd_seq_timer_open+0x1a5/0x530 [ 534.475899][T20533] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 534.481262][T20533] ? mark_held_locks+0x9f/0xe0 [ 534.486017][T20533] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 534.491815][T20533] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 534.497788][T20533] ? trace_hardirqs_on+0x5f/0x220 [ 534.502799][T20533] queue_use+0xe6/0x250 [ 534.506945][T20533] snd_seq_queue_alloc+0x2c6/0x4d0 [ 534.512050][T20533] snd_seq_ioctl_create_queue+0xab/0x320 [ 534.517667][T20533] ? alloc_seq_queue+0x190/0x190 [ 534.522594][T20533] snd_seq_kernel_client_ctl+0xeb/0x130 [ 534.528127][T20533] alloc_seq_queue+0xf0/0x190 [ 534.532792][T20533] ? async_call_lookup_ports+0x10/0x10 [ 534.538254][T20533] ? trace_kmalloc+0xfd/0x130 [ 534.542928][T20533] snd_seq_oss_open+0x36a/0xa10 [ 534.547774][T20533] odev_open+0x6c/0x90 [ 534.551844][T20533] ? odev_release+0x70/0x70 [ 534.556340][T20533] soundcore_open+0x445/0x600 [ 534.561002][T20533] ? sound_devnode+0xf0/0xf0 [ 534.565563][T20533] chrdev_open+0x266/0x770 [ 534.569959][T20533] ? cdev_device_add+0x210/0x210 [ 534.574877][T20533] ? security_file_open+0x1f5/0x3f0 [ 534.580055][T20533] do_dentry_open+0x501/0x1290 [ 534.584802][T20533] ? cdev_device_add+0x210/0x210 [ 534.589722][T20533] path_openat+0x1bb9/0x2750 [ 534.594296][T20533] ? path_lookupat+0x830/0x830 [ 534.599037][T20533] ? cache_grow_end+0x46/0x170 [ 534.603795][T20533] ? lock_is_held_type+0xb0/0xe0 [ 534.608732][T20533] do_filp_open+0x17e/0x3c0 [ 534.613221][T20533] ? may_open_dev+0xf0/0xf0 [ 534.617716][T20533] ? do_raw_spin_lock+0x120/0x2b0 [ 534.622821][T20533] ? rwlock_bug.part.0+0x90/0x90 [ 534.627762][T20533] ? _raw_spin_unlock+0x24/0x40 [ 534.632600][T20533] ? __alloc_fd+0x28d/0x600 [ 534.637096][T20533] do_sys_openat2+0x16f/0x3b0 [ 534.641769][T20533] ? build_open_flags+0x650/0x650 [ 534.646790][T20533] ? __mutex_unlock_slowpath+0xe2/0x610 [ 534.652324][T20533] ? wait_for_completion+0x260/0x260 [ 534.657599][T20533] __x64_sys_openat+0x13f/0x1f0 [ 534.662448][T20533] ? __ia32_sys_open+0x1c0/0x1c0 [ 534.667378][T20533] ? ksys_write+0x1a5/0x250 [ 534.671869][T20533] ? lock_is_held_type+0xb0/0xe0 [ 534.676796][T20533] ? do_syscall_64+0x1c/0xe0 [ 534.681377][T20533] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 534.687346][T20533] do_syscall_64+0x60/0xe0 [ 534.691752][T20533] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.697629][T20533] RIP: 0033:0x45c1d9 [ 534.701518][T20533] Code: Bad RIP value. [ 534.705557][T20533] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.713952][T20533] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 534.721913][T20533] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 534.729864][T20533] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 534.737816][T20533] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 534.745772][T20533] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 534.762340][T20527] FAULT_INJECTION: forcing a failure. [ 534.762340][T20527] name failslab, interval 1, probability 0, space 0, times 0 [ 534.775687][T20527] CPU: 1 PID: 20527 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 534.784362][T20527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.794411][T20527] Call Trace: [ 534.797704][T20527] dump_stack+0x18f/0x20d [ 534.802025][T20527] should_fail.cold+0x5/0x14 [ 534.806612][T20527] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 534.811971][T20527] should_failslab+0x5/0xf [ 534.816377][T20527] __kmalloc+0x27d/0x340 [ 534.820613][T20527] snd_seq_oss_readq_new+0x94/0x2d0 [ 534.825789][T20527] snd_seq_oss_open+0x53a/0xa10 [ 534.830626][T20527] odev_open+0x6c/0x90 [ 534.834671][T20527] ? odev_release+0x70/0x70 [ 534.839152][T20527] soundcore_open+0x445/0x600 [ 534.843809][T20527] ? sound_devnode+0xf0/0xf0 [ 534.848385][T20527] chrdev_open+0x266/0x770 [ 534.852790][T20527] ? cdev_device_add+0x210/0x210 [ 534.857719][T20527] ? security_file_open+0x1f5/0x3f0 [ 534.862915][T20527] do_dentry_open+0x501/0x1290 [ 534.867677][T20527] ? cdev_device_add+0x210/0x210 [ 534.872622][T20527] path_openat+0x1bb9/0x2750 [ 534.877226][T20527] ? path_lookupat+0x830/0x830 [ 534.881989][T20527] ? cache_grow_end+0x46/0x170 [ 534.886761][T20527] ? lock_is_held_type+0xb0/0xe0 [ 534.891703][T20527] do_filp_open+0x17e/0x3c0 [ 534.896211][T20527] ? may_open_dev+0xf0/0xf0 [ 534.900709][T20527] ? do_raw_spin_lock+0x120/0x2b0 [ 534.905719][T20527] ? rwlock_bug.part.0+0x90/0x90 [ 534.910650][T20527] ? _raw_spin_unlock+0x24/0x40 [ 534.915477][T20527] ? __alloc_fd+0x28d/0x600 [ 534.919961][T20527] do_sys_openat2+0x16f/0x3b0 [ 534.924626][T20527] ? build_open_flags+0x650/0x650 [ 534.929646][T20527] ? __mutex_unlock_slowpath+0xe2/0x610 [ 534.935183][T20527] ? wait_for_completion+0x260/0x260 [ 534.940446][T20527] __x64_sys_openat+0x13f/0x1f0 [ 534.945273][T20527] ? __ia32_sys_open+0x1c0/0x1c0 [ 534.950278][T20527] ? ksys_write+0x1a5/0x250 [ 534.954778][T20527] ? lock_is_held_type+0xb0/0xe0 [ 534.959707][T20527] ? do_syscall_64+0x1c/0xe0 [ 534.964276][T20527] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 534.970245][T20527] do_syscall_64+0x60/0xe0 [ 534.974683][T20527] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 534.980563][T20527] RIP: 0033:0x45c1d9 [ 534.984436][T20527] Code: Bad RIP value. [ 534.988499][T20527] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.996908][T20527] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 535.004867][T20527] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 535.012823][T20527] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 535.020772][T20527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 535.028726][T20527] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 535.111709][ T3790] usb 6-1: USB disconnect, device number 94 [ 535.431769][ T8485] usb 1-1: USB disconnect, device number 76 [ 535.439271][ T28] usb 2-1: USB disconnect, device number 25 05:46:36 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x500, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:36 executing program 2 (fault-call:1 fault-nth:1): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:36 executing program 5 (fault-call:1 fault-nth:17): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:36 executing program 0 (fault-call:1 fault-nth:16): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:36 executing program 1 (fault-call:4 fault-nth:15): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x3f00, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:36 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x2, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:36 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 536.278155][ T28] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 536.285986][ T8485] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 536.295777][ T3790] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 536.296249][ T17] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 536.535885][ T3790] usb 3-1: Using ep0 maxpacket: 8 [ 536.575780][ T28] usb 6-1: Using ep0 maxpacket: 8 [ 536.580928][ T8485] usb 2-1: Using ep0 maxpacket: 8 [ 536.596896][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 536.656422][ T3790] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 536.664511][ T3790] usb 3-1: config 0 has no interface number 0 [ 536.671850][ T3790] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 536.683956][ T3790] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 536.694462][ T3790] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 536.705836][ T3790] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 536.706206][ T28] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 536.714942][ T3790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.729131][ T28] usb 6-1: config 0 has no interface number 0 [ 536.734255][ T3790] usb 3-1: config 0 descriptor?? [ 536.745883][ T17] usb 1-1: config 0 has no interfaces? [ 536.751368][ T17] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 536.760778][ T8485] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 536.766971][T20669] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 536.773830][ T8485] usb 2-1: config 0 has no interface number 0 [ 536.784287][ T28] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 536.795855][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.803982][ T8485] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 536.816158][ T28] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 536.825955][ T3790] usb 3-1: invalid MIDI in EP 0 [ 536.827419][ T8485] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 536.831538][ T3790] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 536.841078][ T28] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 536.858120][ T17] usb 1-1: config 0 descriptor?? [ 536.863375][ T8485] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 536.886084][ T28] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 536.895118][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.904359][ T8485] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 536.915033][ T8485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.927383][ T28] usb 6-1: config 0 descriptor?? [ 536.932903][ T8485] usb 2-1: config 0 descriptor?? [ 536.946129][T20665] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 536.953060][T20665] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 536.960372][T20667] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 536.968613][T20667] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 536.992795][T20669] FAULT_INJECTION: forcing a failure. [ 536.992795][T20669] name failslab, interval 1, probability 0, space 0, times 0 [ 537.005727][T20669] CPU: 0 PID: 20669 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 537.014395][T20669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.024436][T20669] Call Trace: [ 537.027708][T20669] dump_stack+0x18f/0x20d [ 537.032017][T20669] should_fail.cold+0x5/0x14 [ 537.036587][T20669] should_failslab+0x5/0xf [ 537.040978][T20669] kmem_cache_alloc+0x2a9/0x3b0 [ 537.045808][T20669] __alloc_file+0x21/0x350 [ 537.050207][T20669] alloc_empty_file+0x6d/0x170 [ 537.054958][T20669] path_openat+0xe3/0x2750 [ 537.059362][T20669] ? __lock_acquire+0x16e3/0x56e0 [ 537.064379][T20669] ? path_lookupat+0x830/0x830 [ 537.069115][T20669] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 537.075074][T20669] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 537.081037][T20669] ? lock_is_held_type+0xb0/0xe0 [ 537.085965][T20669] do_filp_open+0x17e/0x3c0 [ 537.090576][T20669] ? may_open_dev+0xf0/0xf0 [ 537.095055][T20669] ? __alloc_fd+0x28d/0x600 [ 537.099535][T20669] ? lock_downgrade+0x820/0x820 [ 537.104378][T20669] ? do_raw_spin_lock+0x120/0x2b0 [ 537.109401][T20669] ? rwlock_bug.part.0+0x90/0x90 [ 537.114341][T20669] ? _raw_spin_unlock+0x24/0x40 [ 537.119188][T20669] ? __alloc_fd+0x28d/0x600 [ 537.123673][T20669] do_sys_openat2+0x16f/0x3b0 [ 537.128335][T20669] ? build_open_flags+0x650/0x650 [ 537.133349][T20669] ? __mutex_unlock_slowpath+0xe2/0x610 [ 537.138880][T20669] ? wait_for_completion+0x260/0x260 [ 537.144144][T20669] __x64_sys_openat+0x13f/0x1f0 [ 537.148978][T20669] ? __ia32_sys_open+0x1c0/0x1c0 [ 537.153889][T20669] ? ksys_write+0x1a5/0x250 [ 537.158366][T20669] ? lock_is_held_type+0xb0/0xe0 [ 537.163277][T20669] ? do_syscall_64+0x1c/0xe0 [ 537.167849][T20669] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 537.173813][T20669] do_syscall_64+0x60/0xe0 [ 537.178204][T20669] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.184081][T20669] RIP: 0033:0x45c1d9 [ 537.187960][T20669] Code: Bad RIP value. [ 537.188819][T20665] FAULT_INJECTION: forcing a failure. [ 537.188819][T20665] name failslab, interval 1, probability 0, space 0, times 0 [ 537.192012][T20669] RSP: 002b:00007f98d52d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.212984][T20669] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 537.220950][T20669] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 537.228922][T20669] RBP: 00007f98d52d4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 537.236892][T20669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.244840][T20669] R13: 0000000000c9fb6f R14: 00007f98d52d59c0 R15: 000000000078bf0c [ 537.252809][T20665] CPU: 1 PID: 20665 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 537.261468][T20665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.271502][T20665] Call Trace: [ 537.274776][T20665] dump_stack+0x18f/0x20d [ 537.279231][T20665] should_fail.cold+0x5/0x14 [ 537.283797][T20665] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 537.289145][T20665] should_failslab+0x5/0xf [ 537.293534][T20665] __kmalloc+0x27d/0x340 [ 537.297770][T20665] snd_seq_oss_readq_new+0x94/0x2d0 [ 537.302969][T20665] snd_seq_oss_open+0x53a/0xa10 [ 537.307829][T20665] odev_open+0x6c/0x90 [ 537.311884][T20665] ? odev_release+0x70/0x70 [ 537.316362][T20665] soundcore_open+0x445/0x600 [ 537.321028][T20665] ? sound_devnode+0xf0/0xf0 [ 537.325613][T20665] chrdev_open+0x266/0x770 [ 537.330023][T20665] ? cdev_device_add+0x210/0x210 [ 537.334946][T20665] ? security_file_open+0x1f5/0x3f0 [ 537.340122][T20665] do_dentry_open+0x501/0x1290 [ 537.344857][T20665] ? cdev_device_add+0x210/0x210 [ 537.349772][T20665] path_openat+0x1bb9/0x2750 [ 537.354342][T20665] ? path_lookupat+0x830/0x830 [ 537.359079][T20665] ? cache_grow_end+0x46/0x170 [ 537.363831][T20665] ? lock_is_held_type+0xb0/0xe0 [ 537.368756][T20665] do_filp_open+0x17e/0x3c0 [ 537.373244][T20665] ? may_open_dev+0xf0/0xf0 [ 537.377726][T20665] ? do_raw_spin_lock+0x120/0x2b0 [ 537.382725][T20665] ? rwlock_bug.part.0+0x90/0x90 [ 537.387639][T20665] ? _raw_spin_unlock+0x24/0x40 [ 537.392463][T20665] ? __alloc_fd+0x28d/0x600 [ 537.396944][T20665] do_sys_openat2+0x16f/0x3b0 [ 537.401595][T20665] ? build_open_flags+0x650/0x650 [ 537.406593][T20665] ? __mutex_unlock_slowpath+0xe2/0x610 [ 537.412117][T20665] ? wait_for_completion+0x260/0x260 [ 537.417377][T20665] __x64_sys_openat+0x13f/0x1f0 [ 537.422202][T20665] ? __ia32_sys_open+0x1c0/0x1c0 [ 537.427118][T20665] ? ksys_write+0x1a5/0x250 [ 537.431594][T20665] ? lock_is_held_type+0xb0/0xe0 [ 537.436508][T20665] ? do_syscall_64+0x1c/0xe0 [ 537.441074][T20665] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 537.447039][T20665] do_syscall_64+0x60/0xe0 [ 537.451433][T20665] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.457298][T20665] RIP: 0033:0x45c1d9 [ 537.461172][T20665] Code: Bad RIP value. [ 537.465217][T20665] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.473600][T20665] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 537.481547][T20665] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 537.489490][T20665] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 537.497437][T20665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 537.505381][T20665] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 537.525875][ T3790] usb 3-1: USB disconnect, device number 4 [ 537.532065][T20668] FAULT_INJECTION: forcing a failure. [ 537.532065][T20668] name failslab, interval 1, probability 0, space 0, times 0 [ 537.575820][T20668] CPU: 1 PID: 20668 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 537.584511][T20668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.594555][T20668] Call Trace: [ 537.597844][T20668] dump_stack+0x18f/0x20d [ 537.602205][T20668] should_fail.cold+0x5/0x14 [ 537.606803][T20668] should_failslab+0x5/0xf [ 537.611227][T20668] kmem_cache_alloc_trace+0x240/0x2d0 [ 537.616606][T20668] snd_seq_oss_readq_new+0x46/0x2d0 [ 537.621811][T20668] snd_seq_oss_open+0x53a/0xa10 [ 537.626667][T20668] odev_open+0x6c/0x90 [ 537.630735][T20668] ? odev_release+0x70/0x70 [ 537.635229][T20668] soundcore_open+0x445/0x600 [ 537.639885][T20668] ? sound_devnode+0xf0/0xf0 [ 537.644450][T20668] chrdev_open+0x266/0x770 [ 537.648855][T20668] ? cdev_device_add+0x210/0x210 [ 537.653800][T20668] ? security_file_open+0x1f5/0x3f0 [ 537.659010][T20668] do_dentry_open+0x501/0x1290 [ 537.663772][T20668] ? cdev_device_add+0x210/0x210 [ 537.668719][T20668] path_openat+0x1bb9/0x2750 [ 537.673319][T20668] ? path_lookupat+0x830/0x830 [ 537.678081][T20668] ? cache_grow_end+0x46/0x170 [ 537.682849][T20668] ? lock_is_held_type+0xb0/0xe0 [ 537.687795][T20668] do_filp_open+0x17e/0x3c0 [ 537.692297][T20668] ? may_open_dev+0xf0/0xf0 [ 537.696810][T20668] ? do_raw_spin_lock+0x120/0x2b0 [ 537.701831][T20668] ? rwlock_bug.part.0+0x90/0x90 [ 537.706773][T20668] ? _raw_spin_unlock+0x24/0x40 [ 537.711616][T20668] ? __alloc_fd+0x28d/0x600 [ 537.716123][T20668] do_sys_openat2+0x16f/0x3b0 [ 537.720882][T20668] ? build_open_flags+0x650/0x650 [ 537.725903][T20668] ? __mutex_unlock_slowpath+0xe2/0x610 [ 537.731449][T20668] ? wait_for_completion+0x260/0x260 [ 537.736738][T20668] __x64_sys_openat+0x13f/0x1f0 [ 537.741597][T20668] ? __ia32_sys_open+0x1c0/0x1c0 [ 537.746527][T20668] ? ksys_write+0x1a5/0x250 [ 537.751028][T20668] ? lock_is_held_type+0xb0/0xe0 [ 537.755965][T20668] ? do_syscall_64+0x1c/0xe0 [ 537.760573][T20668] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 537.766556][T20668] do_syscall_64+0x60/0xe0 [ 537.771083][T20668] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.776972][T20668] RIP: 0033:0x45c1d9 [ 537.780848][T20668] Code: Bad RIP value. [ 537.784902][T20668] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.793307][T20668] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 537.801274][T20668] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 537.809243][T20668] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 537.817211][T20668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 537.825266][T20668] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 537.852418][T20667] FAULT_INJECTION: forcing a failure. [ 537.852418][T20667] name failslab, interval 1, probability 0, space 0, times 0 [ 537.870136][ T28] usb 6-1: USB disconnect, device number 95 [ 537.881654][T20667] CPU: 0 PID: 20667 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 537.885849][ T17] usb 1-1: USB disconnect, device number 77 [ 537.890326][T20667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.890332][T20667] Call Trace: [ 537.890354][T20667] dump_stack+0x18f/0x20d [ 537.890374][T20667] should_fail.cold+0x5/0x14 [ 537.890397][T20667] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 537.923785][T20667] should_failslab+0x5/0xf [ 537.928202][T20667] __kmalloc+0x27d/0x340 [ 537.932457][T20667] snd_seq_oss_readq_new+0x94/0x2d0 [ 537.937665][T20667] snd_seq_oss_open+0x53a/0xa10 [ 537.942521][T20667] odev_open+0x6c/0x90 [ 537.946579][T20667] ? odev_release+0x70/0x70 [ 537.951058][T20667] soundcore_open+0x445/0x600 [ 537.955712][T20667] ? sound_devnode+0xf0/0xf0 [ 537.960284][T20667] chrdev_open+0x266/0x770 [ 537.964698][T20667] ? cdev_device_add+0x210/0x210 [ 537.969640][T20667] ? security_file_open+0x1f5/0x3f0 [ 537.974843][T20667] do_dentry_open+0x501/0x1290 [ 537.979606][T20667] ? cdev_device_add+0x210/0x210 [ 537.984551][T20667] path_openat+0x1bb9/0x2750 [ 537.989152][T20667] ? path_lookupat+0x830/0x830 [ 537.993918][T20667] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 537.999905][T20667] ? lock_is_held_type+0xb0/0xe0 [ 538.004848][T20667] do_filp_open+0x17e/0x3c0 [ 538.009354][T20667] ? may_open_dev+0xf0/0xf0 [ 538.013866][T20667] ? do_raw_spin_lock+0x120/0x2b0 [ 538.018894][T20667] ? rwlock_bug.part.0+0x90/0x90 [ 538.023837][T20667] ? _raw_spin_unlock+0x24/0x40 [ 538.028688][T20667] ? __alloc_fd+0x28d/0x600 [ 538.033214][T20667] do_sys_openat2+0x16f/0x3b0 [ 538.037891][T20667] ? build_open_flags+0x650/0x650 [ 538.042916][T20667] ? __mutex_unlock_slowpath+0xe2/0x610 [ 538.048474][T20667] ? wait_for_completion+0x260/0x260 [ 538.053765][T20667] __x64_sys_openat+0x13f/0x1f0 [ 538.058904][T20667] ? __ia32_sys_open+0x1c0/0x1c0 [ 538.063842][T20667] ? ksys_write+0x1a5/0x250 [ 538.068347][T20667] ? lock_is_held_type+0xb0/0xe0 [ 538.073289][T20667] ? do_syscall_64+0x1c/0xe0 [ 538.077880][T20667] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 538.083851][T20667] do_syscall_64+0x60/0xe0 [ 538.088272][T20667] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.094159][T20667] RIP: 0033:0x45c1d9 [ 538.098037][T20667] Code: Bad RIP value. [ 538.102077][T20667] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 538.110506][T20667] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 538.118489][T20667] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 538.126473][T20667] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 538.134435][T20667] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 538.142393][T20667] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c [ 538.177490][ T3790] usb 2-1: USB disconnect, device number 26 05:46:39 executing program 1 (fault-call:4 fault-nth:16): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x5, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x1100, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:39 executing program 5 (fault-call:1 fault-nth:18): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:39 executing program 2 (fault-call:1 fault-nth:2): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:39 executing program 0 (fault-call:1 fault-nth:17): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x500, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x3f00, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x1200, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x40000, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x1000000, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x1206, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 538.985519][ T28] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 539.005418][ T17] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 539.017097][ T2504] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 539.036496][ T3790] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 539.258048][ T2504] usb 3-1: Using ep0 maxpacket: 8 [ 539.285558][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 539.285596][ T3790] usb 2-1: Using ep0 maxpacket: 8 [ 539.290676][ T28] usb 6-1: Using ep0 maxpacket: 8 [ 539.375524][ T2504] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 539.383524][ T2504] usb 3-1: config 0 has no interface number 0 [ 539.390261][ T2504] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 539.401586][ T2504] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 539.411812][ T2504] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 539.423237][ T2504] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 539.425809][ T17] usb 1-1: config 0 has no interfaces? [ 539.432477][ T3790] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 539.439719][ T28] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 539.446304][ T2504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.454034][ T17] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 539.470844][ T3790] usb 2-1: config 0 has no interface number 0 [ 539.473105][ T28] usb 6-1: config 0 has no interface number 0 [ 539.480088][ T3790] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 539.484709][ T28] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 539.500531][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 539.506715][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.515966][ T2504] usb 3-1: config 0 descriptor?? [ 539.528644][ T17] usb 1-1: config 0 descriptor?? [ 539.533665][ T28] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 539.558401][ T28] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 539.561177][ T3790] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 539.579631][T20793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.589880][ T28] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 539.602011][ T3790] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 539.605446][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.612442][ T3790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.624454][ T28] usb 6-1: config 0 descriptor?? [ 539.639869][ T3790] usb 2-1: config 0 descriptor?? [ 539.655884][T20790] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.662801][T20790] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.675824][ T2504] usb 3-1: invalid MIDI in EP 0 [ 539.681449][ T2504] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 539.694560][T20798] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.712021][T20798] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 539.792592][T20792] FAULT_INJECTION: forcing a failure. [ 539.792592][T20792] name failslab, interval 1, probability 0, space 0, times 0 [ 539.825813][T20793] FAULT_INJECTION: forcing a failure. [ 539.825813][T20793] name failslab, interval 1, probability 0, space 0, times 0 [ 539.849734][T20793] CPU: 0 PID: 20793 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 539.858413][T20793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.868467][T20793] Call Trace: [ 539.871846][T20793] dump_stack+0x18f/0x20d [ 539.876179][T20793] should_fail.cold+0x5/0x14 [ 539.880771][T20793] should_failslab+0x5/0xf [ 539.885187][T20793] kmem_cache_alloc+0x2a9/0x3b0 [ 539.890044][T20793] security_file_alloc+0x34/0x170 [ 539.895070][T20793] __alloc_file+0xd8/0x350 [ 539.899486][T20793] alloc_empty_file+0x6d/0x170 [ 539.904242][T20793] path_openat+0xe3/0x2750 [ 539.908651][T20793] ? __lock_acquire+0x16e3/0x56e0 [ 539.913683][T20793] ? path_lookupat+0x830/0x830 [ 539.918444][T20793] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 539.924421][T20793] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 539.930400][T20793] ? lock_is_held_type+0xb0/0xe0 [ 539.935328][T20793] do_filp_open+0x17e/0x3c0 [ 539.939826][T20793] ? may_open_dev+0xf0/0xf0 [ 539.944318][T20793] ? __alloc_fd+0x28d/0x600 [ 539.948815][T20793] ? lock_downgrade+0x820/0x820 [ 539.953667][T20793] ? do_raw_spin_lock+0x120/0x2b0 [ 539.958689][T20793] ? rwlock_bug.part.0+0x90/0x90 [ 539.963631][T20793] ? _raw_spin_unlock+0x24/0x40 [ 539.968494][T20793] ? __alloc_fd+0x28d/0x600 [ 539.973007][T20793] do_sys_openat2+0x16f/0x3b0 [ 539.977683][T20793] ? build_open_flags+0x650/0x650 [ 539.982695][T20793] ? __mutex_unlock_slowpath+0xe2/0x610 [ 539.988232][T20793] ? wait_for_completion+0x260/0x260 [ 539.993510][T20793] __x64_sys_openat+0x13f/0x1f0 [ 539.998344][T20793] ? __ia32_sys_open+0x1c0/0x1c0 [ 540.003268][T20793] ? ksys_write+0x1a5/0x250 [ 540.007759][T20793] ? lock_is_held_type+0xb0/0xe0 [ 540.012679][T20793] ? do_syscall_64+0x1c/0xe0 [ 540.017265][T20793] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 540.023233][T20793] do_syscall_64+0x60/0xe0 [ 540.027631][T20793] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.033500][T20793] RIP: 0033:0x45c1d9 [ 540.037372][T20793] Code: Bad RIP value. [ 540.041414][T20793] RSP: 002b:00007f98d52d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 540.049805][T20793] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 540.057858][T20793] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 540.065811][T20793] RBP: 00007f98d52d4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 540.073765][T20793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.081718][T20793] R13: 0000000000c9fb6f R14: 00007f98d52d59c0 R15: 000000000078bf0c [ 540.089686][T20792] CPU: 1 PID: 20792 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 540.098356][T20792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.108398][T20792] Call Trace: [ 540.111671][T20792] dump_stack+0x18f/0x20d [ 540.115996][T20792] should_fail.cold+0x5/0x14 [ 540.120618][T20792] ? snd_seq_oss_readq_new+0x94/0x2d0 [ 540.125996][T20792] should_failslab+0x5/0xf [ 540.130413][T20792] __kmalloc+0x27d/0x340 [ 540.134661][T20792] snd_seq_oss_readq_new+0x94/0x2d0 [ 540.139864][T20792] snd_seq_oss_open+0x53a/0xa10 [ 540.144742][T20792] odev_open+0x6c/0x90 [ 540.148912][T20792] ? odev_release+0x70/0x70 [ 540.153417][T20792] soundcore_open+0x445/0x600 [ 540.158096][T20792] ? sound_devnode+0xf0/0xf0 [ 540.162683][T20792] chrdev_open+0x266/0x770 [ 540.167096][T20792] ? cdev_device_add+0x210/0x210 [ 540.172037][T20792] ? security_file_open+0x1f5/0x3f0 [ 540.177236][T20792] do_dentry_open+0x501/0x1290 [ 540.177406][ T3790] usb 3-1: USB disconnect, device number 5 [ 540.181990][T20792] ? cdev_device_add+0x210/0x210 [ 540.182013][T20792] path_openat+0x1bb9/0x2750 [ 540.182037][T20792] ? path_lookupat+0x830/0x830 [ 540.182058][T20792] ? cache_grow_end+0x46/0x170 [ 540.206856][T20792] ? lock_is_held_type+0xb0/0xe0 [ 540.211797][T20792] do_filp_open+0x17e/0x3c0 [ 540.216300][T20792] ? may_open_dev+0xf0/0xf0 [ 540.220823][T20792] ? do_raw_spin_lock+0x120/0x2b0 [ 540.225847][T20792] ? rwlock_bug.part.0+0x90/0x90 [ 540.230794][T20792] ? _raw_spin_unlock+0x24/0x40 [ 540.235648][T20792] ? __alloc_fd+0x28d/0x600 [ 540.240156][T20792] do_sys_openat2+0x16f/0x3b0 [ 540.244833][T20792] ? build_open_flags+0x650/0x650 [ 540.249859][T20792] ? __mutex_unlock_slowpath+0xe2/0x610 [ 540.255516][T20792] ? wait_for_completion+0x260/0x260 [ 540.260808][T20792] __x64_sys_openat+0x13f/0x1f0 [ 540.265658][T20792] ? __ia32_sys_open+0x1c0/0x1c0 [ 540.270598][T20792] ? ksys_write+0x1a5/0x250 [ 540.275102][T20792] ? lock_is_held_type+0xb0/0xe0 [ 540.280131][T20792] ? do_syscall_64+0x1c/0xe0 [ 540.284727][T20792] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 540.290719][T20792] do_syscall_64+0x60/0xe0 [ 540.295140][T20792] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.301033][T20792] RIP: 0033:0x45c1d9 [ 540.304918][T20792] Code: Bad RIP value. [ 540.308985][T20792] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 540.317396][T20792] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 540.325369][T20792] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 540.333335][T20792] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 540.341303][T20792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 540.349281][T20792] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 540.419378][T20790] FAULT_INJECTION: forcing a failure. [ 540.419378][T20790] name failslab, interval 1, probability 0, space 0, times 0 [ 540.455221][T20790] CPU: 1 PID: 20790 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 540.455609][ T2504] usb 1-1: USB disconnect, device number 78 [ 540.463906][T20790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.463912][T20790] Call Trace: [ 540.463934][T20790] dump_stack+0x18f/0x20d [ 540.463956][T20790] should_fail.cold+0x5/0x14 [ 540.463976][T20790] should_failslab+0x5/0xf [ 540.463992][T20790] kmem_cache_alloc_trace+0x240/0x2d0 [ 540.464011][T20790] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 540.508010][T20790] snd_seq_port_connect+0x5d/0x520 [ 540.513115][T20790] ? _raw_read_unlock+0x24/0x40 [ 540.517962][T20790] ? check_subscription_permission.isra.0+0x16a/0x260 [ 540.524713][T20790] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 540.530598][T20790] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 540.536839][T20790] ? mark_held_locks+0x9f/0xe0 [ 540.541609][T20790] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 540.547408][T20790] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 540.553376][T20790] snd_seq_kernel_client_ctl+0xeb/0x130 [ 540.558921][T20790] snd_seq_oss_midi_open+0x582/0x6e0 [ 540.564211][T20790] ? snd_seq_oss_midi_setup+0x50/0x50 [ 540.569592][T20790] ? lock_is_held_type+0xb0/0xe0 [ 540.574535][T20790] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 540.580433][T20790] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 540.585986][T20790] snd_seq_oss_open+0x87e/0xa10 [ 540.590858][T20790] odev_open+0x6c/0x90 [ 540.594934][T20790] ? odev_release+0x70/0x70 [ 540.599440][T20790] soundcore_open+0x445/0x600 [ 540.604122][T20790] ? sound_devnode+0xf0/0xf0 [ 540.608711][T20790] chrdev_open+0x266/0x770 [ 540.613127][T20790] ? cdev_device_add+0x210/0x210 [ 540.618072][T20790] ? security_file_open+0x1f5/0x3f0 [ 540.623270][T20790] do_dentry_open+0x501/0x1290 [ 540.628012][T20790] ? cdev_device_add+0x210/0x210 [ 540.632943][T20790] path_openat+0x1bb9/0x2750 [ 540.637541][T20790] ? path_lookupat+0x830/0x830 [ 540.642298][T20790] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 540.648292][T20790] ? lock_is_held_type+0xb0/0xe0 [ 540.653240][T20790] do_filp_open+0x17e/0x3c0 [ 540.657748][T20790] ? may_open_dev+0xf0/0xf0 [ 540.662269][T20790] ? do_raw_spin_lock+0x120/0x2b0 [ 540.667292][T20790] ? rwlock_bug.part.0+0x90/0x90 [ 540.672234][T20790] ? _raw_spin_unlock+0x24/0x40 [ 540.677086][T20790] ? __alloc_fd+0x28d/0x600 [ 540.681597][T20790] do_sys_openat2+0x16f/0x3b0 [ 540.686286][T20790] ? build_open_flags+0x650/0x650 [ 540.691308][T20790] ? clockevents_program_event+0x12b/0x350 [ 540.697119][T20790] ? hrtimer_interrupt+0x6ea/0x930 [ 540.702227][T20790] __x64_sys_openat+0x13f/0x1f0 [ 540.707077][T20790] ? __ia32_sys_open+0x1c0/0x1c0 [ 540.712012][T20790] ? sched_clock_cpu+0x18/0x1b0 [ 540.716874][T20790] ? lock_is_held_type+0xb0/0xe0 [ 540.721815][T20790] ? do_syscall_64+0x1c/0xe0 [ 540.726411][T20790] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 540.732399][T20790] do_syscall_64+0x60/0xe0 [ 540.736818][T20790] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 540.742708][T20790] RIP: 0033:0x45c1d9 [ 540.746592][T20790] Code: Bad RIP value. [ 540.750665][T20790] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 540.759071][T20790] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 540.767043][T20790] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 540.775013][T20790] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 540.782980][T20790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 540.790951][T20790] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 541.488086][T20798] FAULT_INJECTION: forcing a failure. [ 541.488086][T20798] name failslab, interval 1, probability 0, space 0, times 0 [ 541.498801][ T2504] usb 6-1: USB disconnect, device number 96 [ 541.500752][T20798] CPU: 1 PID: 20798 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 541.515268][T20798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.525323][T20798] Call Trace: [ 541.528617][T20798] dump_stack+0x18f/0x20d [ 541.532962][T20798] should_fail.cold+0x5/0x14 [ 541.537556][T20798] should_failslab+0x5/0xf [ 541.541976][T20798] kmem_cache_alloc_trace+0x240/0x2d0 [ 541.547354][T20798] snd_seq_oss_readq_new+0x46/0x2d0 [ 541.552555][T20798] snd_seq_oss_open+0x53a/0xa10 [ 541.557413][T20798] odev_open+0x6c/0x90 [ 541.561481][T20798] ? odev_release+0x70/0x70 [ 541.565982][T20798] soundcore_open+0x445/0x600 [ 541.570663][T20798] ? sound_devnode+0xf0/0xf0 [ 541.575249][T20798] chrdev_open+0x266/0x770 [ 541.579666][T20798] ? cdev_device_add+0x210/0x210 [ 541.584610][T20798] ? security_file_open+0x1f5/0x3f0 [ 541.589810][T20798] do_dentry_open+0x501/0x1290 [ 541.594574][T20798] ? cdev_device_add+0x210/0x210 [ 541.599519][T20798] path_openat+0x1bb9/0x2750 [ 541.604120][T20798] ? path_lookupat+0x830/0x830 [ 541.608887][T20798] ? cache_grow_end+0x46/0x170 [ 541.613658][T20798] ? lock_is_held_type+0xb0/0xe0 [ 541.618604][T20798] do_filp_open+0x17e/0x3c0 [ 541.623106][T20798] ? may_open_dev+0xf0/0xf0 [ 541.627615][T20798] ? do_raw_spin_lock+0x120/0x2b0 [ 541.632639][T20798] ? rwlock_bug.part.0+0x90/0x90 [ 541.637580][T20798] ? _raw_spin_unlock+0x24/0x40 [ 541.642429][T20798] ? __alloc_fd+0x28d/0x600 [ 541.646938][T20798] do_sys_openat2+0x16f/0x3b0 [ 541.651614][T20798] ? build_open_flags+0x650/0x650 [ 541.656639][T20798] ? __mutex_unlock_slowpath+0xe2/0x610 [ 541.662188][T20798] ? wait_for_completion+0x260/0x260 [ 541.667476][T20798] __x64_sys_openat+0x13f/0x1f0 [ 541.672343][T20798] ? __ia32_sys_open+0x1c0/0x1c0 [ 541.677279][T20798] ? ksys_write+0x1a5/0x250 [ 541.681784][T20798] ? lock_is_held_type+0xb0/0xe0 [ 541.686726][T20798] ? do_syscall_64+0x1c/0xe0 [ 541.691318][T20798] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 541.697305][T20798] do_syscall_64+0x60/0xe0 [ 541.701712][T20798] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 541.707598][T20798] RIP: 0033:0x45c1d9 [ 541.711474][T20798] Code: Bad RIP value. [ 541.715522][T20798] RSP: 002b:00007fed86d56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 541.723920][T20798] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 541.731872][T20798] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 541.739931][T20798] RBP: 00007fed86d56ca0 R08: 0000000000000000 R09: 0000000000000000 [ 541.747900][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 541.755869][T20798] R13: 0000000000c9fb6f R14: 00007fed86d579c0 R15: 000000000078bf0c 05:46:42 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x2000000, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:42 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x1300, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 541.780999][ T17] usb 2-1: USB disconnect, device number 27 05:46:42 executing program 5 (fault-call:1 fault-nth:19): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:42 executing program 2 (fault-call:1 fault-nth:3): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:42 executing program 0 (fault-call:1 fault-nth:18): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x5000000, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:42 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x1801, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x3f000000, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:42 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x1f00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xa4ffffff, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xf5ffffff, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 542.255083][ T17] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 542.375072][ T2504] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 542.395142][ T2480] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 542.395768][ T3790] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 542.525195][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 542.615034][ T2504] usb 3-1: Using ep0 maxpacket: 8 [ 542.655592][ T3790] usb 6-1: Using ep0 maxpacket: 8 [ 542.668070][ T2480] usb 1-1: Using ep0 maxpacket: 8 [ 542.674464][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 542.682518][ T17] usb 2-1: config 0 has no interface number 0 [ 542.688923][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 542.699923][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 542.710258][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 542.720628][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 542.730477][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.735679][ T2504] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 542.740515][ T17] usb 2-1: config 0 descriptor?? [ 542.759763][ T2504] usb 3-1: config 0 has no interface number 0 [ 542.768898][ T2504] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 542.782761][ T2504] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 542.785349][T20924] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 542.793168][ T3790] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 542.801307][ T2480] usb 1-1: config 0 has no interfaces? [ 542.812891][ T2504] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 542.813330][ T2480] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 542.831950][ T3790] usb 6-1: config 0 has no interface number 0 [ 542.833063][T20924] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 542.839726][ T3790] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 542.845773][ T2480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.862740][ T2504] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 542.868586][ T2480] usb 1-1: config 0 descriptor?? [ 542.885219][ T2504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.893817][ T3790] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 542.918921][ T2504] usb 3-1: config 0 descriptor?? [ 542.924252][ T3790] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 542.939971][T20944] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 542.955400][ T3790] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 542.964715][ T3790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.986215][ T3790] usb 6-1: config 0 descriptor?? [ 543.017303][T20948] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 543.024233][T20948] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 543.055196][ T2504] usb 3-1: invalid MIDI in EP 0 [ 543.062116][ T2504] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 543.240195][T20944] FAULT_INJECTION: forcing a failure. [ 543.240195][T20944] name failslab, interval 1, probability 0, space 0, times 0 [ 543.266027][T20944] CPU: 0 PID: 20944 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 543.274715][T20944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.284763][T20944] Call Trace: [ 543.288060][T20944] dump_stack+0x18f/0x20d [ 543.292398][T20944] should_fail.cold+0x5/0x14 [ 543.296995][T20944] ? tomoyo_realpath_from_path+0xc3/0x620 [ 543.302715][T20944] should_failslab+0x5/0xf [ 543.307132][T20944] __kmalloc+0x27d/0x340 [ 543.311379][T20944] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 543.316929][T20944] tomoyo_realpath_from_path+0xc3/0x620 [ 543.322488][T20944] tomoyo_check_open_permission+0x272/0x380 [ 543.328384][T20944] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 543.334038][T20944] ? lookup_fast+0x6c0/0x6c0 [ 543.338646][T20944] ? lock_downgrade+0x820/0x820 [ 543.343502][T20944] ? do_raw_spin_lock+0x120/0x2b0 [ 543.348533][T20944] tomoyo_file_open+0xa3/0xd0 [ 543.353209][T20944] security_file_open+0x52/0x3f0 [ 543.358153][T20944] do_dentry_open+0x3a0/0x1290 [ 543.362929][T20944] path_openat+0x1bb9/0x2750 [ 543.367527][T20944] ? path_lookupat+0x830/0x830 [ 543.372291][T20944] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 543.378279][T20944] ? lock_is_held_type+0xb0/0xe0 [ 543.383233][T20944] do_filp_open+0x17e/0x3c0 [ 543.387738][T20944] ? may_open_dev+0xf0/0xf0 [ 543.392250][T20944] ? do_raw_spin_lock+0x120/0x2b0 [ 543.397264][T20944] ? rwlock_bug.part.0+0x90/0x90 [ 543.402181][T20944] ? _raw_spin_unlock+0x24/0x40 [ 543.407005][T20944] ? __alloc_fd+0x28d/0x600 [ 543.411489][T20944] do_sys_openat2+0x16f/0x3b0 [ 543.416141][T20944] ? build_open_flags+0x650/0x650 [ 543.421138][T20944] ? __mutex_unlock_slowpath+0xe2/0x610 [ 543.426663][T20944] ? wait_for_completion+0x260/0x260 [ 543.431939][T20944] __x64_sys_openat+0x13f/0x1f0 [ 543.436775][T20944] ? __ia32_sys_open+0x1c0/0x1c0 [ 543.441686][T20944] ? ksys_write+0x1a5/0x250 [ 543.446164][T20944] ? lock_is_held_type+0xb0/0xe0 [ 543.451080][T20944] ? do_syscall_64+0x1c/0xe0 [ 543.455649][T20944] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 543.461606][T20944] do_syscall_64+0x60/0xe0 [ 543.465997][T20944] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.471889][T20944] RIP: 0033:0x45c1d9 [ 543.475762][T20944] Code: Bad RIP value. [ 543.479799][T20944] RSP: 002b:00007f98d52d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.488183][T20944] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 543.496127][T20944] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 543.504079][T20944] RBP: 00007f98d52d4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 543.512033][T20944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 543.519979][T20944] R13: 0000000000c9fb6f R14: 00007f98d52d59c0 R15: 000000000078bf0c [ 543.538481][T20944] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.947133][T20943] FAULT_INJECTION: forcing a failure. [ 543.947133][T20943] name failslab, interval 1, probability 0, space 0, times 0 [ 543.955907][ T3790] usb 2-1: USB disconnect, device number 28 [ 544.004188][T20943] CPU: 1 PID: 20943 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 544.012874][T20943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.022928][T20943] Call Trace: [ 544.026226][T20943] dump_stack+0x18f/0x20d [ 544.030561][T20943] should_fail.cold+0x5/0x14 [ 544.035143][T20943] should_failslab+0x5/0xf [ 544.039541][T20943] kmem_cache_alloc_trace+0x240/0x2d0 [ 544.044906][T20943] snd_seq_oss_timer_new+0x40/0x240 [ 544.050105][T20943] snd_seq_oss_open+0x5c2/0xa10 [ 544.054963][T20943] odev_open+0x6c/0x90 [ 544.059033][T20943] ? odev_release+0x70/0x70 [ 544.063541][T20943] soundcore_open+0x445/0x600 [ 544.068208][T20943] ? sound_devnode+0xf0/0xf0 [ 544.072773][T20943] chrdev_open+0x266/0x770 [ 544.077178][T20943] ? cdev_device_add+0x210/0x210 [ 544.082124][T20943] ? security_file_open+0x1f5/0x3f0 [ 544.087338][T20943] do_dentry_open+0x501/0x1290 [ 544.092101][T20943] ? cdev_device_add+0x210/0x210 [ 544.097053][T20943] path_openat+0x1bb9/0x2750 [ 544.101626][T20943] ? path_lookupat+0x830/0x830 [ 544.106380][T20943] ? cache_grow_end+0x46/0x170 [ 544.111123][T20943] ? lock_is_held_type+0xb0/0xe0 [ 544.116054][T20943] do_filp_open+0x17e/0x3c0 [ 544.120557][T20943] ? may_open_dev+0xf0/0xf0 [ 544.125074][T20943] ? do_raw_spin_lock+0x120/0x2b0 [ 544.130101][T20943] ? rwlock_bug.part.0+0x90/0x90 [ 544.135045][T20943] ? _raw_spin_unlock+0x24/0x40 [ 544.139898][T20943] ? __alloc_fd+0x28d/0x600 [ 544.144405][T20943] do_sys_openat2+0x16f/0x3b0 [ 544.149077][T20943] ? build_open_flags+0x650/0x650 [ 544.154090][T20943] ? __mutex_unlock_slowpath+0xe2/0x610 [ 544.159612][T20943] ? wait_for_completion+0x260/0x260 [ 544.164877][T20943] __x64_sys_openat+0x13f/0x1f0 [ 544.169701][T20943] ? __ia32_sys_open+0x1c0/0x1c0 [ 544.174620][T20943] ? ksys_write+0x1a5/0x250 [ 544.179110][T20943] ? lock_is_held_type+0xb0/0xe0 [ 544.184022][T20943] ? do_syscall_64+0x1c/0xe0 [ 544.188594][T20943] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 544.194661][T20943] do_syscall_64+0x60/0xe0 [ 544.199068][T20943] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.204939][T20943] RIP: 0033:0x45c1d9 [ 544.208806][T20943] Code: Bad RIP value. [ 544.212845][T20943] RSP: 002b:00007f59a090bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 544.221227][T20943] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 544.229170][T20943] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 544.237113][T20943] RBP: 00007f59a090bca0 R08: 0000000000000000 R09: 0000000000000000 [ 544.245063][T20943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 544.253007][T20943] R13: 0000000000c9fb6f R14: 00007f59a090c9c0 R15: 000000000078bf0c [ 544.265650][T20943] ALSA: seq_oss: can't alloc timer [ 544.271205][T20948] FAULT_INJECTION: forcing a failure. [ 544.271205][T20948] name failslab, interval 1, probability 0, space 0, times 0 [ 544.291344][ T2504] usb 1-1: USB disconnect, device number 79 [ 544.293441][T20948] CPU: 1 PID: 20948 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 544.305892][T20948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.315942][T20948] Call Trace: [ 544.319235][T20948] dump_stack+0x18f/0x20d [ 544.323577][T20948] should_fail.cold+0x5/0x14 [ 544.328174][T20948] should_failslab+0x5/0xf [ 544.332597][T20948] kmem_cache_alloc_trace+0x240/0x2d0 [ 544.337963][T20948] snd_seq_oss_timer_new+0x40/0x240 [ 544.343152][T20948] snd_seq_oss_open+0x5c2/0xa10 [ 544.347981][T20948] odev_open+0x6c/0x90 [ 544.352033][T20948] ? odev_release+0x70/0x70 [ 544.356523][T20948] soundcore_open+0x445/0x600 [ 544.361177][T20948] ? sound_devnode+0xf0/0xf0 [ 544.365740][T20948] chrdev_open+0x266/0x770 [ 544.370131][T20948] ? cdev_device_add+0x210/0x210 [ 544.375057][T20948] ? security_file_open+0x1f5/0x3f0 [ 544.380380][T20948] do_dentry_open+0x501/0x1290 [ 544.385157][T20948] ? cdev_device_add+0x210/0x210 [ 544.390175][T20948] path_openat+0x1bb9/0x2750 [ 544.394758][T20948] ? path_lookupat+0x830/0x830 [ 544.399504][T20948] ? cache_grow_end+0x46/0x170 [ 544.404278][T20948] ? lock_is_held_type+0xb0/0xe0 [ 544.409197][T20948] do_filp_open+0x17e/0x3c0 [ 544.413717][T20948] ? may_open_dev+0xf0/0xf0 [ 544.418238][T20948] ? do_raw_spin_lock+0x120/0x2b0 [ 544.423242][T20948] ? rwlock_bug.part.0+0x90/0x90 [ 544.428160][T20948] ? _raw_spin_unlock+0x24/0x40 [ 544.433094][T20948] ? __alloc_fd+0x28d/0x600 [ 544.437579][T20948] do_sys_openat2+0x16f/0x3b0 [ 544.442233][T20948] ? build_open_flags+0x650/0x650 [ 544.447232][T20948] ? __mutex_unlock_slowpath+0xe2/0x610 [ 544.452755][T20948] ? wait_for_completion+0x260/0x260 [ 544.458019][T20948] __x64_sys_openat+0x13f/0x1f0 [ 544.462861][T20948] ? __ia32_sys_open+0x1c0/0x1c0 [ 544.467774][T20948] ? ksys_write+0x1a5/0x250 [ 544.472253][T20948] ? lock_is_held_type+0xb0/0xe0 [ 544.477165][T20948] ? do_syscall_64+0x1c/0xe0 [ 544.481732][T20948] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 544.487710][T20948] do_syscall_64+0x60/0xe0 [ 544.492128][T20948] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.498016][T20948] RIP: 0033:0x45c1d9 [ 544.501894][T20948] Code: Bad RIP value. 05:46:45 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4407, 0x0) 05:46:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xffffffa4, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x2000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "6c7b68d11161de456a3ed7819bb152e8c47d7e6f5668cebacc8b120329b165efe4da2fce5fd3a7baa230f70ff94794bda406a26a996f9f7276c8cbab9f820365744235bce1ec2e88b1c9ae06882532a42f3e30669f517c89d3a74cbad42bd5f1fccab9e96fe216854f709d184e4e0b86ea38d4cb8702810006e9a9fd6878f746ac39fcede9a49233f1b80c8f864a49c1422b68a9edb5036a761e61cd0ef1cca31ebd8503b02a308fab662c16e8f9ead4f04971f21c2db88ee136e85d7f0393b8d726e13e8e773c61416587369cecf3849cbd4b04f93c2644404700a68d258e286c5376595a30c63c474bd0502501167390db138cf6c0a950d33a1b40220e214b"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 544.505935][T20948] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 544.514323][T20948] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 544.522283][T20948] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 544.530235][T20948] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 544.538189][T20948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 544.546143][T20948] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 544.575324][T20948] ALSA: seq_oss: can't alloc timer [ 544.595508][ T2504] usb 6-1: USB disconnect, device number 97 [ 544.650563][ T2480] usb 3-1: USB disconnect, device number 6 [ 544.876819][ T17] usb 2-1: new high-speed USB device number 29 using dummy_hcd 05:46:45 executing program 5 (fault-call:1 fault-nth:20): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:45 executing program 2 (fault-call:1 fault-nth:4): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xfffffff5, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x3f00, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:45 executing program 0 (fault-call:1 fault-nth:19): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) [ 545.154732][ T17] usb 2-1: Using ep0 maxpacket: 8 05:46:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0xe0}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x5865, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) [ 545.301136][ T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 545.321712][ T17] usb 2-1: config 0 has no interface number 0 05:46:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 545.344682][ T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 545.386511][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 545.394690][ T2504] usb 6-1: new high-speed USB device number 98 using dummy_hcd 05:46:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x2]}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 545.432163][ T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 545.454786][ T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 545.463821][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.494707][ T3790] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 545.504970][ T2521] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 545.515827][ T17] usb 2-1: config 0 descriptor?? [ 545.535130][T21033] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.542045][T21033] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.644746][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 545.734696][ T3790] usb 1-1: Using ep0 maxpacket: 8 [ 545.744837][ T2521] usb 3-1: Using ep0 maxpacket: 8 [ 545.765634][ T2504] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 545.773628][ T2504] usb 6-1: config 0 has no interface number 0 [ 545.796717][ T2504] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 545.820251][ T2504] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 545.833441][ T2504] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 545.851153][ T2504] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 545.861368][ T2504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.875098][ T2521] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 545.883171][ T2521] usb 3-1: config 0 has no interface number 0 [ 545.889856][ T3790] usb 1-1: config 0 has no interfaces? [ 545.897788][ T3790] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 545.912215][ T2521] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 545.923751][ T2504] usb 6-1: config 0 descriptor?? [ 545.934526][ T3790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.948450][T21063] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.957837][T21063] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 545.965541][ T2521] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 545.975959][ T3790] usb 1-1: config 0 descriptor?? [ 545.981081][ T2521] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 546.004728][ T2521] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 546.013772][ T2521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.057553][ T2521] usb 3-1: config 0 descriptor?? [ 546.086057][T21076] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 546.145679][ T2521] usb 3-1: invalid MIDI in EP 0 [ 546.152610][ T2521] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 546.200462][T21063] FAULT_INJECTION: forcing a failure. [ 546.200462][T21063] name failslab, interval 1, probability 0, space 0, times 0 [ 546.213357][ T3790] usb 2-1: USB disconnect, device number 29 [ 546.223771][T21063] CPU: 0 PID: 21063 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 546.232457][T21063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.242521][T21063] Call Trace: [ 546.245810][T21063] dump_stack+0x18f/0x20d [ 546.250156][T21063] should_fail.cold+0x5/0x14 [ 546.254753][T21063] should_failslab+0x5/0xf [ 546.259170][T21063] kmem_cache_alloc_trace+0x240/0x2d0 [ 546.264539][T21063] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 546.270520][T21063] snd_seq_port_connect+0x5d/0x520 [ 546.275633][T21063] ? _raw_read_unlock+0x24/0x40 [ 546.280500][T21063] ? check_subscription_permission.isra.0+0x16a/0x260 [ 546.287273][T21063] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 546.293169][T21063] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 546.299435][T21063] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 546.305248][T21063] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 546.311233][T21063] snd_seq_kernel_client_ctl+0xeb/0x130 [ 546.316783][T21063] snd_seq_oss_midi_open+0x466/0x6e0 [ 546.322068][T21063] ? snd_seq_oss_midi_setup+0x50/0x50 [ 546.327458][T21063] ? lock_is_held_type+0xb0/0xe0 [ 546.332417][T21063] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 546.338304][T21063] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 546.343827][T21063] snd_seq_oss_open+0x87e/0xa10 [ 546.348656][T21063] odev_open+0x6c/0x90 [ 546.352698][T21063] ? odev_release+0x70/0x70 [ 546.357179][T21063] soundcore_open+0x445/0x600 [ 546.361835][T21063] ? sound_devnode+0xf0/0xf0 [ 546.366397][T21063] chrdev_open+0x266/0x770 [ 546.370802][T21063] ? cdev_device_add+0x210/0x210 [ 546.375717][T21063] ? security_file_open+0x1f5/0x3f0 [ 546.380904][T21063] do_dentry_open+0x501/0x1290 [ 546.385646][T21063] ? cdev_device_add+0x210/0x210 [ 546.390562][T21063] path_openat+0x1bb9/0x2750 [ 546.395133][T21063] ? path_lookupat+0x830/0x830 [ 546.399873][T21063] ? lock_is_held_type+0xb0/0xe0 [ 546.404786][T21063] do_filp_open+0x17e/0x3c0 [ 546.409262][T21063] ? may_open_dev+0xf0/0xf0 [ 546.413744][T21063] ? do_raw_spin_lock+0x120/0x2b0 [ 546.418742][T21063] ? rwlock_bug.part.0+0x90/0x90 [ 546.423655][T21063] ? _raw_spin_unlock+0x24/0x40 [ 546.428489][T21063] ? __alloc_fd+0x28d/0x600 [ 546.432976][T21063] do_sys_openat2+0x16f/0x3b0 [ 546.437626][T21063] ? build_open_flags+0x650/0x650 [ 546.442631][T21063] ? __mutex_unlock_slowpath+0xe2/0x610 [ 546.448149][T21063] ? wait_for_completion+0x260/0x260 [ 546.453413][T21063] __x64_sys_openat+0x13f/0x1f0 [ 546.458236][T21063] ? __ia32_sys_open+0x1c0/0x1c0 [ 546.463147][T21063] ? ksys_write+0x1a5/0x250 [ 546.467711][T21063] ? lock_is_held_type+0xb0/0xe0 [ 546.472622][T21063] ? do_syscall_64+0x1c/0xe0 [ 546.477198][T21063] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 546.483157][T21063] do_syscall_64+0x60/0xe0 [ 546.487547][T21063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 546.493412][T21063] RIP: 0033:0x45c1d9 [ 546.497275][T21063] Code: Bad RIP value. [ 546.501314][T21063] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 546.509696][T21063] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 546.517642][T21063] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 546.525587][T21063] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 546.533540][T21063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 546.541497][T21063] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 546.560732][T21076] FAULT_INJECTION: forcing a failure. [ 546.560732][T21076] name failslab, interval 1, probability 0, space 0, times 0 [ 546.602076][ T2521] usb 1-1: USB disconnect, device number 80 [ 546.621734][T21076] CPU: 1 PID: 21076 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 546.630426][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.640473][T21076] Call Trace: [ 546.643764][T21076] dump_stack+0x18f/0x20d [ 546.648127][T21076] should_fail.cold+0x5/0x14 [ 546.652728][T21076] ? tomoyo_realpath_from_path+0xc3/0x620 [ 546.658452][T21076] should_failslab+0x5/0xf [ 546.662876][T21076] __kmalloc+0x27d/0x340 [ 546.667136][T21076] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 546.672698][T21076] tomoyo_realpath_from_path+0xc3/0x620 [ 546.678256][T21076] tomoyo_check_open_permission+0x272/0x380 [ 546.684154][T21076] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 546.689800][T21076] ? lookup_fast+0x6c0/0x6c0 [ 546.694413][T21076] ? lock_downgrade+0x820/0x820 [ 546.699261][T21076] ? do_raw_spin_lock+0x120/0x2b0 [ 546.704288][T21076] tomoyo_file_open+0xa3/0xd0 [ 546.708978][T21076] security_file_open+0x52/0x3f0 [ 546.713917][T21076] do_dentry_open+0x3a0/0x1290 [ 546.718676][T21076] path_openat+0x1bb9/0x2750 [ 546.723261][T21076] ? path_lookupat+0x830/0x830 [ 546.727998][T21076] ? cache_grow_end+0x46/0x170 [ 546.732765][T21076] ? lock_is_held_type+0xb0/0xe0 [ 546.737695][T21076] do_filp_open+0x17e/0x3c0 [ 546.742201][T21076] ? may_open_dev+0xf0/0xf0 [ 546.746695][T21076] ? do_raw_spin_lock+0x120/0x2b0 [ 546.751693][T21076] ? rwlock_bug.part.0+0x90/0x90 [ 546.756637][T21076] ? _raw_spin_unlock+0x24/0x40 [ 546.761485][T21076] ? __alloc_fd+0x28d/0x600 [ 546.765967][T21076] do_sys_openat2+0x16f/0x3b0 [ 546.770619][T21076] ? build_open_flags+0x650/0x650 [ 546.775629][T21076] ? __mutex_unlock_slowpath+0xe2/0x610 [ 546.781164][T21076] ? wait_for_completion+0x260/0x260 [ 546.786427][T21076] __x64_sys_openat+0x13f/0x1f0 [ 546.791253][T21076] ? __ia32_sys_open+0x1c0/0x1c0 [ 546.796173][T21076] ? ksys_write+0x1a5/0x250 [ 546.800661][T21076] ? lock_is_held_type+0xb0/0xe0 [ 546.805586][T21076] ? do_syscall_64+0x1c/0xe0 [ 546.810166][T21076] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 546.816136][T21076] do_syscall_64+0x60/0xe0 [ 546.820540][T21076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 546.826409][T21076] RIP: 0033:0x45c1d9 [ 546.830272][T21076] Code: Bad RIP value. [ 546.834315][T21076] RSP: 002b:00007f98d52d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 546.842697][T21076] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 546.850683][T21076] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 546.858629][T21076] RBP: 00007f98d52d4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 546.866575][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 546.874531][T21076] R13: 0000000000c9fb6f R14: 00007f98d52d59c0 R15: 000000000078bf0c [ 546.888092][T21076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 546.903108][ T2521] usb 6-1: USB disconnect, device number 98 [ 546.923653][ T17] usb 3-1: USB disconnect, device number 7 [ 547.244577][ T2480] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 547.500180][ T2480] usb 2-1: Using ep0 maxpacket: 8 [ 547.624571][ T2480] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 547.632552][ T2480] usb 2-1: config 0 has no interface number 0 [ 547.642644][ T2480] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 547.653729][ T2480] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 547.667119][ T2480] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 547.676999][ T2480] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 547.686159][ T2480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.695247][ T2480] usb 2-1: config 0 descriptor?? [ 547.714983][T21033] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 547.721942][T21033] raw-gadget gadget: fail, usb_ep_enable returned -22 05:46:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x5]}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:48 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:48 executing program 5 (fault-call:1 fault-nth:21): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:48 executing program 2 (fault-call:1 fault-nth:5): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440f, 0x0) 05:46:48 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4410, 0x0) [ 547.913907][ T2521] usb 2-1: USB disconnect, device number 30 05:46:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x2]}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x6558, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x5]}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 05:46:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x8100, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) 05:46:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x5]}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 548.271343][ T3790] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 548.274543][ T2480] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 548.279142][ T2504] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 548.394409][ T2521] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 548.540287][ T2480] usb 3-1: Using ep0 maxpacket: 8 [ 548.554439][ T3790] usb 1-1: Using ep0 maxpacket: 8 [ 548.559567][ T2504] usb 6-1: Using ep0 maxpacket: 8 [ 548.664306][ T2521] usb 2-1: Using ep0 maxpacket: 8 [ 548.681291][ T2480] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 548.694870][ T2504] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 548.702954][ T2504] usb 6-1: config 0 has no interface number 0 [ 548.710114][ T2480] usb 3-1: config 0 has no interface number 0 [ 548.713768][ T3790] usb 1-1: config 0 has no interfaces? [ 548.725616][ T3790] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 548.727561][ T2480] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 548.741046][ T3790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.754185][ T2504] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 548.756455][ T2480] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 548.774411][ T2504] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 548.792380][ T2504] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 548.802677][ T3790] usb 1-1: config 0 descriptor?? [ 548.807778][ T2480] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 548.808010][ T2480] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 548.834416][ T2521] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 548.842404][ T2521] usb 2-1: config 0 has no interface number 0 [ 548.845970][ T2480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.874507][ T2504] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 548.875757][ T2480] usb 3-1: config 0 descriptor?? [ 548.886248][ T2521] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 548.904287][ T2504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.915887][T21232] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 548.925769][ T2504] usb 6-1: config 0 descriptor?? [ 548.932272][ T2521] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 548.946397][T21233] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 548.953348][T21233] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 548.973528][ T2521] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 548.981786][ T2480] usb 3-1: invalid MIDI in EP 0 [ 548.989559][ T2480] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 549.008925][ T2521] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 549.021294][ T2521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.039389][ T2521] usb 2-1: config 0 descriptor?? [ 549.064791][T21231] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 549.071714][T21231] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 549.149768][T21232] FAULT_INJECTION: forcing a failure. [ 549.149768][T21232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 549.163079][T21232] CPU: 1 PID: 21232 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 549.171746][T21232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.181796][T21232] Call Trace: [ 549.185090][T21232] dump_stack+0x18f/0x20d [ 549.189430][T21232] should_fail.cold+0x5/0x14 [ 549.194032][T21232] __alloc_pages_nodemask+0x1a3/0x930 [ 549.199420][T21232] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 549.206195][T21232] cache_grow_begin+0x8c/0xb20 [ 549.210962][T21232] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 549.216421][T21232] cache_alloc_refill+0x27b/0x340 [ 549.221441][T21232] ? lockdep_hardirqs_off+0x66/0xa0 [ 549.226644][T21232] ? tomoyo_realpath_from_path+0xc3/0x620 [ 549.232362][T21232] __kmalloc+0x319/0x340 [ 549.236608][T21232] tomoyo_realpath_from_path+0xc3/0x620 [ 549.242162][T21232] tomoyo_check_open_permission+0x272/0x380 [ 549.248054][T21232] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 549.253700][T21232] ? lookup_fast+0x6c0/0x6c0 [ 549.258322][T21232] ? lock_downgrade+0x820/0x820 [ 549.263168][T21232] ? do_raw_spin_lock+0x120/0x2b0 [ 549.268193][T21232] tomoyo_file_open+0xa3/0xd0 [ 549.272866][T21232] security_file_open+0x52/0x3f0 [ 549.277818][T21232] do_dentry_open+0x3a0/0x1290 [ 549.282590][T21232] path_openat+0x1bb9/0x2750 [ 549.287193][T21232] ? path_lookupat+0x830/0x830 [ 549.291960][T21232] ? cache_grow_end+0x46/0x170 [ 549.296733][T21232] ? lock_is_held_type+0xb0/0xe0 [ 549.301673][T21232] do_filp_open+0x17e/0x3c0 [ 549.306191][T21232] ? may_open_dev+0xf0/0xf0 [ 549.310699][T21232] ? do_raw_spin_lock+0x120/0x2b0 [ 549.315721][T21232] ? rwlock_bug.part.0+0x90/0x90 [ 549.320672][T21232] ? _raw_spin_unlock+0x24/0x40 [ 549.325525][T21232] ? __alloc_fd+0x28d/0x600 [ 549.330032][T21232] do_sys_openat2+0x16f/0x3b0 [ 549.334709][T21232] ? build_open_flags+0x650/0x650 [ 549.339732][T21232] ? __mutex_unlock_slowpath+0xe2/0x610 [ 549.345281][T21232] ? wait_for_completion+0x260/0x260 [ 549.350566][T21232] __x64_sys_openat+0x13f/0x1f0 [ 549.355416][T21232] ? __ia32_sys_open+0x1c0/0x1c0 [ 549.360349][T21232] ? ksys_write+0x1a5/0x250 [ 549.364850][T21232] ? lock_is_held_type+0xb0/0xe0 [ 549.369790][T21232] ? do_syscall_64+0x1c/0xe0 [ 549.374382][T21232] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 549.380366][T21232] do_syscall_64+0x60/0xe0 [ 549.384785][T21232] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 549.390671][T21232] RIP: 0033:0x45c1d9 [ 549.394552][T21232] Code: Bad RIP value. [ 549.398614][T21232] RSP: 002b:00007f98d52d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 549.407020][T21232] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 549.415073][T21232] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 549.423045][T21232] RBP: 00007f98d52d4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 549.431011][T21232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 549.438978][T21232] R13: 0000000000c9fb6f R14: 00007f98d52d59c0 R15: 000000000078bf0c [ 549.888274][T21233] FAULT_INJECTION: forcing a failure. [ 549.888274][T21233] name failslab, interval 1, probability 0, space 0, times 0 [ 549.902511][T21233] CPU: 1 PID: 21233 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 549.908455][ T2521] usb 1-1: USB disconnect, device number 81 [ 549.911191][T21233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.911198][T21233] Call Trace: [ 549.911219][T21233] dump_stack+0x18f/0x20d [ 549.911240][T21233] should_fail.cold+0x5/0x14 [ 549.911263][T21233] should_failslab+0x5/0xf [ 549.943708][T21233] kmem_cache_alloc_trace+0x240/0x2d0 [ 549.949077][T21233] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 549.955073][T21233] snd_seq_port_connect+0x5d/0x520 [ 549.960186][T21233] ? _raw_read_unlock+0x24/0x40 [ 549.965038][T21233] ? check_subscription_permission.isra.0+0x16a/0x260 [ 549.971811][T21233] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 549.977698][T21233] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 549.983932][T21233] ? mark_held_locks+0x9f/0xe0 [ 549.988687][T21233] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 549.994466][T21233] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 550.000434][T21233] snd_seq_kernel_client_ctl+0xeb/0x130 [ 550.005965][T21233] snd_seq_oss_midi_open+0x582/0x6e0 [ 550.011228][T21233] ? snd_seq_oss_midi_setup+0x50/0x50 [ 550.016572][T21233] ? mark_held_locks+0x9f/0xe0 [ 550.021314][T21233] ? lockdep_hardirqs_on+0x6a/0xe0 [ 550.026408][T21233] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 550.032190][T21233] ? get_mdev+0x75/0x90 [ 550.036326][T21233] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 550.042195][T21233] snd_seq_oss_open+0x87e/0xa10 [ 550.047021][T21233] odev_open+0x6c/0x90 [ 550.051072][T21233] ? odev_release+0x70/0x70 [ 550.055549][T21233] soundcore_open+0x445/0x600 [ 550.060213][T21233] ? sound_devnode+0xf0/0xf0 [ 550.064787][T21233] chrdev_open+0x266/0x770 [ 550.069180][T21233] ? cdev_device_add+0x210/0x210 [ 550.074103][T21233] ? security_file_open+0x1f5/0x3f0 [ 550.079302][T21233] do_dentry_open+0x501/0x1290 [ 550.084046][T21233] ? cdev_device_add+0x210/0x210 [ 550.088980][T21233] path_openat+0x1bb9/0x2750 [ 550.093561][T21233] ? path_lookupat+0x830/0x830 [ 550.098298][T21233] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 550.104261][T21233] ? lock_is_held_type+0xb0/0xe0 [ 550.109187][T21233] do_filp_open+0x17e/0x3c0 [ 550.113664][T21233] ? may_open_dev+0xf0/0xf0 [ 550.118145][T21233] ? do_raw_spin_lock+0x120/0x2b0 [ 550.123143][T21233] ? rwlock_bug.part.0+0x90/0x90 [ 550.128059][T21233] ? _raw_spin_unlock+0x24/0x40 [ 550.132888][T21233] ? __alloc_fd+0x28d/0x600 [ 550.137396][T21233] do_sys_openat2+0x16f/0x3b0 [ 550.142063][T21233] ? build_open_flags+0x650/0x650 [ 550.147061][T21233] ? __mutex_unlock_slowpath+0xe2/0x610 [ 550.152582][T21233] ? wait_for_completion+0x260/0x260 [ 550.157842][T21233] __x64_sys_openat+0x13f/0x1f0 [ 550.162668][T21233] ? __ia32_sys_open+0x1c0/0x1c0 [ 550.167586][T21233] ? ksys_write+0x1a5/0x250 [ 550.172075][T21233] ? lock_is_held_type+0xb0/0xe0 [ 550.176996][T21233] ? do_syscall_64+0x1c/0xe0 [ 550.181575][T21233] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 550.187531][T21233] do_syscall_64+0x60/0xe0 [ 550.191922][T21233] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 550.197787][T21233] RIP: 0033:0x45c1d9 [ 550.201650][T21233] Code: Bad RIP value. [ 550.205687][T21233] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 550.214076][T21233] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 550.222054][T21233] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 550.230004][T21233] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 550.238056][T21233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 550.246011][T21233] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 550.258048][T21233] ------------[ cut here ]------------ [ 550.263914][T21233] URB 00000000f24897c8 submitted while active [ 550.270629][T21233] WARNING: CPU: 1 PID: 21233 at drivers/usb/core/urb.c:363 usb_submit_urb+0x112f/0x1320 [ 550.280806][T21233] Kernel panic - not syncing: panic_on_warn set ... [ 550.287401][T21233] CPU: 1 PID: 21233 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 550.296061][T21233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.306110][T21233] Call Trace: [ 550.309398][T21233] dump_stack+0x18f/0x20d [ 550.313733][T21233] panic+0x2e3/0x75c [ 550.317623][T21233] ? __warn_printk+0xf3/0xf3 [ 550.322196][T21233] ? __warn.cold+0x5/0x45 [ 550.326506][T21233] ? usb_submit_urb+0x112f/0x1320 [ 550.331504][T21233] __warn.cold+0x20/0x45 [ 550.335723][T21233] ? usb_submit_urb+0x112f/0x1320 [ 550.340725][T21233] report_bug+0x1bd/0x210 [ 550.345036][T21233] handle_bug+0x38/0x90 [ 550.349164][T21233] ? __warn_printk+0xc6/0xf3 [ 550.353748][T21233] exc_invalid_op+0x13/0x40 [ 550.358233][T21233] asm_exc_invalid_op+0x12/0x20 [ 550.363063][T21233] RIP: 0010:usb_submit_urb+0x112f/0x1320 [ 550.368666][T21233] Code: 89 de e8 14 03 5f fc 84 db 0f 85 3d fa ff ff e8 c7 06 5f fc 4c 89 fe 48 c7 c7 80 05 cd 88 c6 05 eb 3b 95 05 01 e8 13 47 30 fc <0f> 0b e9 1b fa ff ff c7 44 24 14 01 00 00 00 e9 3e f5 ff ff 41 bd 05:46:51 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c567000000010902"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4407, 0x0) [ 550.388241][T21233] RSP: 0018:ffffc90017f3f2a0 EFLAGS: 00010282 [ 550.394291][T21233] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 550.402243][T21233] RDX: 0000000000040000 RSI: ffffffff815d4f87 RDI: fffff52002fe7e46 [ 550.410198][T21233] RBP: ffff8880a1f37c00 R08: 0000000000000001 R09: ffff8880ae7318e7 [ 550.418152][T21233] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 550.426115][T21233] R13: 00000000fffffff0 R14: ffff8880a1135500 R15: ffff8880a1135500 [ 550.434098][T21233] ? vprintk_func+0x97/0x1a6 [ 550.438756][T21233] snd_usbmidi_input_start.part.0+0x101/0x200 [ 550.444842][T21233] substream_open.isra.0+0x82c/0xc10 [ 550.450119][T21233] open_substream+0x42e/0x880 [ 550.454784][T21233] rawmidi_open_priv+0x519/0x6f0 [ 550.459696][T21233] snd_rawmidi_kernel_open+0x1b5/0x270 [ 550.465192][T21233] ? midisynth_use+0x250/0x250 [ 550.469954][T21233] midisynth_subscribe+0xf2/0x350 [ 550.474951][T21233] ? midisynth_use+0x250/0x250 [ 550.479703][T21233] ? down_write+0xdb/0x150 [ 550.484111][T21233] ? down_write_killable+0x170/0x170 [ 550.489404][T21233] ? midisynth_use+0x250/0x250 [ 550.494167][T21233] check_and_subscribe_port+0x89a/0xb80 [ 550.499720][T21233] snd_seq_port_connect+0x2e6/0x520 [ 550.504923][T21233] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 550.510821][T21233] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 550.517053][T21233] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 550.522844][T21233] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 550.528812][T21233] snd_seq_kernel_client_ctl+0xeb/0x130 [ 550.534333][T21233] snd_seq_oss_midi_open+0x466/0x6e0 [ 550.539601][T21233] ? snd_seq_oss_midi_setup+0x50/0x50 [ 550.544973][T21233] ? mark_held_locks+0x9f/0xe0 [ 550.549716][T21233] ? lockdep_hardirqs_on+0x6a/0xe0 [ 550.554800][T21233] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 550.560587][T21233] ? get_mdev+0x75/0x90 [ 550.564733][T21233] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 550.570618][T21233] snd_seq_oss_open+0x87e/0xa10 [ 550.575454][T21233] odev_open+0x6c/0x90 [ 550.579506][T21233] ? odev_release+0x70/0x70 [ 550.584008][T21233] soundcore_open+0x445/0x600 [ 550.588671][T21233] ? sound_devnode+0xf0/0xf0 [ 550.593235][T21233] chrdev_open+0x266/0x770 [ 550.597626][T21233] ? cdev_device_add+0x210/0x210 [ 550.602540][T21233] ? security_file_open+0x1f5/0x3f0 [ 550.607714][T21233] do_dentry_open+0x501/0x1290 [ 550.612460][T21233] ? cdev_device_add+0x210/0x210 [ 550.617386][T21233] path_openat+0x1bb9/0x2750 [ 550.621988][T21233] ? path_lookupat+0x830/0x830 [ 550.626723][T21233] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 550.632679][T21233] ? lock_is_held_type+0xb0/0xe0 [ 550.637594][T21233] do_filp_open+0x17e/0x3c0 [ 550.642070][T21233] ? may_open_dev+0xf0/0xf0 [ 550.646562][T21233] ? do_raw_spin_lock+0x120/0x2b0 [ 550.651571][T21233] ? rwlock_bug.part.0+0x90/0x90 [ 550.656496][T21233] ? _raw_spin_unlock+0x24/0x40 [ 550.661317][T21233] ? __alloc_fd+0x28d/0x600 [ 550.665799][T21233] do_sys_openat2+0x16f/0x3b0 [ 550.670449][T21233] ? build_open_flags+0x650/0x650 [ 550.675446][T21233] ? __mutex_unlock_slowpath+0xe2/0x610 [ 550.680966][T21233] ? wait_for_completion+0x260/0x260 [ 550.686240][T21233] __x64_sys_openat+0x13f/0x1f0 [ 550.691074][T21233] ? __ia32_sys_open+0x1c0/0x1c0 [ 550.695986][T21233] ? ksys_write+0x1a5/0x250 [ 550.700463][T21233] ? lock_is_held_type+0xb0/0xe0 [ 550.705382][T21233] ? do_syscall_64+0x1c/0xe0 [ 550.709946][T21233] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 550.715899][T21233] do_syscall_64+0x60/0xe0 [ 550.720289][T21233] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 550.726154][T21233] RIP: 0033:0x45c1d9 [ 550.730018][T21233] Code: Bad RIP value. [ 550.734065][T21233] RSP: 002b:00007ff888420c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 550.742459][T21233] RAX: ffffffffffffffda RBX: 0000000000021840 RCX: 000000000045c1d9 [ 550.750404][T21233] RDX: 000000000000440f RSI: 0000000020000000 RDI: ffffffffffffff9c [ 550.758350][T21233] RBP: 00007ff888420ca0 R08: 0000000000000000 R09: 0000000000000000 [ 550.766304][T21233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 550.774260][T21233] R13: 0000000000c9fb6f R14: 00007ff8884219c0 R15: 000000000078bf0c [ 550.783719][T21233] Kernel Offset: disabled [ 550.788130][T21233] Rebooting in 86400 seconds..