0b40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1177.852638][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 1177.912689][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1177.982988][ T12] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1177.991551][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.001856][ T12] usb 3-1: config 0 has no interface number 0 [ 1178.008297][ T12] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1178.019794][ T12] usb 3-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1178.032863][ T12] usb 3-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1178.041974][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.052180][ T12] usb 3-1: config 0 descriptor?? [ 1178.057962][T11523] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1178.066296][T11523] usb 5-1: config 0 has no interface number 0 [ 1178.072675][T11523] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1178.083766][T11523] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1178.102616][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1178.110901][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.121352][ T3369] usb 2-1: config 0 has no interface number 0 [ 1178.127611][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1178.138972][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1178.142536][ T31] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1178.152076][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1178.168777][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:13:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="100000000000ffff000000000000050000000000080000001400020100000000040019000000000000000000000000000000f21080000000000000fb0000000000000000000000006a14ca0049153894c80de631f456827a0f79a820e3724a7f4ab1dcee36017e6ef188e27d288d6313e96bbe67fd93fd94a1482e052479cc60d94cfedddb7e5b87a5f3f5b988587ff6d0b8f5979f924636b9e8dc571710329d908a15d511d6c869327a5ea49e25790f8b8b69a384ce1bccb40ebd268668277b148fdc8c480a927545d49faac857bf1d6a34783f1e11105549503d418eacd7f629e08d517e44ffff664e98e18447f048b18777b43746f73b1fc892faba96943fd47de18bdc10d995375a00000000"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r17, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000004200)={{{@in=@local, @in6=@remote}}, {{}, 0x0, @in=@local}}, &(0x7f0000004300)=0xe8) [ 1178.181401][ T12] ldusb 3-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1178.193654][ T12] ldusb 3-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1178.209795][ T3369] usb 2-1: config 0 descriptor?? [ 1178.247014][T11523] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1178.257694][T11523] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1178.266072][T11523] usb 5-1: Manufacturer: syz [ 1178.286949][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) 06:13:22 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECUREBITS(0x1c, 0x11) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x400000000000349, 0x0, 0x0) [ 1178.326066][ T3369] ldusb 2-1:0.28: LD USB Device #1 now attached to major 180 minor 1 [ 1178.342610][T11523] usb 5-1: config 0 descriptor?? [ 1178.404811][T11523] usb 5-1: BUG? WUSB host has no security descriptors [ 1178.420774][T11523] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1178.428844][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1178.429283][T11523] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 06:13:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x3, 0x6}, &(0x7f0000000140)) geteuid() syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x402) [ 1178.466204][ T2346] usb 3-1: USB disconnect, device number 93 [ 1178.501406][ T2346] ldusb 3-1:0.28: LD USB Device #0 now disconnected [ 1178.543610][ T3369] usb 2-1: USB disconnect, device number 109 [ 1178.554191][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.559535][ T3369] ldusb 2-1:0.28: LD USB Device #1 now disconnected [ 1178.565417][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 06:13:22 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x10040) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:22 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/\x8e\xc2\x1d\xf8o37\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000100)={0xc, 0x0, 0xcd3f26afd7cea237, {0x0, 0x7f, 0xffff, 0x8}}) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x400000000000349, 0x0, 0x0) [ 1178.565492][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=4010, bcdDevice= 0.40 [ 1178.565539][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.624210][ T31] usb 1-1: config 0 descriptor?? 06:13:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x13, 0x11a01}]}}}]}, 0x3c}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xc0201, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x2}], 0x3c) 06:13:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003c00070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010030d41739c109399da42c54291cd74f", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00>\x00\x00\x00\x00'], 0x68}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1178.962719][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 1178.968928][ T31] usbhid: probe of 1-1:0.0 failed with error -71 [ 1178.993430][ T31] usb 1-1: USB disconnect, device number 67 [ 1179.012435][ T2346] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1179.052789][T11523] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1179.061664][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000002ea1aaa4 [000000002ea1aaa4], 8006, f00, 0, 0000000046556e93, 5) UNIMPLEMENTED [ 1179.075577][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000002ea1aaa4 [000000002ea1aaa4], 8006, f00, 0, 0000000046556e93, 5) UNIMPLEMENTED [ 1179.088997][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000002ea1aaa4 [000000002ea1aaa4], 8006, f00, 0, 0000000046556e93, 5) UNIMPLEMENTED [ 1179.102486][ T3369] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1179.110606][T11523] usb usb41: unable to get BOS descriptor or descriptor too short [ 1179.120799][T11523] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1179.130378][T11523] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1179.138752][T11523] usb usb41: Product: Wireless USB HWA host controller [ 1179.145972][T11523] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1179.153001][T11523] usb usb41: SerialNumber: wusb-hwa [ 1179.162127][T11523] hub 41-0:1.0: USB hub found [ 1179.167990][T11523] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1179.263138][ T2346] usb 3-1: Using ep0 maxpacket: 8 [ 1179.269214][ T31] usb 5-1: USB disconnect, device number 84 [ 1179.283918][ T31] hwa-hc 5-1:0.66: remove, state 1 [ 1179.289200][ T31] usb usb41: USB disconnect, device number 1 [ 1179.300528][ T31] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1179.372462][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1179.382531][ T2346] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1179.390769][ T2346] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.401163][ T2346] usb 3-1: config 0 has no interface number 0 [ 1179.407365][ T2346] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1179.418772][ T2346] usb 3-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.432098][ T2346] usb 3-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1179.441326][ T2346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.451095][ T2346] usb 3-1: config 0 descriptor?? [ 1179.456781][ C1] net_ratelimit: 22 callbacks suppressed [ 1179.456802][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.457327][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.458027][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.458588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.492672][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1179.501028][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.511589][ T3369] usb 2-1: config 0 has no interface number 0 [ 1179.517866][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1179.525656][ T2346] ldusb 3-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1179.529188][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.551544][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1179.552921][ T2346] ldusb 3-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1179.560818][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.587482][ T3369] usb 2-1: config 0 descriptor?? [ 1179.642678][T11355] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1179.646272][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1179.662025][ T3369] ldusb 2-1:0.28: LD USB Device #1 now attached to major 180 minor 1 06:13:23 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003c00070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010030d41739c109399da42c54291cd74f", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00>\x00\x00\x00\x00'], 0x68}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1179.745193][ T3369] usb 3-1: USB disconnect, device number 94 [ 1179.754785][ T3369] ldusb 3-1:0.28: LD USB Device #0 now disconnected 06:13:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r17, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) 06:13:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x3, 0x6}, &(0x7f0000000140)) geteuid() [ 1179.860495][T11523] usb 2-1: USB disconnect, device number 110 [ 1179.873854][T11523] ldusb 2-1:0.28: LD USB Device #1 now disconnected [ 1179.882631][T11355] usb 1-1: Using ep0 maxpacket: 16 [ 1180.009182][T11355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.020556][T11355] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1180.034016][T11355] usb 1-1: New USB device found, idVendor=046d, idProduct=4010, bcdDevice= 0.40 [ 1180.043236][T11355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.053964][T11355] usb 1-1: config 0 descriptor?? [ 1180.192415][ T12] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1180.222763][ T3369] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1180.332768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.339218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.422765][T11355] usbhid 1-1:0.0: can't add hid device: -71 [ 1180.429000][T11355] usbhid: probe of 1-1:0.0 failed with error -71 [ 1180.438423][T11355] usb 1-1: USB disconnect, device number 68 [ 1180.462547][ T3369] usb 3-1: Using ep0 maxpacket: 8 [ 1180.562741][ T12] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1180.571111][ T12] usb 5-1: config 0 has no interface number 0 [ 1180.580312][ T12] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1180.591590][ T12] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1180.602713][ T3369] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1180.610828][ T3369] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.621088][ T3369] usb 3-1: config 0 has no interface number 0 [ 1180.627373][ T3369] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1180.638655][ T3369] usb 3-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1180.651808][ T3369] usb 3-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1180.660990][ T3369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.670601][ T3369] usb 3-1: config 0 descriptor?? [ 1180.702815][ T12] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1180.711950][ T12] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1180.720501][ T12] usb 5-1: Manufacturer: syz [ 1180.729399][ T3369] ldusb 3-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1180.752343][ T3369] ldusb 3-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1180.764559][ T12] usb 5-1: config 0 descriptor?? 06:13:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003c00070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010030d41739c109399da42c54291cd74f", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00>\x00\x00\x00\x00'], 0x68}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 06:13:24 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r1, &(0x7f00000000c0), 0x40000000000018b, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100029bd7000fddbdf250500005265cfea00080004004e230000f70a5bf7d51a1cf366fa67ff01000000000000c1fa8f62c969c6fcfa1582de64636de9bd13fd7f2fbd64ac471bc344f4356b86dee7419526947bc3879db2c00d0080000054b22b1f048d9705d3d7196ecf54a0f143dee487869021a2ccfe4c395be4f9cd729dece30fc8f39a26a31cc9"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x91a9d22633ace114) close(r0) [ 1180.804597][ T12] usb 5-1: BUG? WUSB host has no security descriptors [ 1180.818639][ T12] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1180.839586][ T12] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1180.892736][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.899058][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.905513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.911772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.927442][T11355] usb 3-1: USB disconnect, device number 95 06:13:25 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$input_event(r2, &(0x7f0000000000)={{}, 0x2, 0xfff7, 0x1}, 0x18) r3 = inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x4) inotify_rm_watch(r2, r3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1180.946445][T11355] ldusb 3-1:0.28: LD USB Device #0 now disconnected 06:13:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003c00070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010030d41739c109399da42c54291cd74f", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00>\x00\x00\x00\x00'], 0x68}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003c00070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010030d41739c109399da42c54291cd74f", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00>\x00\x00\x00\x00'], 0x68}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003c00070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010030d41739c109399da42c54291cd74f", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00>\x00\x00\x00\x00'], 0x68}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:25 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e23, 0xfffffffc, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ftruncate(r4, 0xfb) sendfile(r0, r3, 0x0, 0x8000fffffffe) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x848c0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) [ 1181.342372][ T2346] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1181.445353][ T12] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1181.453716][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000552307c8 [00000000552307c8], 8006, f00, 0, 0000000088079eec, 5) UNIMPLEMENTED [ 1181.470988][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000552307c8 [00000000552307c8], 8006, f00, 0, 0000000088079eec, 5) UNIMPLEMENTED [ 1181.548766][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000552307c8 [00000000552307c8], 8006, f00, 0, 0000000088079eec, 5) UNIMPLEMENTED [ 1181.566316][ T12] usb usb41: unable to get BOS descriptor or descriptor too short [ 1181.576504][ T12] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1181.585904][ T12] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1181.594246][ T12] usb usb41: Product: Wireless USB HWA host controller [ 1181.601171][ T12] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1181.607931][ T12] usb usb41: SerialNumber: wusb-hwa [ 1181.616713][ T12] hub 41-0:1.0: USB hub found [ 1181.621938][ T12] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1181.632608][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1181.649228][ T12] usb 5-1: USB disconnect, device number 85 [ 1181.656581][ T12] hwa-hc 5-1:0.66: remove, state 1 [ 1181.661819][ T12] usb usb41: USB disconnect, device number 1 [ 1181.671766][ T12] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1181.763405][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1181.771750][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.782039][ T2346] usb 2-1: config 0 has no interface number 0 [ 1181.788295][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1181.799549][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1181.812635][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1181.821816][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.833592][ T2346] usb 2-1: config 0 descriptor?? [ 1181.886111][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1181.899601][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1182.088198][ T12] usb 2-1: USB disconnect, device number 111 [ 1182.104173][ T12] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:13:26 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000003c00070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010030d41739c109399da42c54291cd74f", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00>\x00\x00\x00\x00'], 0x68}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:26 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000280)={0x0}) perf_event_open(&(0x7f00000002c0)={0x7, 0x70, 0x1, 0x6, 0xe9, 0x7, 0x0, 0x13, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_config_ext={0x5, 0xffff}, 0x20000, 0x91b6, 0x9109, 0x4, 0x0, 0x9, 0x7fff}, r0, 0x10, 0xffffffffffffffff, 0x2) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000400)='\teyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000100)="0480", 0x2, r4) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'qyz', 0x2}, 0x0, 0x0, r5) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000100)="0480", 0x2, r6) r7 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000100)="0480", 0x2, r8) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000100)="0480", 0x2, r8) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffff9, r7, 0x1) add_key(&(0x7f00000010c0)='asymmetric\x00', 0x0, &(0x7f0000000bc0)="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", 0x2f5, 0x0) socketpair(0x13, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r10, 0x1) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000200)={r12}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000001c0)={r12, 0x48, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x8, @empty, 0x2}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}]}, &(0x7f0000000200)=0x10) r13 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r13) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) 06:13:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x3, 0x6}, &(0x7f0000000140)) 06:13:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="100000000000ffff000000000000050000000000080000001400020100000000040019000000000000000000000000000000f21080000000000000fb0000000000000000000000006a14ca0049153894c80de631f456827a0f79a820e3724a7f4ab1dcee36017e6ef188e27d288d6313e96bbe67fd93fd94a1482e052479cc60d94cfedddb7e5b87a5f3f5b988587ff6d0b8f5979f924636b9e8dc571710329d908a15d511d6c869327a5ea49e25790f8b8b69a384ce1bccb40ebd268668277b148fdc8c480a927545d49faac857bf1d6a34783f1e11105549503d418eacd7f629e08d517e44ffff664e98e18447f048b18777b43746f73b1fc892faba96943fd47de18bdc10d995375a00000000"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x5}}, 0x0) 06:13:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1182.492702][T11523] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1182.500703][ T3369] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1182.772366][ T3369] usb 3-1: Using ep0 maxpacket: 8 [ 1182.862478][T11523] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1182.870808][T11523] usb 5-1: config 0 has no interface number 0 [ 1182.877225][T11523] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1182.888462][T11523] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1182.892354][ T2346] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1182.912763][ T3369] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1182.921023][ T3369] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.931300][ T3369] usb 3-1: config 0 has no interface number 0 [ 1182.937645][ T3369] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1182.948936][ T3369] usb 3-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1182.962053][ T3369] usb 3-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1182.971198][ T3369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.982759][ T3369] usb 3-1: config 0 descriptor?? [ 1183.012635][T11523] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1183.021932][T11523] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1183.030336][T11523] usb 5-1: Manufacturer: syz [ 1183.038373][ T3369] ldusb 3-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1183.084133][ T3369] ldusb 3-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1183.107038][T11523] usb 5-1: config 0 descriptor?? [ 1183.155208][T11523] usb 5-1: BUG? WUSB host has no security descriptors [ 1183.172691][T11523] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1183.172730][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1183.192090][T11523] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1183.239370][T11355] usb 3-1: USB disconnect, device number 96 [ 1183.254109][T11355] ldusb 3-1:0.28: LD USB Device #0 now disconnected [ 1183.312554][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1183.320789][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.331168][ T2346] usb 2-1: config 0 has no interface number 0 [ 1183.337367][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1183.348659][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1183.361734][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1183.370928][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.380381][ T2346] usb 2-1: config 0 descriptor?? [ 1183.426159][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1183.440231][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1183.625946][T11355] usb 2-1: USB disconnect, device number 112 [ 1183.643833][T11355] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1183.812906][T11523] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1183.820714][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000002599b103 [000000002599b103], 8006, f00, 0, 000000008e1576bb, 5) UNIMPLEMENTED [ 1183.834355][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000002599b103 [000000002599b103], 8006, f00, 0, 000000008e1576bb, 5) UNIMPLEMENTED [ 1183.847801][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000002599b103 [000000002599b103], 8006, f00, 0, 000000008e1576bb, 5) UNIMPLEMENTED [ 1183.861740][T11523] usb usb41: unable to get BOS descriptor or descriptor too short [ 1183.871538][T11523] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1183.881134][T11523] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1183.889500][T11523] usb usb41: Product: Wireless USB HWA host controller [ 1183.896510][T11523] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1183.903223][T11523] usb usb41: SerialNumber: wusb-hwa [ 1183.911612][T11523] hub 41-0:1.0: USB hub found [ 1183.917048][T11523] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) 06:13:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) 06:13:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:28 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1184.015359][T11355] usb 5-1: USB disconnect, device number 86 [ 1184.022097][T11355] hwa-hc 5-1:0.66: remove, state 1 [ 1184.027788][T11355] usb usb41: USB disconnect, device number 1 [ 1184.037968][T11355] hwa-hc 5-1:0.66: USB bus 41 deregistered 06:13:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) syz_usb_connect(0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) sendto(r5, &(0x7f0000000240)="af14fc4f31e1c12586856a62a45f76cf46d7cfa05ac7930c4a305c3fabf19378a060480b84b5ba4dcb1c319d104f5c9829e42472e98e9fa7de2f355b312ea67f984d11c64fe9967be7a6d5923f02f181b2ecefd739101bb1a2f4ec77aed739c5376758a9685d9d452d0dc71001b85da248d9bcde1d8be5010e409195d642ca162ef32e8df65c057774bf8dd00b90923d6c044a7b9d3dc611803efe779e4d14dcd26671f30036212fe4539dcce06a79931d6afdbbe3dfe85ce4c9f14bfc8be504bcce86e037bba22d2aba7c", 0xcb, 0x40, &(0x7f0000000140)=@ax25={{0x3, @bcast, 0x3}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) [ 1184.382472][ T3369] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1184.390508][T11523] usb 1-1: new high-speed USB device number 69 using dummy_hcd 06:13:28 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1184.492713][ C0] net_ratelimit: 18 callbacks suppressed [ 1184.492768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.504882][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:13:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1184.623496][ T3369] usb 3-1: Using ep0 maxpacket: 8 06:13:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1184.742766][ T3369] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1184.751057][ T3369] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.761531][ T3369] usb 3-1: config 0 has no interface number 0 [ 1184.767797][ T3369] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1184.779114][ T3369] usb 3-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1184.792188][ T3369] usb 3-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1184.801365][ T3369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.811062][T11523] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1184.819334][T11523] usb 1-1: config 0 has no interface number 0 [ 1184.825717][T11523] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1184.836856][T11523] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1184.851138][ T3369] usb 3-1: config 0 descriptor?? [ 1184.896167][ T3369] ldusb 3-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1184.912898][ T12] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1184.922111][ T3369] ldusb 3-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1184.933356][T11523] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 06:13:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1184.942665][T11523] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1184.950882][T11523] usb 1-1: Manufacturer: syz [ 1184.974670][T11523] usb 1-1: config 0 descriptor?? [ 1185.023510][T11523] usb 1-1: BUG? WUSB host has no security descriptors [ 1185.052814][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.059058][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.065680][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.071906][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.087945][T11523] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1185.098230][T11355] usb 3-1: USB disconnect, device number 97 [ 1185.115616][T11355] ldusb 3-1:0.28: LD USB Device #0 now disconnected 06:13:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1185.117142][T11523] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1185.132947][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.139270][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:13:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:29 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018b, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x7fffffff, 0x5, 0x2, 0x6}, 0x10) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r2, &(0x7f00000000c0), 0x40000000000018b, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r6}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={r6, 0xaa, "797545d2fd42de516155d010bc57813c24611c5ffa5f5ff23cd5418f452a61e2b96140baccd32ebe76564a2529bbaf4631892a65c2ca80d2e857e5ee24523b4cc3025d0f06510b276fe6656e1d1d80e06197f11f345da9560f5f466864cdfa5135b7ac6da04128e83c89134171bba211078b3daa3a56b580936871d55b11f2aa06168c2c4ec9e7dfa8ad0ac6eff30b19205b3fc8b000638dbf76d6d5798454e861cd87ce77606bed6a64"}, &(0x7f0000000000)=0xb2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r7, 0x8000}, &(0x7f0000000180)=0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f00000000ee08058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1185.332684][ T12] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1185.340908][ T12] usb 5-1: config 0 has no interface number 0 [ 1185.347269][ T12] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1185.358402][ T12] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1185.443205][ T12] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1185.452529][ T12] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1185.460708][ T12] usb 5-1: Manufacturer: syz [ 1185.467957][ T12] usb 5-1: config 0 descriptor?? [ 1185.515097][ T12] usb 5-1: BUG? WUSB host has no security descriptors [ 1185.524117][ T12] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1185.532366][ T12] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1185.642924][T11523] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1185.651216][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000afccc7bb [00000000afccc7bb], 8006, f00, 0, 00000000e0829bfd, 5) UNIMPLEMENTED [ 1185.667951][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000afccc7bb [00000000afccc7bb], 8006, f00, 0, 00000000e0829bfd, 5) UNIMPLEMENTED [ 1185.681463][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000afccc7bb [00000000afccc7bb], 8006, f00, 0, 00000000e0829bfd, 5) UNIMPLEMENTED [ 1185.695804][T11523] usb usb41: unable to get BOS descriptor or descriptor too short [ 1185.702781][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.709865][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.712666][T11523] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1185.725122][T11523] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1185.734336][T11523] usb usb41: Product: Wireless USB HWA host controller [ 1185.741376][T11523] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1185.748286][T11523] usb usb41: SerialNumber: wusb-hwa [ 1185.757596][T11523] hub 41-0:1.0: USB hub found [ 1185.763517][T11523] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1185.778585][ T3369] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1185.854967][T11523] usb 1-1: USB disconnect, device number 69 [ 1185.862765][T11523] hwa-hc 1-1:0.66: remove, state 1 [ 1185.868085][T11523] usb usb41: USB disconnect, device number 1 [ 1185.878036][T11523] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1186.022380][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1186.142622][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1186.150901][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.161253][ T3369] usb 2-1: config 0 has no interface number 0 [ 1186.167591][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1186.178908][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1186.192040][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1186.201325][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.210079][ T12] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1186.217623][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000558ebea4 [00000000558ebea4], 8006, f00, 0, 00000000022112b8, 5) UNIMPLEMENTED [ 1186.231012][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000558ebea4 [00000000558ebea4], 8006, f00, 0, 00000000022112b8, 5) UNIMPLEMENTED [ 1186.244791][ T3369] usb 2-1: config 0 descriptor?? [ 1186.250325][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000558ebea4 [00000000558ebea4], 8006, f00, 0, 00000000022112b8, 5) UNIMPLEMENTED [ 1186.263866][ T12] usb usb42: unable to get BOS descriptor or descriptor too short [ 1186.275157][ T12] usb usb42: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1186.284658][ T12] usb usb42: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1186.293000][ T12] usb usb42: Product: Wireless USB HWA host controller [ 1186.300071][ T12] usb usb42: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1186.306859][ T12] usb usb42: SerialNumber: wusb-hwa [ 1186.316644][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1186.330909][ T12] hub 42-0:1.0: USB hub found 06:13:30 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1186.336924][ T3369] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1186.347923][ T12] hub 42-0:1.0: config failed, hub doesn't have any ports! (err -19) 06:13:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1186.396381][T11355] usb 5-1: USB disconnect, device number 87 [ 1186.404148][T11355] hwa-hc 5-1:0.66: remove, state 1 [ 1186.409400][T11355] usb usb42: USB disconnect, device number 1 [ 1186.465902][T11355] hwa-hc 5-1:0.66: USB bus 42 deregistered [ 1186.568020][ T2346] usb 2-1: USB disconnect, device number 113 [ 1186.585751][ T2346] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1186.762668][ T12] usb 1-1: new high-speed USB device number 70 using dummy_hcd 06:13:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 06:13:31 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:13:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:13:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1187.192535][ T12] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1187.200888][ T12] usb 1-1: config 0 has no interface number 0 [ 1187.207237][ T12] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1187.218373][ T12] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping 06:13:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1187.300673][ T3369] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1187.323076][ T12] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1187.332317][ T12] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1187.340458][ T12] usb 1-1: Manufacturer: syz [ 1187.364916][ T2346] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1187.375291][ T12] usb 1-1: config 0 descriptor?? [ 1187.428008][ T12] usb 1-1: BUG? WUSB host has no security descriptors [ 1187.436167][ T12] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1187.445209][ T12] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 06:13:31 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c948c86fe45a09022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb) [ 1187.692533][ T3369] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1187.700903][ T3369] usb 5-1: config 0 has no interface number 0 [ 1187.707255][ T3369] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1187.718359][ T3369] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1187.804108][ T3369] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1187.813307][ T3369] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1187.821430][ T3369] usb 5-1: Manufacturer: syz [ 1187.828506][ T3369] usb 5-1: config 0 descriptor?? [ 1187.878949][ T3369] usb 5-1: BUG? WUSB host has no security descriptors [ 1187.888754][ T3369] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1187.899754][ T3369] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1188.072541][ T12] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1188.079934][ T12] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000055f47fa7 [0000000055f47fa7], 8006, f00, 0, 00000000335fd3b5, 5) UNIMPLEMENTED [ 1188.093750][ T12] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000055f47fa7 [0000000055f47fa7], 8006, f00, 0, 00000000335fd3b5, 5) UNIMPLEMENTED [ 1188.107405][ T12] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000055f47fa7 [0000000055f47fa7], 8006, f00, 0, 00000000335fd3b5, 5) UNIMPLEMENTED [ 1188.120612][ T12] usb usb41: unable to get BOS descriptor or descriptor too short [ 1188.130301][ T12] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1188.132324][ T2346] usb 2-1: device descriptor read/64, error -71 [ 1188.139873][ T12] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1188.154412][ T12] usb usb41: Product: Wireless USB HWA host controller [ 1188.161460][ T12] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1188.168314][ T12] usb usb41: SerialNumber: wusb-hwa [ 1188.177388][ T12] hub 41-0:1.0: USB hub found [ 1188.182906][ T12] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1188.282392][ T12] usb 1-1: USB disconnect, device number 70 [ 1188.289663][ T12] hwa-hc 1-1:0.66: remove, state 1 [ 1188.295030][ T12] usb usb41: USB disconnect, device number 1 [ 1188.305848][ T12] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1188.512409][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1188.532537][ T3369] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1188.540035][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000cb5781d5 [00000000cb5781d5], 8006, f00, 0, 00000000e1eddbd4, 5) UNIMPLEMENTED [ 1188.554745][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000cb5781d5 [00000000cb5781d5], 8006, f00, 0, 00000000e1eddbd4, 5) UNIMPLEMENTED [ 1188.562617][ T2346] usb 2-1: too many configurations: 90, using maximum allowed: 8 [ 1188.568278][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000cb5781d5 [00000000cb5781d5], 8006, f00, 0, 00000000e1eddbd4, 5) UNIMPLEMENTED [ 1188.588889][ T3369] usb usb42: unable to get BOS descriptor or descriptor too short [ 1188.599017][ T3369] usb usb42: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1188.608402][ T3369] usb usb42: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1188.616808][ T3369] usb usb42: Product: Wireless USB HWA host controller [ 1188.623874][ T3369] usb usb42: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1188.630536][ T3369] usb usb42: SerialNumber: wusb-hwa [ 1188.639088][ T3369] hub 42-0:1.0: USB hub found [ 1188.644299][ T3369] hub 42-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1188.668296][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1188.676617][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.686946][ T2346] usb 2-1: config 0 has no interface number 0 [ 1188.693370][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1188.704683][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1188.736966][T11355] usb 5-1: USB disconnect, device number 88 [ 1188.744376][T11355] hwa-hc 5-1:0.66: remove, state 1 [ 1188.749636][T11355] usb usb42: USB disconnect, device number 1 [ 1188.759297][T11355] hwa-hc 5-1:0.66: USB bus 42 deregistered 06:13:32 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:13:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 1188.803791][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1188.812654][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.822959][ T2346] usb 2-1: config 0 has no interface number 0 [ 1188.829179][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1188.840525][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.015227][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1189.024272][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.034911][ T2346] usb 2-1: config 0 has no interface number 0 [ 1189.041245][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1189.052529][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.142952][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1189.151299][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.161596][ T2346] usb 2-1: config 0 has no interface number 0 [ 1189.167783][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1189.179217][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.182526][ T3369] usb 1-1: new high-speed USB device number 71 using dummy_hcd 06:13:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:33 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1189.274207][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1189.282754][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.294165][ T2346] usb 2-1: config 0 has no interface number 0 [ 1189.300387][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1189.311857][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 06:13:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1189.404587][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1189.412957][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.423237][ T2346] usb 2-1: config 0 has no interface number 0 [ 1189.429430][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1189.440736][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 06:13:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1189.532767][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1189.541690][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.552108][ T2346] usb 2-1: config 0 has no interface number 0 [ 1189.558375][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1189.569658][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.612620][ T3369] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1189.620912][ T3369] usb 1-1: config 0 has no interface number 0 [ 1189.627181][ T3369] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1189.638318][ T3369] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1189.664156][ T12] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1189.683027][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1189.691347][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.701605][ T2346] usb 2-1: config 0 has no interface number 0 [ 1189.708371][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1189.719654][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.744227][ T3369] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1189.753425][ T3369] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1189.761549][ T3369] usb 1-1: Manufacturer: syz [ 1189.801876][ T3369] usb 1-1: config 0 descriptor?? [ 1189.846184][ T3369] usb 1-1: BUG? WUSB host has no security descriptors [ 1189.852711][ C1] net_ratelimit: 22 callbacks suppressed [ 1189.852731][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1189.864985][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1189.866763][ T3369] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1189.871348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1189.883674][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1189.888324][ T3369] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1189.943100][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1189.952685][ T2346] usb 2-1: New USB device strings: Mfr=200, Product=111, SerialNumber=228 [ 1189.961283][ T2346] usb 2-1: Product: syz [ 1189.965630][ T2346] usb 2-1: Manufacturer: syz [ 1189.970683][ T2346] usb 2-1: SerialNumber: syz [ 1189.976597][ T2346] usb 2-1: config 0 descriptor?? [ 1190.014983][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1190.027500][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1190.042791][ T12] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1190.051083][ T12] usb 5-1: config 0 has no interface number 0 [ 1190.057364][ T12] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1190.068563][ T12] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1190.152948][ T12] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1190.162369][ T12] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1190.170502][ T12] usb 5-1: Manufacturer: syz [ 1190.176698][ T12] usb 5-1: config 0 descriptor?? [ 1190.214586][ T12] usb 5-1: BUG? WUSB host has no security descriptors [ 1190.225120][ T2346] usb 2-1: USB disconnect, device number 114 [ 1190.227033][ T12] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1190.234663][ T2346] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1190.252888][ T12] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1190.502503][ T3369] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1190.509943][ T3369] hwa-hc 1-1:0.66: wusbhc_rh_control (000000001363fb68 [000000001363fb68], 8006, f00, 0, 000000006b29b51a, 5) UNIMPLEMENTED [ 1190.523428][ T3369] hwa-hc 1-1:0.66: wusbhc_rh_control (000000001363fb68 [000000001363fb68], 8006, f00, 0, 000000006b29b51a, 5) UNIMPLEMENTED [ 1190.536793][ T3369] hwa-hc 1-1:0.66: wusbhc_rh_control (000000001363fb68 [000000001363fb68], 8006, f00, 0, 000000006b29b51a, 5) UNIMPLEMENTED [ 1190.550114][ T3369] usb usb41: unable to get BOS descriptor or descriptor too short [ 1190.559755][ T3369] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1190.569186][ T3369] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1190.577657][ T3369] usb usb41: Product: Wireless USB HWA host controller [ 1190.584758][ T3369] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1190.591481][ T3369] usb usb41: SerialNumber: wusb-hwa [ 1190.600152][ T3369] hub 41-0:1.0: USB hub found [ 1190.605360][ T3369] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1190.710363][ T3369] usb 1-1: USB disconnect, device number 71 [ 1190.717628][ T3369] hwa-hc 1-1:0.66: remove, state 1 [ 1190.723106][ T3369] usb usb41: USB disconnect, device number 1 [ 1190.732886][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.739037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.746298][ T3369] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1190.862592][ T12] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfd [ 1190.870074][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (000000008028b6aa [000000008028b6aa], 8006, f00, 0, 000000006b29b51a, 5) UNIMPLEMENTED [ 1190.883832][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (000000008028b6aa [000000008028b6aa], 8006, f00, 0, 000000006b29b51a, 5) UNIMPLEMENTED [ 1190.897159][ T12] hwa-hc 5-1:0.66: wusbhc_rh_control (000000008028b6aa [000000008028b6aa], 8006, f00, 0, 000000006b29b51a, 5) UNIMPLEMENTED [ 1190.910501][ T12] usb usb42: unable to get BOS descriptor or descriptor too short [ 1190.920038][ T12] usb usb42: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1190.929514][ T12] usb usb42: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1190.939449][ T12] usb usb42: Product: Wireless USB HWA host controller [ 1190.946622][ T12] usb usb42: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1190.953631][ T12] usb usb42: SerialNumber: wusb-hwa [ 1190.962599][ T12] hub 42-0:1.0: USB hub found [ 1190.967921][ T12] hub 42-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1191.032693][ T2346] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1191.065748][T11355] usb 5-1: USB disconnect, device number 89 [ 1191.073476][T11355] hwa-hc 5-1:0.66: remove, state 1 [ 1191.078718][T11355] usb usb42: USB disconnect, device number 1 [ 1191.089866][T11355] hwa-hc 5-1:0.66: USB bus 42 deregistered [ 1191.292435][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1191.302824][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.309194][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.315415][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.321418][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.332563][ T2346] usb 2-1: too many configurations: 90, using maximum allowed: 8 [ 1191.412560][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1191.420986][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.431321][ T2346] usb 2-1: config 0 has no interface number 0 [ 1191.437640][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1191.448906][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1191.532578][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1191.540952][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.551230][ T2346] usb 2-1: config 0 has no interface number 0 [ 1191.557482][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1191.568838][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1191.652721][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1191.661054][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.671412][ T2346] usb 2-1: config 0 has no interface number 0 [ 1191.677645][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1191.688931][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 06:13:35 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c94800000001090224000109058977cc660f1f000000000009058703a422020144"], 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa00000, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)=0x101) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:35 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:35 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:13:35 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000002380)}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/40, 0x28}], 0x5, &(0x7f0000000640)=""/76, 0x4c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/50, 0x32}], 0x7, &(0x7f0000000b80)=""/17, 0x11}, 0x4}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/144, 0x90}], 0x3, &(0x7f0000001d80)=""/63, 0x3f}, 0x9}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/129, 0x81}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001f40)=""/255, 0xff}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/170, 0xaa}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/105, 0x69}], 0x5, &(0x7f0000002380)}, 0x20}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000006940)=[{&(0x7f0000002440)=""/34, 0x22}, {0x0}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/88, 0x58}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5}, 0x7fffffff}, {{&(0x7f0000002480)=@pppol2tpin6, 0x80, &(0x7f0000002800)=[{&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/67, 0x43}], 0x4, &(0x7f0000002840)=""/243, 0xf3}, 0x7}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/180, 0xb4}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/216, 0xd8}, {&(0x7f0000003b00)=""/36, 0x24}], 0x4, &(0x7f0000003b80)=""/187, 0xbb}, 0x9bd}, {{&(0x7f0000003c40)=@l2, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003cc0)=""/163, 0xa3}, {&(0x7f0000003d80)=""/86, 0x56}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x3, &(0x7f0000003ec0)=""/229, 0xe5}, 0x3}], 0x9, 0x40000000, 0x0) [ 1191.833530][ T2346] usb 2-1: unable to read config index 3 descriptor/all [ 1191.840658][ T2346] usb 2-1: can't read configurations, error -71 06:13:36 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:13:36 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:36 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:36 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:13:36 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1192.123211][ T12] usb 1-1: new high-speed USB device number 72 using dummy_hcd 06:13:36 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 1192.183097][ T3369] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1192.249240][ T2346] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1192.492384][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1192.532667][ T12] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1192.541036][ T12] usb 1-1: config 0 has no interface number 0 [ 1192.547381][ T12] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1192.558607][ T12] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1192.569634][ T3369] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1192.577929][ T3369] usb 5-1: config 0 has no interface number 0 [ 1192.584311][ T3369] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1192.595573][ T3369] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1192.612632][ T2346] usb 2-1: config 9 has an invalid descriptor of length 204, skipping remainder of the config [ 1192.623226][ T2346] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1192.632536][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1192.641623][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.642682][ T12] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1192.658900][ T12] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1192.667140][ T12] usb 1-1: Manufacturer: syz [ 1192.676013][ T12] usb 1-1: config 0 descriptor?? [ 1192.712887][ T3369] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1192.722019][ T3369] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1192.730586][ T3369] usb 5-1: Manufacturer: syz [ 1192.737938][ T12] usb 1-1: BUG? WUSB host has no security descriptors [ 1192.745826][ T12] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1192.753869][ T3369] usb 5-1: config 0 descriptor?? [ 1192.759681][ T12] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1192.794176][ T3369] usb 5-1: BUG? WUSB host has no security descriptors [ 1192.802193][ T3369] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1192.810428][ T3369] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1192.942708][ T2346] usb 2-1: string descriptor 0 read error: -71 [ 1192.950787][ T2346] usb 2-1: USB disconnect, device number 116 [ 1193.352629][ T12] hwa-hc 1-1:0.66: Cannot set WUSB Cluster ID to 0xfe: -71 [ 1193.360005][ T12] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1193.367512][ T12] hwa-hc 1-1:0.66: startup error -71 [ 1193.373079][ T12] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1193.381689][ T12] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1193.387841][ T12] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1193.398828][ T12] usb 1-1: USB disconnect, device number 72 [ 1193.442769][ T3369] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfd [ 1193.450132][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (000000008e697179 [000000008e697179], 8006, f00, 0, 0000000024b17493, 5) UNIMPLEMENTED [ 1193.463801][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (000000008e697179 [000000008e697179], 8006, f00, 0, 0000000024b17493, 5) UNIMPLEMENTED [ 1193.477728][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (000000008e697179 [000000008e697179], 8006, f00, 0, 0000000024b17493, 5) UNIMPLEMENTED [ 1193.490949][ T3369] usb usb42: unable to get BOS descriptor or descriptor too short [ 1193.501477][ T3369] usb usb42: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1193.511048][ T3369] usb usb42: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1193.519602][ T3369] usb usb42: Product: Wireless USB HWA host controller [ 1193.526665][ T3369] usb usb42: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1193.533551][ T3369] usb usb42: SerialNumber: wusb-hwa [ 1193.542624][ T3369] hub 42-0:1.0: USB hub found [ 1193.547802][ T3369] hub 42-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1193.647027][ T12] usb 5-1: USB disconnect, device number 90 [ 1193.654472][ T12] hwa-hc 5-1:0.66: remove, state 1 [ 1193.659683][ T12] usb usb42: USB disconnect, device number 1 [ 1193.669627][ T12] hwa-hc 5-1:0.66: USB bus 42 deregistered [ 1193.682420][T11523] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1193.922540][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1194.042502][T11523] usb 2-1: config 9 has an invalid descriptor of length 204, skipping remainder of the config [ 1194.053030][T11523] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1194.062080][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1194.071316][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.342619][T11523] usb 2-1: string descriptor 0 read error: -71 [ 1194.350433][T11523] usb 2-1: USB disconnect, device number 117 06:13:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x233, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009cc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0xff, @broadcast}}}], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:38 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:38 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:13:38 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:39 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1194.892797][ C0] net_ratelimit: 18 callbacks suppressed [ 1194.892817][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.904916][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:13:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1195.212936][T11355] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1195.220979][ T2346] usb 1-1: new high-speed USB device number 73 using dummy_hcd 06:13:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1195.263274][ T31] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1195.452809][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.459037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.465606][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.471684][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.522823][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 1195.542755][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.548922][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.592539][T11355] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1195.600816][T11355] usb 5-1: config 0 has no interface number 0 [ 1195.607271][T11355] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1195.618783][T11355] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1195.629830][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1195.638032][ T2346] usb 1-1: config 0 has no interface number 0 [ 1195.644366][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1195.655440][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1195.702637][ T31] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1195.710879][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.721436][ T31] usb 2-1: config 0 has no interface number 0 [ 1195.727732][ T31] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1195.739484][ T31] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1195.757624][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1195.766919][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.775927][T11355] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1195.785180][T11355] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1195.793563][T11355] usb 5-1: Manufacturer: syz [ 1195.799264][T11355] usb 5-1: config 0 descriptor?? [ 1195.805320][ T31] usb 2-1: config 0 descriptor?? [ 1195.832674][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1195.841937][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1195.850388][ T2346] usb 1-1: Manufacturer: syz [ 1195.857601][T11355] usb 5-1: BUG? WUSB host has no security descriptors [ 1195.867903][ T31] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1195.878977][T11355] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1195.887278][ T2346] usb 1-1: config 0 descriptor?? [ 1195.894284][T11355] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1195.903502][ T31] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1195.934202][ T2346] usb 1-1: BUG? WUSB host has no security descriptors [ 1195.941885][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1195.950666][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 42 [ 1196.055675][T11523] usb 2-1: USB disconnect, device number 118 [ 1196.074101][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1196.092791][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.099039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1196.502505][T11355] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1196.509915][T11355] hwa-hc 5-1:0.66: wusbhc_rh_control (000000007f283650 [000000007f283650], 8006, f00, 0, 000000001c318dd6, 5) UNIMPLEMENTED [ 1196.523369][T11355] hwa-hc 5-1:0.66: wusbhc_rh_control (000000007f283650 [000000007f283650], 8006, f00, 0, 000000001c318dd6, 5) UNIMPLEMENTED [ 1196.536712][T11355] hwa-hc 5-1:0.66: wusbhc_rh_control (000000007f283650 [000000007f283650], 8006, f00, 0, 000000001c318dd6, 5) UNIMPLEMENTED [ 1196.549932][T11355] usb usb41: unable to get BOS descriptor or descriptor too short [ 1196.560498][T11355] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1196.569984][T11355] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1196.578393][T11355] usb usb41: Product: Wireless USB HWA host controller [ 1196.585459][T11355] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1196.585554][T11355] usb usb41: SerialNumber: wusb-hwa [ 1196.598812][ T2346] hwa-hc 1-1:0.66: Cannot set WUSB Cluster ID to 0xfd: -71 [ 1196.606263][ T2346] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfd [ 1196.613263][ T2346] hwa-hc 1-1:0.66: startup error -71 [ 1196.618748][ T2346] hwa-hc 1-1:0.66: USB bus 42 deregistered [ 1196.627079][T11355] hub 41-0:1.0: USB hub found [ 1196.632534][T11355] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1196.650367][ T2346] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1196.656712][ T2346] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1196.669451][ T2346] usb 1-1: USB disconnect, device number 73 [ 1196.714016][T11355] usb 5-1: USB disconnect, device number 91 [ 1196.721478][T11355] hwa-hc 5-1:0.66: remove, state 1 [ 1196.726895][T11355] usb usb41: USB disconnect, device number 1 [ 1196.745036][T11355] hwa-hc 5-1:0.66: USB bus 41 deregistered 06:13:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:41 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:13:41 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:13:41 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109182400010000000009041c00029126c90009058977cc660f1f000000a10eebc7478a6e22020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0xfd8b) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x3f, 0x5, "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", 0x22, 0x0, 0xff, 0x81, 0x7f, 0x1c, 0x8, 0x1}, r2}}, 0x128) 06:13:41 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:41 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:13:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:41 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:13:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1197.462834][T11523] usb 1-1: new high-speed USB device number 74 using dummy_hcd 06:13:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1197.552492][ T12] usb 2-1: new high-speed USB device number 119 using dummy_hcd 06:13:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1197.702491][ T3369] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1197.806438][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 1197.854938][T11523] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1197.863296][T11523] usb 1-1: config 0 has no interface number 0 [ 1197.869500][T11523] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1197.881693][T11523] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1197.982990][T11523] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1197.992569][T11523] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1198.002384][T11523] usb 1-1: Manufacturer: syz [ 1198.008244][T11523] usb 1-1: config 0 descriptor?? [ 1198.022610][ T12] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1198.030414][ T12] usb 2-1: can't read configurations, error -61 [ 1198.054225][T11523] usb 1-1: BUG? WUSB host has no security descriptors [ 1198.061986][T11523] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1198.071003][T11523] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1198.092833][ T3369] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1198.101224][ T3369] usb 5-1: config 0 has no interface number 0 [ 1198.107592][ T3369] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1198.118685][ T3369] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1198.192460][ T12] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1198.202689][ T3369] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1198.211828][ T3369] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1198.220162][ T3369] usb 5-1: Manufacturer: syz [ 1198.226138][ T3369] usb 5-1: config 0 descriptor?? [ 1198.264398][ T3369] usb 5-1: BUG? WUSB host has no security descriptors [ 1198.272605][ T3369] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1198.280742][ T3369] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1198.432456][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 1198.602569][ T12] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1198.610296][ T12] usb 2-1: can't read configurations, error -61 [ 1198.618068][ T12] usb usb2-port1: attempt power cycle [ 1198.683078][T11523] hwa-hc 1-1:0.66: Cannot set WUSB Cluster ID to 0xfe: -71 [ 1198.690520][T11523] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1198.697632][T11523] hwa-hc 1-1:0.66: startup error -71 [ 1198.703311][T11523] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1198.711339][T11523] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1198.717824][T11523] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1198.729360][T11523] usb 1-1: USB disconnect, device number 74 [ 1198.902536][ T3369] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfd [ 1198.909988][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000e4b336e9 [00000000e4b336e9], 8006, f00, 0, 00000000791b915b, 5) UNIMPLEMENTED [ 1198.924607][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000e4b336e9 [00000000e4b336e9], 8006, f00, 0, 00000000791b915b, 5) UNIMPLEMENTED [ 1198.938293][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000e4b336e9 [00000000e4b336e9], 8006, f00, 0, 00000000791b915b, 5) UNIMPLEMENTED [ 1198.951733][ T3369] usb usb42: unable to get BOS descriptor or descriptor too short [ 1198.961315][ T3369] usb usb42: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1198.971068][ T3369] usb usb42: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1198.979469][ T3369] usb usb42: Product: Wireless USB HWA host controller [ 1198.986616][ T3369] usb usb42: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1198.993422][ T3369] usb usb42: SerialNumber: wusb-hwa [ 1199.001980][ T3369] hub 42-0:1.0: USB hub found [ 1199.007544][ T3369] hub 42-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1199.105493][ T3369] usb 5-1: USB disconnect, device number 92 [ 1199.112918][ T3369] hwa-hc 5-1:0.66: remove, state 1 [ 1199.118133][ T3369] usb usb42: USB disconnect, device number 1 [ 1199.128034][ T3369] hwa-hc 5-1:0.66: USB bus 42 deregistered 06:13:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1199.372458][ T12] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1199.642545][ T12] usb 2-1: device descriptor read/64, error 18 [ 1200.062364][ T12] usb 2-1: device descriptor read/64, error 18 06:13:44 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b7313a9802020c948000000010902240001000000000904aa00000000000000058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018b, 0x0) accept$alg(r0, 0x0, 0x0) 06:13:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:44 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:44 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1200.252825][ C1] net_ratelimit: 22 callbacks suppressed [ 1200.252846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.264862][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.271067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.277254][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.352380][ T12] usb 2-1: new high-speed USB device number 122 using dummy_hcd 06:13:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1200.652562][T11355] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1200.672611][ T3369] usb 5-1: new high-speed USB device number 93 using dummy_hcd 06:13:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1200.792764][ T12] usb 2-1: device descriptor read/64, error -71 [ 1201.033027][ T3369] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1201.041261][ T3369] usb 5-1: config 0 has no interface number 0 [ 1201.047571][ T3369] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1201.058682][ T3369] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1201.062500][T11355] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1201.078296][T11355] usb 1-1: config 0 has no interface number 0 [ 1201.084699][T11355] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1201.095779][T11355] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1201.132700][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.138821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.162597][ T3369] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1201.171800][ T3369] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1201.180092][ T3369] usb 5-1: Manufacturer: syz [ 1201.186750][ T3369] usb 5-1: config 0 descriptor?? [ 1201.192686][T11355] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1201.201834][T11355] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1201.210056][T11355] usb 1-1: Manufacturer: syz [ 1201.212380][ T12] usb 2-1: device descriptor read/64, error 18 [ 1201.216342][T11355] usb 1-1: config 0 descriptor?? [ 1201.229124][ T3369] usb 5-1: BUG? WUSB host has no security descriptors [ 1201.237010][ T3369] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1201.245853][ T3369] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1201.265468][T11355] usb 1-1: BUG? WUSB host has no security descriptors [ 1201.273461][T11355] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1201.281901][T11355] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 42 [ 1201.332575][ T12] usb usb2-port1: unable to enumerate USB device [ 1201.692726][T11355] hwa-hc 1-1:0.66: error waiting for HC to reset: -71 [ 1201.692777][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.699746][T11355] hwa-hc 1-1:0.66: can't setup: -71 [ 1201.705829][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.710931][T11355] hwa-hc 1-1:0.66: USB bus 42 deregistered [ 1201.717294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.728737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.729562][T11355] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1201.740606][T11355] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1201.753094][T11355] usb 1-1: USB disconnect, device number 75 [ 1201.862566][ T3369] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1201.869935][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (0000000072fea09a [0000000072fea09a], 8006, f00, 0, 00000000e10e3de7, 5) UNIMPLEMENTED [ 1201.883995][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (0000000072fea09a [0000000072fea09a], 8006, f00, 0, 00000000e10e3de7, 5) UNIMPLEMENTED [ 1201.897280][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (0000000072fea09a [0000000072fea09a], 8006, f00, 0, 00000000e10e3de7, 5) UNIMPLEMENTED [ 1201.910445][ T3369] usb usb41: unable to get BOS descriptor or descriptor too short [ 1201.920053][ T3369] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1201.929517][ T3369] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1201.937861][ T3369] usb usb41: Product: Wireless USB HWA host controller [ 1201.944877][ T3369] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1201.951549][ T3369] usb usb41: SerialNumber: wusb-hwa [ 1201.960620][ T3369] hub 41-0:1.0: USB hub found [ 1201.966010][ T3369] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1202.066214][T11355] usb 5-1: USB disconnect, device number 93 [ 1202.074109][T11355] hwa-hc 5-1:0.66: remove, state 1 [ 1202.079481][T11355] usb usb41: USB disconnect, device number 1 [ 1202.089261][T11355] hwa-hc 5-1:0.66: USB bus 41 deregistered 06:13:47 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0xfc65deaa4996ca7e, 0x2619, &(0x7f00000000c0)={{0x12, 0x1, 0x50, 0x5e, 0xf8, 0x31, 0x10, 0x9d7, 0x100, 0x5eda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2607, 0x4, 0x8, 0x9, 0x88, 0x9, [{{0x9, 0x4, 0xb2, 0x20, 0x5, 0xa5, 0xb5, 0x57, 0x20, [], [{{0x9, 0x5, 0x4, 0x1c, 0x329, 0x97, 0x4, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x10d, 0x5, 0x0, 0x81, [@generic={0x8e, 0xd, "eb090a829d96ebe35424980ecb32d8f9c16c2cf620b9f104e0cd0466ef414e27ff9580b6a295b76dc177519c24b8e1b751a098fec96af9b42402376d79c070676d6f8af04036d94bd87445b82caf6d06c4d7127c909cbb7aa6d038f11a18d6d672e977670a0ff002db9a8d341d4010baed8502dcaa62d2d28e81c76d536e549c7878e0ffbb0d586a5c96e130"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x1da, 0x5, 0x1, 0xf8, [@generic={0xde, 0x4, "b0ce7bb9b720dbc3e6ed64df5767670b95d185971924083ba84a7923bc9682ea91c45ff9d1c47b478d33203b26cacb09164ea5954ec56dbb661085c3e3cf4b3ef0cc8d5945159b543684c05301bf459dcfc3826adebf8a09b22d7fd656861dd9ce909d8320a1deef27ac03e1e1fb9cebeed9337d5136cd2bdb972c6bddca8f5cdbf940acb19904c1380c5d480a838d96023313ea13b5bb1205bdfdd0d9ea2c7307c293b55b0ff2c33c88c98a313de3db0a534177c3878affdf0ac9289f9218266687b5a456d8f1fb7d347ca9e68237a6c622ccdda17f222fb311ec06"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x205, 0x81, 0xf5, 0x6, [@generic={0xaa, 0x23, "24e88a98382f84471e42de2e4824bcd25bef60541f79bf98a6ade8f1c0a93eaab60770b0d4e00008309655134e157bd28556a1a79074e641676b589ae12c8118eccdf4eebc93482ec15d4efc65ba8a5c0421f85880249751fdc9a3015e5e4e57f5a007f7c90f53979e09f589beff785c81e567e87739b9fd19d6212792bc776289d2bc1bf178cb0c0efed6612a63b4caaedefd5ac949e4ae131a9f3c03b2dff74686b9827e86c70c"}, @generic={0x12, 0x9, "9dae760a80a8018e6e61c24c9d69d9fc"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x301, 0x3, 0x3, 0x1}}]}}, {{0x9, 0x4, 0x9b, 0xc, 0xc, 0xff, 0xff, 0xff, 0x0, [@generic={0x1002, 0x7, "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"}], [{{0x9, 0x5, 0x1d, 0x0, 0x17b, 0x7f, 0x3, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x85, 0x4, 0x40, 0x7, [@generic={0xc7, 0x22, "dfeb5cfa6788771542cc588559a058168976f0d833c028b06c3c8020e9e657afa5d7c74d52e5c6fa8ecbfbd75acc6f7f72b2c88d4179995fc3664b3ecd654d643e0b823c58c9a2358a7e76c614152665de0a48acbf96a4de766bbc38c50c14385da163392fb69d8501b452f92b920ba2bb9d7a46300d115b693d6299bf116788402b0c0b1c4701281cd14c854c3373545aed02f71d695525283b9dd40dea943c05304e88c62c03796b345a71d7d059eddaf0616e11092b2d7229544039c046a1a18d3c2040"}, @generic={0xd5, 0x22, "b7e0215cca9e0df33aba229e6d84992cf51bacb20948556eb4997f65710ffba76b2fecc5338fa8da9ef183c63e07b485e08dc985bda7949874df090634d4f2f34f850fd2b805afc2f5fad7bc043226275330be76490a8261384fc299b79e600ca689279e9f5727c981870d6baa9d3a0104df228d1170addeaab2a0590ba78740bce5ef7354a41379a5d28b6fa58465b5be224c2a2b992e21d55b976b37c14bbd2112d9e8404c96ac91858014d63ef2bd99c861998f2c5d544c481d1b1723fd35eae3469c5e19b6186801a981b564718510541c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x2f2, 0x1, 0x1f, 0x47, [@generic={0x91, 0x7, "b8b6da8ddadbb97fd3a32366b6bbe99f5767cf978de9f0e1d8a5a7291c2932eb4904d7d94ffc9b16ab13c72fcc88a110d3f91b7ed7ff6f446db0dca8400b48f3ffca15705041c0e9fae581f3545e9a57b51285660ecbabb8af1321b87bd01f770b918615979e96c9f4a98c00f4e342521934459763e041363f45b1620ca7c0e6febdd1f293307a0c47b8ce65266d67"}, @generic={0xbc, 0x23, "5646fd57e50ffd9aef2baffa7feb544a9a5e557c80528f71f195e95f2bcd064724788c5cdae145be65706256a212298c20ba9886eb8065883b406c1f9f65004f4196dec7bd97dcca4f8f5901db54577f37f9197a8932176b33a4ad20245c18e314d72259d8168093e9a25d22dbdf27c7e9867706a00730cfb2019cc3d2218e03f88bcb59ef56da0b15d7a14e8539edb3112b7fadb291be592f633ad1cb03dcc868cf711deb9889ba639272410b24aa04719898ade99ceee2add5"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x2a1, 0xf2, 0x7, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x111, 0x6, 0x8, 0x0, [@generic={0x88, 0x11, "2ba559164eeca25819bcec3beb985caa8eaf511dba5b173625ee20e925448a6db583ea20ef331eb29b177bbc87ff83f4d0c8ab86f806781c47c34592ef6713c00736d35bf1929308a644202fe073437979f413224d6c41fc918872db832c75837955939084b24b7ed48d457d956170f2c5759a58362f16093e2db103f6b2073d7b1331a4921e"}, @generic={0xa9, 0x24, "6bf9344d0f54c85f1b6af35f0126fa7c0f53efa4afe567c1a31658df4d29170098c77bf592dbc68d9d3f3d455777a5f219de798e76300dc571668c0bade4e26791a4b1455a8ef842c86de248a96a0c64e3de0b82779ecf84930e3ffb96e9ca061cfd431089e6239dac216b5a5d3ed4b082ede296adc5c45e858717c5f4cbb94715a03f97414100f27172ffc151a62756475f653e72d7e7559cf9b1703bdb28047f7793acf02802"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x2fe, 0x3f, 0x3, 0xbb, [@generic={0x6c, 0xd, "dcebbd386d5b6e80bf1dd7ab0f11d641bc6f6976a5a96268b7173e01f6331874d56eae8f08a509db935d36abb88f12834c3fa526b4e79e223b1a3e4ac1f1e4eb1e18ee746bcfb458a6327528ce78d7c7519a6650377c3c660d2cd7ba21530b136fb030fb6119247f3e8f"}]}}, {{0x9, 0x5, 0x5, 0xa, 0x222, 0x0, 0x1f, 0x1, [@generic={0x101, 0x23, "e7cee00bff73b133d58e1a2ea912a187301f63777f084346491a9bcc329ca77234b6a722cca2de8a55379417d59a69166dea84dce4c5a92dbc22ace6e4c37fad90c1b74b3ea6e07a33c7d1ad47ecc450662c0f17d75fa1e369c10d75f170a5a82add457ddc6726e9942acd78cbafd2bc5b0e4898e286cead21ddacc61e938fca0ca75eb1e5dc364207f79a423089dcd4ea25fea52d57387fc2c4fafdab34bb98b3417e70b8cae2ca31919d4a221a299060d506282b179c302d60972d33e17da78bcaf8974437d1fbc506ad80c3559bdedfe4e598ec2e2c82c630f1506a15519d6233f2142161fb52c11d2303dd990cb95510464c4b06e353d427aa0df56594"}, @generic={0x9d, 0x2c, "153fad2e35177349fa5183ac0a6fa03ec66e64baee24fb5d25c2a811fc406119d8c0c25406af0a6f2f067defa5cddd32834f332e47f1298c0cc8a52484b44813bcd0bd4e3409acfd7777d75b946b8a7171d1876d56ab0f23d14c57ba3ab6cf2b3042a23a4995af3c89d3c20eb9cca2442f5bcf9a3f0adc150c861b1e9d06e92cc4bd17998c0de0b5ba9ba38a6a327eca0499271d08918e3f87b4fc"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x94, 0xff, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x34c, 0x81, 0x4, 0x20, [@generic={0xc1, 0x1, "31fd79ad368629d9b2e009f8e46e8720219d95198ef8137d832be3db7e1634b0895640f7de02f4155eeb4cbbea9442434b041ba58fc0791fd03a2887893a2db474ee09dc3eb8fc002927031fef91ee8afdcc2da7192440dbf69b3fb7b6c66510b9ef9886b95a7cb330e19cdbbdc1e63c828b92a5816e36f3ba90d548077599f2583e6c198a57e12804e2d7646edc272004731dea97a923e20f2fb437b460e8389938b96c00e21db47aed7c0855406d87147d8c49eb762f82e5f714b0fe7daa"}, @generic={0xd8, 0x0, "e0e60a36f93e6836d60839ce5e868928dad9e23ea90a434f465da04017470e9e54af2a532abba03923082e7eba0f3e81d93742abda92c7d27ff1c39bc4d051b0ba3987e73223fc0bb74d8235c34c7076bb084e237b20b5e82f759004c1bb349ed3f542d1e5a818c0c5097bf56c10a4111681042c3ca8ea357f7592110dbad7c5b556396e4f6bf574425e24763a9d7fb9f6540365fd4433d9938238f7d42a355117c86f8fcb11d4353037d40f3faff00e75b928f58f372b70f6171be77e16cab9fb01c4a42c6b1de696500bf00d90658655665f62e27f"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x36a, 0x20, 0x2, 0x8, [@generic={0x46, 0x3, "574f64a395e1a47d68da7d1877ce6e6ee424ef53461b0f41d9d13948454be38e55edfb8d73549e96f9d83518240501f844cb827a8d6959495270324c2e78aabd2bd3cbdb"}, @generic={0x47, 0x21, "8eccc9c8ae7e8fc8f3dbaca89ae3c99a4ce367dae5ea2b5b5c3db19b01748b94240b91d54aa888833bf9a3287ad11ae64b5f2b4ac6dfff3150281243ebdd292c5eaa677dee"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x15e, 0x0, 0x3f, 0x3, [@generic={0xb2, 0x44, "03152b7a5f5317813553799fff2910dfafe2b07eca65e0e5e421f8253712cbe22204e493bd5aa8e4637db30a31d1417df1a51619a9e5b64365dde898376d675a130d26678c249b70f69130d556144abb31c90085f7a09ce50cb25ee1a646cc99c37ce1d7b6a5387c428c587cce1235564ac3798e312281de849dfb55d01941ed411b9f4f19a39f38828d422f42b1fc72606efa50edddc127783fe6189881508a30d4226ad4d77466ebdee405349fd3c1"}, @generic={0x25, 0xc, "eca1a84371b584361693d9aa7ecfe46a68311662ef962290a9cd7ba48cba1f6f6859c9"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x5a, 0x0, 0xaf, 0x6, [@generic={0x8d, 0x5, "45b3ff99fba859f3ee85ec0b75f240f3d5fbd392201920fc2bbf8944114092e3dc1e5969ffe55577f62eb2fdfcc8211b91545089329c0608dab85089ebc8958057a25b4c8279387b5cb212cd898530caa3d8373bc255d24406d0e0c6658904e4275937b16897b301f33174ac5f41ce5e68a94cf59d3c8888339ae9e154689bb5ada6f934bb97c640627bec"}, @generic={0xe7, 0x1, "dcae060e9ec3d77520874352f129dff001fb7aab086bd08f4bbc2e62f50799ae9f824ca6e3d5d002d3587abae30390b0cd6a771c067af6963ffe28d8d5ad8db2e097f3e96b6176e2e569248ceaf21fecd7d9e9971a25859c4bc98d1c5e4e3cfb0bfebcc8a54aa9a87c0474ef4685e2462ca133308548044113e6b25b0706ffd14823a58d7ea49b77092804181abac4efe11ff14b63e7dc2af1da6d23837ec1054ab714666244b83dc296ae735e824ce412439fc97dfa46dfec018628eacd603ab6d430e663fcac338932183a8946f61d388b52438a26bda5d009d74438e695a5239d914e7c"}]}}]}}, {{0x9, 0x4, 0xf1, 0x51, 0x6, 0x72, 0xf7, 0x21, 0x1, [@usb_cdc={{0x9, 0x24, 0x6, 0x0, 0x0, "9f063b3d"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0xc99f, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x800, 0x5}]}, @generic={0x93, 0x37, "88c72671e9716544bac8e8702d4cd0e68ed005a67c1ee2f0eb55a0a3764b665840161af04cdccb83362b6bf9a4a624976696ec58ed70d9b49b1010590b9d35cd1a174d3271a7d0e37323b4842eaedc1bd835a626190378fcc41fd12e8c75f7971dc9efe1b17ea02c8e0dbe95078b0e2bb8aee6965f50a9018e59a52d67ca69a304ce78734431f54995b0917bf7c8d60535"}], [{{0x9, 0x5, 0xa, 0x0, 0x2c2, 0x4, 0x8, 0x9, [@generic={0xcb, 0x22, "b058a5733fb5e547eae14969281405ee0f2282e7c67203ab17654f9a5df52693859a43a48a79bf8bc7b782b852b1e42713d258237a5a563bc83ddfa2200097978f34561dbb0b01d47330bed7e3ab14611650394b61abec3e5e95d356258e1b3666038043501b0a172e254e2a86b24d75539e88b196021f625561a2f24f06d6298bd292d5ef426ec42d67ea57c0cb48ee6c545fa37ce0e8575a632f0f1fe7e110291c8956f88486010757d6bb3836d6e76def18ca9ac8c4cb741f70f3767c9392159315fa6f3477ecf5"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x1d9, 0x9, 0x5, 0xd6}}, {{0x9, 0x5, 0x8, 0x8, 0x88, 0x5, 0xff, 0x4, [@generic={0x7, 0x3, "cde7e91a4f"}, @generic={0xb2, 0x6, "c542c5d8ad1caada39d72464c19ed059ab8d4edf6c85b2ec9afb44b8bc20278de06de17768e8161dcf23e177e14379b0d1dd4b75f7be785137fea89eb6215ac555c5d6d73729688a82dd0485204a8c59d6d151f7a86b51799d543e9c8555bffdd2bcc7b700b0ae5a482ad5499606e3f03afa00676e12ea302f9104b5175f46921ee9e32a568109584655e4e571c726d157e89527db62b555b9d75845b96e10132a24b4358ae4c2595f154cbe81f313db"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x384, 0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x0, 0x3, 0x346, 0x3f, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x1ae, 0x89, 0x7b, 0x3}}]}}, {{0x9, 0x4, 0xf6, 0xff, 0xa, 0xb5, 0xfe, 0xd5, 0x1f, [], [{{0x9, 0x5, 0x0, 0x10, 0x246, 0x7, 0xc2, 0x80}}, {{0x9, 0x5, 0x3, 0x8, 0xea, 0x1f, 0x5, 0x1f, [@generic={0x71, 0x7, "ad6117dfacfac50f9c6ad7014746e97d81f204a107b8646bb9d74a1a264b4780cb4f17c34b84f0b4bc3950e59c3fbf4ad628368dd13dff7d36bfad8eaf2ba8575f0adbbb8e73698bc7a68491baebe432a722adc462d808036eb48970437de3b14b691f8aebe22263b0bd2df5769e86"}, @generic={0x2c, 0x23, "f0586660b9d2791fc68956d122a666a3d1eccdc8475eead648340b0cf6320723f6096e1d920558aa6d8a"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x193, 0x40, 0x4, 0x4c, [@generic={0x37, 0x22, "6f6e489dcf973a8b73fe08d82c810ef7d24f96154cc96fcbd2afd37700e3f3b8f49b8626120d83e365bbe3d9ea49a293c28de00789"}, @generic={0x83, 0x71, "3e6c8c68a6860553ee1e176acbf462357e52d995afe0b095c36c5e4af01e81717289a149c78bf463b8701f1cc3cff672c2e6a70f5174df2bff084d7fe6f4e45f9ab860303143c75733eb0316b97b3e2891b49dd2086addc673a1730ee76662c8651c09cb058d073e364dbdf46a412fc1f41c9d12868041c26e2832f61ece0f4033"}]}}, {{0x9, 0x5, 0x169994224cc97cbd, 0x20476beccfa12678, 0x3cc, 0x3, 0xec, 0x4, [@generic={0x92, 0xc, "f0afef967136f63e8627b8515d97b5f945af95feffdc498cf8732d8717c5b27b3ec5a9c289033509afe2fcfff6a7c3d90d71426b150872bac07a0a193634c7a136ab4957fec6de2960b6c201df4bbe2b169e985cc9379881a1f7a049015e960f0737eca0bb7823ff376cfbe02bcc7dceec3e3320acf95e3fed8cbc637dbd582bccb9cb8083aa9678655b5e38c122b3b3"}, @generic={0xd, 0xf, "c40c957d70cc9c1ac89f7a"}]}}, {{0x9, 0x5, 0x6, 0x7ad564f80fdd0a7e, 0x75, 0x20, 0xa9, 0x6, [@generic={0x74, 0x5, "99d08a5628aacbcea6241c8e2ca7e866f69c7b94b7a05063e216a616065b845b9e5f65e09b4df10ee85f62a7e77c3d9570164c6dea65bc7c212fde8d180a3011d4c0cf066720a642ed5de541f5cf75b089c373d0b6b8bc0a58ffb9511992fb006d46982e63e78908e83401b4945b69e543ed"}, @generic={0x78, 0x22, "3d3177b67f80f730ba8cbfd3cff862afd9572c10b749fc65a642c25f9ec4504f804564cd2fc2e1ca985c0a05d07f705e22e144b0ff04e46b39509d313b668380c208ee20c6a1293d86b6be1fb4bf832f8075a226ebba8066ec67e696ca4a3198fe24f7d2ef09e7b6e5a075fae1fe3309dfc8e83c7579"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x19d, 0x7, 0x3f, 0x3, [@generic={0xb9, 0x23, "7e3b8844832fd656605684dad46a0c55f7d3e0320500b41f11f4cdce25cfad47cc4364b20e18b364f0ae25b38b5364818e9cab5ad81934b55ecedb785844cbdf9d15a85360d3b4e30799a1d92df97658665db7c2caae01528b6431b378b40379c69586ecc507de5e4ffdb42cfad5f3dc8ec8f61b92d19df682d44e347a3ddf4f8bbeaf19845b2306df43d66ac43a2b50044c62d3cd00327c455b75f29bef3bdbc81f0d423931d92dfa7ae5c7a61a1782a79bf71a90e336"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x381, 0x1, 0x7, 0x7f, [@generic={0xda, 0x3, "d4f518c121f3403e21969c2b65f9cda53005d45996053e681510920e0b9f5649de37d03db6517f15a96fa7c94c63eda66e7d46008aff94da019fa3f27a1e2355a9eba40178b4117b1e093ffec7ecba8d0ec2877e4a6a789c1cd63ba4ce9b0129975a2f1305593f8cf5347efb8c9f4e1229ce220847e077fa84f0430fae8208d0c9750b1007ad1aa5e0541758e7e88d52d71ae414138695d524698545cb3a499c112261c7f384723dc2b02a0e8d045f093a0ce6b7ab65f106e24064fbafb986f388aefb06bd086d2cccb98396d7567560e287693eafa8162a"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3b8, 0x6, 0x7f}}, {{0x9, 0x5, 0x9, 0x15, 0x18f, 0x0, 0x15, 0x40, [@generic={0x8, 0x24, "e35392d563dc"}, @generic={0x77, 0xc, "e28406d93a49609ee277e71b5ae6f17b7340500797e8d5e2263a192dd0f120b84764f8fcbc6832f1183ffc79cf62c3a76cba770e2be14d5d908c64a6d1db509993895672dd1f6ddef139b31b59ff660b26b60e5cff1ee72778c694ad888959346b7fc69d0192b0fd724d5d8c71770ef9ea055ca3d5"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x269, 0x9, 0x38, 0x0, [@generic={0xc6, 0x21, "97828abdc8a194d7575aa1fc041420205c9607dfb3bb12c1ceac9a79335f7047f3c53b27816f734cf91e2cd4da94788dfc5532f210f85061283efdaf8d6df6af26cd1f597a0970efa97d453fb6fad6b7ddb65137d06bf16bdc05eab91d9933d22ab9144f5cdacf530a829123b508b1f712577541e6810c6b416be865a32f3e63002b579eaed7338ca6e8439854a5e9762c0f0a5960e68b71e1d75d2567664674cdcbb8b7dfff5e8120e59202b5d12499fe2df8e1431d1f869d3192f163b184c42e27cf6c"}]}}]}}]}}]}}, &(0x7f00000027c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x5, 0x5, 0xff, 0x8}, 0x9b, &(0x7f0000002700)={0x5, 0xf, 0x9b, 0x1, [@generic={0x96, 0x10, 0xd, "baab2644c557d32487e9c603ad7a8f03bf9303e754851c0b4f8dd33b690ec88bb408a6ff18f3ddcb1cb18863f7dd8aa8c742ff49c7064f5239fefda309bea4f52e413f5c82a4ebaf1b830d02d50ce28cfdff3cd07629e953a4d21e413551a4826a4af7e7489e995f9e9587cd0bce719c23f5c2150a8b433dc1537ac402af71d6697125ce4c3d16d4d820337e6d297c985e1847"}]}, 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3401}}]}) 06:13:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:47 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:47 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1203.873825][ T12] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1203.882447][T11523] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1203.923156][ T3369] usb 2-1: new high-speed USB device number 123 using dummy_hcd 06:13:48 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1204.192853][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1204.292884][ T12] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1204.301168][ T12] usb 1-1: config 0 has no interface number 0 [ 1204.307540][ T12] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1204.319435][ T12] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1204.331407][T11523] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1204.339587][T11523] usb 5-1: config 0 has no interface number 0 [ 1204.345897][T11523] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1204.357069][T11523] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1204.367997][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1204.376176][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.386457][ T3369] usb 2-1: config 0 has no interface number 0 [ 1204.392705][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1204.404795][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1204.417837][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1204.427181][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.436913][ T3369] usb 2-1: config 0 descriptor?? [ 1204.482920][T11523] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1204.492124][T11523] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1204.500530][T11523] usb 5-1: Manufacturer: syz [ 1204.505868][ T12] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1204.515124][ T12] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1204.523284][ T12] usb 1-1: Manufacturer: syz [ 1204.531493][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1204.543268][T11523] usb 5-1: config 0 descriptor?? [ 1204.549178][ T3369] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1204.560310][ T12] usb 1-1: config 0 descriptor?? [ 1204.584388][T11523] usb 5-1: BUG? WUSB host has no security descriptors [ 1204.592117][T11523] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1204.600247][T11523] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1204.610533][ T12] usb 1-1: BUG? WUSB host has no security descriptors [ 1204.618520][ T12] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1204.627185][ T12] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 42 [ 1204.686560][T11355] usb 2-1: USB disconnect, device number 123 [ 1204.704202][T11355] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1205.022805][ T12] hwa-hc 1-1:0.66: error waiting for HC to reset: -71 [ 1205.029701][ T12] hwa-hc 1-1:0.66: can't setup: -71 [ 1205.035326][ T12] hwa-hc 1-1:0.66: USB bus 42 deregistered [ 1205.042619][ T12] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1205.048653][ T12] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1205.062325][ T12] usb 1-1: USB disconnect, device number 76 [ 1205.222673][T11523] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1205.230219][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000005abf1b08 [000000005abf1b08], 8006, f00, 0, 00000000de88bd1f, 5) UNIMPLEMENTED [ 1205.245117][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000005abf1b08 [000000005abf1b08], 8006, f00, 0, 00000000de88bd1f, 5) UNIMPLEMENTED [ 1205.258356][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (000000005abf1b08 [000000005abf1b08], 8006, f00, 0, 00000000de88bd1f, 5) UNIMPLEMENTED [ 1205.273746][T11523] usb usb41: unable to get BOS descriptor or descriptor too short [ 1205.284115][T11523] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1205.293913][ C0] net_ratelimit: 18 callbacks suppressed [ 1205.293925][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.294465][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.312421][T11523] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1205.320822][T11523] usb usb41: Product: Wireless USB HWA host controller [ 1205.327885][T11523] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1205.334616][T11523] usb usb41: SerialNumber: wusb-hwa [ 1205.343348][T11523] hub 41-0:1.0: USB hub found [ 1205.348601][T11523] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1205.426550][T11523] usb 5-1: USB disconnect, device number 94 [ 1205.433980][T11523] hwa-hc 5-1:0.66: remove, state 1 [ 1205.439309][T11523] usb usb41: USB disconnect, device number 1 [ 1205.450217][T11523] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1205.482564][T11355] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1205.722396][T11355] usb 2-1: Using ep0 maxpacket: 8 [ 1205.842619][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1205.850879][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.861226][T11355] usb 2-1: config 0 has no interface number 0 [ 1205.862709][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.867497][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1205.873556][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.884537][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1205.890740][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.903222][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1205.909309][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.918146][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.932875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.939173][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.946785][T11355] usb 2-1: config 0 descriptor?? [ 1205.986068][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1205.999992][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1206.186955][T11523] usb 2-1: USB disconnect, device number 124 [ 1206.204298][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1206.492720][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.498903][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:13:50 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:13:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:50 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:50 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r3, &(0x7f0000002300)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x6}, @timestamp={0x44, 0x4, 0xffff}]}}}], 0x38}}], 0x1, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) syz_usb_connect(0x0, 0x1, &(0x7f0000001180)=ANY=[@ANYPTR=&(0x7f0000003300)=ANY=[@ANYRESHEX, @ANYRES32=r4]], 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r5, &(0x7f00000000c0), 0x40000000000018b, 0x0) sendmsg$rds(r5, &(0x7f0000001740)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f00000011c0)=""/190, 0xbe}, {&(0x7f0000001140)=""/48, 0x30}], 0x5, &(0x7f0000001580)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x6}, &(0x7f0000001300)=0x8, &(0x7f0000001340)=0x500000000, 0x80000000, 0x1, 0x7fffffff, 0x9, 0x1, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x40, 0x7}, &(0x7f0000001380)=0x8001, &(0x7f00000013c0)=0xff, 0x800, 0x5, 0x0, 0x3, 0x95, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x3e0}, &(0x7f0000001400)=0xd778, &(0x7f0000001440)=0x20, 0x2, 0x6, 0x4f0a, 0x7fff, 0x5c, 0xfa}}, @fadd={0x58, 0x114, 0x6, {{0x200}, &(0x7f0000001480)=0x100000001, &(0x7f00000014c0)=0x7fffffff, 0x4, 0x8000, 0x1, 0x2, 0x40, 0x2}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, &(0x7f0000001500)=0xfffffffffffffffd, &(0x7f0000001540)=0x9ca, 0x0, 0x10000, 0xd8d0, 0x59, 0x0, 0x4}}], 0x1b8, 0x8000}, 0x2000ac84) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r7) 06:13:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:50 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:13:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1206.934963][T11355] usb 1-1: new high-speed USB device number 77 using dummy_hcd 06:13:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1206.977442][ T2346] usb 5-1: new high-speed USB device number 95 using dummy_hcd 06:13:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1207.323079][T11355] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1207.331417][T11355] usb 1-1: config 0 has no interface number 0 [ 1207.337800][T11355] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1207.348960][T11355] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1207.372877][ T2346] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1207.381089][ T2346] usb 5-1: config 0 has no interface number 0 [ 1207.387621][ T2346] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1207.399189][ T2346] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1207.442777][T11355] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1207.451876][T11355] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1207.460223][T11355] usb 1-1: Manufacturer: syz [ 1207.466948][T11355] usb 1-1: config 0 descriptor?? [ 1207.502707][ T2346] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1207.511897][ T2346] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1207.520286][ T2346] usb 5-1: Manufacturer: syz [ 1207.527006][T11355] usb 1-1: BUG? WUSB host has no security descriptors [ 1207.534955][ T2346] usb 5-1: config 0 descriptor?? [ 1207.540883][T11355] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1207.549497][T11355] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1207.574379][ T2346] usb 5-1: BUG? WUSB host has no security descriptors [ 1207.582486][ T2346] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1207.590532][ T2346] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1207.942613][T11355] hwa-hc 1-1:0.66: error waiting for HC to reset: -71 [ 1207.949691][T11355] hwa-hc 1-1:0.66: can't setup: -71 [ 1207.955966][T11355] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1207.963418][T11355] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1207.969540][T11355] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1207.980825][T11355] usb 1-1: USB disconnect, device number 77 [ 1208.212651][ T2346] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1208.219925][ T2346] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000001196b4 [00000000001196b4], 8006, f00, 0, 00000000e3f54653, 5) UNIMPLEMENTED [ 1208.233453][ T2346] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000001196b4 [00000000001196b4], 8006, f00, 0, 00000000e3f54653, 5) UNIMPLEMENTED [ 1208.246782][ T2346] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000001196b4 [00000000001196b4], 8006, f00, 0, 00000000e3f54653, 5) UNIMPLEMENTED [ 1208.260168][ T2346] usb usb42: unable to get BOS descriptor or descriptor too short [ 1208.269879][ T2346] usb usb42: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1208.279354][ T2346] usb usb42: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1208.287622][ T2346] usb usb42: Product: Wireless USB HWA host controller [ 1208.298632][ T2346] usb usb42: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1208.305460][ T2346] usb usb42: SerialNumber: wusb-hwa [ 1208.314851][ T2346] hub 42-0:1.0: USB hub found [ 1208.320106][ T2346] hub 42-0:1.0: config failed, hub doesn't have any ports! (err -19) 06:13:52 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1208.415767][ T2346] usb 5-1: USB disconnect, device number 95 [ 1208.423079][ T2346] hwa-hc 5-1:0.66: remove, state 1 [ 1208.428405][ T2346] usb usb42: USB disconnect, device number 1 [ 1208.438281][ T2346] hwa-hc 5-1:0.66: USB bus 42 deregistered [ 1208.752390][T11523] usb 1-1: new high-speed USB device number 78 using dummy_hcd 06:13:52 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:52 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/241, &(0x7f0000000040)=0xf1) 06:13:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1209.132665][T11523] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1209.140909][T11523] usb 1-1: config 0 has no interface number 0 [ 1209.147394][T11523] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1209.158525][T11523] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping 06:13:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1209.242510][ T12] usb 2-1: new high-speed USB device number 125 using dummy_hcd 06:13:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1209.302788][T11523] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1209.312293][T11523] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1209.320430][T11523] usb 1-1: Manufacturer: syz [ 1209.328712][ T3369] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1209.371498][T11523] usb 1-1: config 0 descriptor?? 06:13:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="100000000000ffff000000000000050000000000080000001400020100000000040019000000000000000000000000000000f21080000000000000fb0000000000000000000000006a14ca0049153894c80de631f456827a0f79a820e3724a7f4ab1dcee36017e6ef188e27d288d6313e96bbe67fd93fd94a1482e052479cc60d94cfedddb7e5b87a5f3f5b988587ff6d0b8f5979f924636b9e8dc571710329d908a15d511d6c869327a5ea49e25790f8b8b69a384ce1bccb40ebd268668277b148fdc8c480a927545d49faac857bf1d6a34783f1e11105549503d418eacd7f629e08d517e44ffff664e98e18447f048b18777b43746f73b1fc892faba96943fd47de18bdc10d995375a00000000"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1209.415679][T11523] usb 1-1: BUG? WUSB host has no security descriptors [ 1209.454732][T11523] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1209.502407][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 1209.508350][T11523] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1209.642898][ T12] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1209.651226][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.661539][ T12] usb 2-1: config 0 has no interface number 0 [ 1209.667819][ T12] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1209.679129][ T12] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1209.692202][ T12] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1209.701412][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.725654][ T12] usb 2-1: config 0 descriptor?? [ 1209.776071][ T12] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1209.789727][ T12] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1209.801178][ T3369] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1209.809436][ T3369] usb 5-1: config 0 has no interface number 0 [ 1209.815831][ T3369] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1209.826947][ T3369] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1209.932732][ T3369] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1209.941946][ T3369] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1209.950280][ T3369] usb 5-1: Manufacturer: syz [ 1209.956006][ T3369] usb 5-1: config 0 descriptor?? [ 1209.976601][ T12] usb 2-1: USB disconnect, device number 125 [ 1209.994669][ T12] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1210.006331][ T3369] usb 5-1: BUG? WUSB host has no security descriptors [ 1210.017695][ T3369] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1210.026713][ T3369] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1210.042714][T11523] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1210.051119][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000014ceb26f [0000000014ceb26f], 8006, f00, 0, 000000009cb70a60, 5) UNIMPLEMENTED [ 1210.065999][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000014ceb26f [0000000014ceb26f], 8006, f00, 0, 000000009cb70a60, 5) UNIMPLEMENTED [ 1210.079347][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000014ceb26f [0000000014ceb26f], 8006, f00, 0, 000000009cb70a60, 5) UNIMPLEMENTED [ 1210.094040][T11523] usb usb41: unable to get BOS descriptor or descriptor too short [ 1210.103822][T11523] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1210.113269][T11523] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1210.121555][T11523] usb usb41: Product: Wireless USB HWA host controller [ 1210.128637][T11523] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1210.135469][T11523] usb usb41: SerialNumber: wusb-hwa [ 1210.144923][T11523] hub 41-0:1.0: USB hub found [ 1210.150169][T11523] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1210.246429][ T12] usb 1-1: USB disconnect, device number 78 [ 1210.253795][ T12] hwa-hc 1-1:0.66: remove, state 1 [ 1210.259006][ T12] usb usb41: USB disconnect, device number 1 [ 1210.268561][ T12] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1210.642663][ T3369] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1210.650924][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (000000000b5e9fd6 [000000000b5e9fd6], 8006, f00, 0, 000000005ad4ebbd, 5) UNIMPLEMENTED [ 1210.665316][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (000000000b5e9fd6 [000000000b5e9fd6], 8006, f00, 0, 000000005ad4ebbd, 5) UNIMPLEMENTED [ 1210.672677][ C1] net_ratelimit: 22 callbacks suppressed [ 1210.672696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.679885][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (000000000b5e9fd6 [000000000b5e9fd6], 8006, f00, 0, 000000005ad4ebbd, 5) UNIMPLEMENTED [ 1210.685582][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.691311][ T3369] usb usb42: unable to get BOS descriptor or descriptor too short [ 1210.704497][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.712551][ T3369] usb usb42: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1210.718159][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:13:54 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1210.723700][ T3369] usb usb42: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1210.738702][ T3369] usb usb42: Product: Wireless USB HWA host controller [ 1210.753881][ T3369] usb usb42: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1210.760596][ T3369] usb usb42: SerialNumber: wusb-hwa [ 1210.770761][ T3369] hub 42-0:1.0: USB hub found [ 1210.776692][ T3369] hub 42-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1210.822421][ T2346] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1210.846026][ T3369] usb 5-1: USB disconnect, device number 96 [ 1210.855489][ T3369] hwa-hc 5-1:0.66: remove, state 1 [ 1210.860789][ T3369] usb usb42: USB disconnect, device number 1 [ 1210.870875][ T3369] hwa-hc 5-1:0.66: USB bus 42 deregistered [ 1211.092370][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1211.097756][T11355] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1211.212696][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1211.221055][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.231368][ T2346] usb 2-1: config 0 has no interface number 0 [ 1211.237652][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1211.248940][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.262072][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1211.272078][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.281735][ T2346] usb 2-1: config 0 descriptor?? 06:13:55 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1211.325857][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1211.339510][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 06:13:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="100000000000ffff000000000000050000000000080000001400020100000000040019000000000000000000000000000000f21080000000000000fb0000000000000000000000006a14ca0049153894c80de631f456827a0f79a820e3724a7f4ab1dcee36017e6ef188e27d288d6313e96bbe67fd93fd94a1482e052479cc60d94cfedddb7e5b87a5f3f5b988587ff6d0b8f5979f924636b9e8dc571710329d908a15d511d6c869327a5ea49e25790f8b8b69a384ce1bccb40ebd268668277b148fdc8c480a927545d49faac857bf1d6a34783f1e11105549503d418eacd7f629e08d517e44ffff664e98e18447f048b18777b43746f73b1fc892faba96943fd47de18bdc10d995375a00000000"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1211.526278][ T12] usb 2-1: USB disconnect, device number 126 [ 1211.533030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.533448][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.536016][T11355] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1211.554038][T11355] usb 1-1: config 0 has no interface number 0 [ 1211.555962][ T12] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1211.560267][T11355] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1211.577900][T11355] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1211.674745][T11355] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1211.684068][T11355] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1211.692592][T11355] usb 1-1: Manufacturer: syz [ 1211.713250][T11355] usb 1-1: config 0 descriptor?? [ 1211.716234][ T3369] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1211.754059][T11355] usb 1-1: BUG? WUSB host has no security descriptors [ 1211.761729][T11355] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1211.771007][T11355] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 06:13:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:56 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000000)={0x5, 0x7, @value=0xccf5}) r3 = semget$private(0x0, 0x9, 0x0) semop(r3, &(0x7f0000000440)=[{0x0, 0x8001}], 0x1) semop(r3, &(0x7f0000000000)=[{0x0, 0x38000}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) semtimedop(r3, &(0x7f00000001c0)=[{0x0, 0x5755, 0x1000}, {0x2, 0x2, 0x800}], 0x2, &(0x7f0000000240)={r4, r5+10000000}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)={0xc1, 0x6, "bf8658b2810e1dc021c7db48761f080a26e64da42777775370ab909d11e44108e4899b5deb53cf7fa8cbd01d37c7f6a38fb4cb85c3f6bdffda0a107b43a11bec23abc7d89b8a0415a7664a9d22df01f796ead9f4178617a76ba05e06fbb195a90a2858d6d800aad896f0800a0b92e31e8e4c015416c2ab1125f7bd8b4b21e8d2351daaea212d4abe1723be655762e8c4a23fa67badb8b7c4f6241f11238700ed44b9af434334daf0ea0e70f05c4e5c5387d57e588d481755d4"}, 0x102080) [ 1212.092888][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.099268][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.105933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.112319][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:13:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1212.137556][ T3369] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1212.145998][ T3369] usb 5-1: config 0 has no interface number 0 [ 1212.152309][ T3369] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1212.163412][ T3369] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping 06:13:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1212.303067][ T3369] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1212.312428][ T3369] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1212.320724][ T3369] usb 5-1: Manufacturer: syz [ 1212.352664][ T2346] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1212.385752][ T3369] usb 5-1: config 0 descriptor?? [ 1212.404398][T11355] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1212.418419][T11355] hwa-hc 1-1:0.66: wusbhc_rh_control (000000006c2b1ddb [000000006c2b1ddb], 8006, f00, 0, 00000000d9a9ec90, 5) UNIMPLEMENTED [ 1212.433812][T11355] hwa-hc 1-1:0.66: wusbhc_rh_control (000000006c2b1ddb [000000006c2b1ddb], 8006, f00, 0, 00000000d9a9ec90, 5) UNIMPLEMENTED [ 1212.436994][ T3369] usb 5-1: BUG? WUSB host has no security descriptors [ 1212.447732][T11355] hwa-hc 1-1:0.66: wusbhc_rh_control (000000006c2b1ddb [000000006c2b1ddb], 8006, f00, 0, 00000000d9a9ec90, 5) UNIMPLEMENTED [ 1212.470404][T11355] usb usb41: unable to get BOS descriptor or descriptor too short [ 1212.481869][T11355] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1212.491516][T11355] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1212.499916][T11355] usb usb41: Product: Wireless USB HWA host controller [ 1212.506945][T11355] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1212.512644][ T3369] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1212.513726][T11355] usb usb41: SerialNumber: wusb-hwa [ 1212.534690][T11355] hub 41-0:1.0: USB hub found [ 1212.540393][T11355] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1212.556407][ T3369] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1212.609713][ T12] usb 1-1: USB disconnect, device number 79 [ 1212.617209][ T12] hwa-hc 1-1:0.66: remove, state 1 [ 1212.622975][ T12] usb usb41: USB disconnect, device number 1 [ 1212.637228][ T12] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1212.643928][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1212.762569][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1212.770861][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.781318][ T2346] usb 2-1: config 0 has no interface number 0 [ 1212.787511][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1212.798793][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1212.811937][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1212.822267][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.831662][ T2346] usb 2-1: config 0 descriptor?? [ 1212.876085][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1212.889100][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1213.082544][ T3369] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1213.089892][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000b98bfb94 [00000000b98bfb94], 8006, f00, 0, 000000008b1f009b, 5) UNIMPLEMENTED [ 1213.103342][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000b98bfb94 [00000000b98bfb94], 8006, f00, 0, 000000008b1f009b, 5) UNIMPLEMENTED [ 1213.116638][ T3369] hwa-hc 5-1:0.66: wusbhc_rh_control (00000000b98bfb94 [00000000b98bfb94], 8006, f00, 0, 000000008b1f009b, 5) UNIMPLEMENTED 06:13:57 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1213.129844][ T3369] usb usb42: unable to get BOS descriptor or descriptor too short [ 1213.140589][ T3369] usb usb42: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1213.150105][ T3369] usb usb42: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1213.158482][ T3369] usb usb42: Product: Wireless USB HWA host controller [ 1213.165546][ T3369] usb usb42: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1213.172809][ T3369] usb usb42: SerialNumber: wusb-hwa [ 1213.188245][ T12] usb 2-1: USB disconnect, device number 127 [ 1213.194526][ C0] ldusb 2-1:0.28: usb_submit_urb failed (-19) [ 1213.204409][ T12] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1213.228771][ T3369] hub 42-0:1.0: USB hub found [ 1213.234518][ T3369] hub 42-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1213.285191][T11355] usb 5-1: USB disconnect, device number 97 [ 1213.292613][T11355] hwa-hc 5-1:0.66: remove, state 1 [ 1213.297865][T11355] usb usb42: USB disconnect, device number 1 [ 1213.309933][T11355] hwa-hc 5-1:0.66: USB bus 42 deregistered [ 1213.482359][ T2346] usb 1-1: new high-speed USB device number 80 using dummy_hcd 06:13:57 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:13:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:13:57 executing program 2 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:13:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1213.845559][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1213.853982][ T2346] usb 1-1: config 0 has no interface number 0 [ 1213.857218][ T3245] FAULT_INJECTION: forcing a failure. [ 1213.857218][ T3245] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.860168][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1213.860250][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1213.872947][ T3245] CPU: 0 PID: 3245 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 1213.902223][ T3245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.912315][ T3245] Call Trace: [ 1213.915677][ T3245] dump_stack+0x191/0x1f0 [ 1213.920072][ T3245] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1213.926032][ T3245] should_fail+0xa3f/0xa50 [ 1213.930527][ T3245] __should_failslab+0x264/0x280 [ 1213.935559][ T3245] should_failslab+0x29/0x70 [ 1213.940215][ T3245] kmem_cache_alloc+0xd6/0xd10 [ 1213.945056][ T3245] ? getname_flags+0x12e/0xb00 [ 1213.949906][ T3245] getname_flags+0x12e/0xb00 [ 1213.954557][ T3245] ? __msan_poison_alloca+0x156/0x1b0 [ 1213.959992][ T3245] getname+0x55/0x60 [ 1213.966383][ T3245] do_sys_open+0x53e/0xa30 [ 1213.970851][ T3245] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1213.976822][ T3245] __se_sys_open+0xad/0xc0 [ 1213.981307][ T3245] __x64_sys_open+0x4a/0x70 [ 1213.985873][ T3245] do_syscall_64+0xbc/0xf0 [ 1213.990362][ T3245] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1213.995858][T11355] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1213.996299][ T3245] RIP: 0033:0x413911 [ 1214.007666][ T3245] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1214.013490][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1214.027340][ T3245] RSP: 002b:00007f7e32d9d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1214.027378][ T3245] RAX: ffffffffffffffda RBX: 00007f7e32d9dc90 RCX: 0000000000413911 [ 1214.027399][ T3245] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7e32d9d7d0 [ 1214.027418][ T3245] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000f [ 1214.027440][ T3245] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f7e32d9e6d4 [ 1214.027460][ T3245] R13: 00000000004c8d86 R14: 00000000004dfeb8 R15: 0000000000000006 [ 1214.036817][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 06:13:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1214.053476][ T2346] usb 1-1: Manufacturer: syz 06:13:58 executing program 2 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1214.158417][ T2346] usb 1-1: config 0 descriptor?? [ 1214.207256][ T2346] usb 1-1: BUG? WUSB host has no security descriptors [ 1214.221829][ T3260] FAULT_INJECTION: forcing a failure. [ 1214.221829][ T3260] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.229809][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1214.234667][ T3260] CPU: 0 PID: 3260 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 1214.234688][ T3260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1214.234705][ T3260] Call Trace: [ 1214.234762][ T3260] dump_stack+0x191/0x1f0 [ 1214.234808][ T3260] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1214.234863][ T3260] should_fail+0xa3f/0xa50 [ 1214.255854][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1214.259377][ T3260] __should_failslab+0x264/0x280 [ 1214.269953][ T3260] should_failslab+0x29/0x70 [ 1214.293301][ T3260] kmem_cache_alloc+0xd6/0xd10 [ 1214.302680][ T3260] ? stack_trace_save+0x1b0/0x1b0 [ 1214.304354][T11355] usb 2-1: Using ep0 maxpacket: 8 [ 1214.307758][ T3260] ? __alloc_file+0x90/0x720 [ 1214.307820][ T3260] __alloc_file+0x90/0x720 [ 1214.307874][ T3260] alloc_empty_file+0x1f2/0x4a0 [ 1214.307921][ T3260] path_openat+0xf4/0x6bb0 [ 1214.331899][ T3260] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1214.338084][ T3260] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1214.343764][ T3260] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1214.349695][ T3260] ? should_fail+0x177/0xa50 [ 1214.354308][ T3260] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1214.360224][ T3260] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1214.365886][ T3260] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1214.371812][ T3260] do_filp_open+0x2b8/0x710 [ 1214.376365][ T3260] do_sys_open+0x642/0xa30 [ 1214.380806][ T3260] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1214.386733][ T3260] __se_sys_open+0xad/0xc0 [ 1214.391178][ T3260] __x64_sys_open+0x4a/0x70 [ 1214.395704][ T3260] do_syscall_64+0xbc/0xf0 [ 1214.400151][ T3260] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1214.406058][ T3260] RIP: 0033:0x413911 [ 1214.409975][ T3260] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1214.429619][ T3260] RSP: 002b:00007f7e32d9d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1214.438061][ T3260] RAX: ffffffffffffffda RBX: 00007f7e32d9dc90 RCX: 0000000000413911 [ 1214.446046][ T3260] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7e32d9d7d0 06:13:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1214.454118][ T3260] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000f [ 1214.462138][ T3260] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f7e32d9e6d4 [ 1214.470141][ T3260] R13: 00000000004c8d86 R14: 00000000004dfeb8 R15: 0000000000000006 [ 1214.574519][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1214.583110][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.593351][T11355] usb 2-1: config 0 has no interface number 0 [ 1214.599552][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1214.610884][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.623963][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1214.633190][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.643352][ T12] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1214.655687][T11355] usb 2-1: config 0 descriptor?? [ 1214.695883][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1214.710722][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1214.913528][T11355] usb 2-1: USB disconnect, device number 2 [ 1214.922781][ T2346] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1214.930474][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (000000000290881e [000000000290881e], 8006, f00, 0, 000000004e4d4055, 5) UNIMPLEMENTED [ 1214.944983][T11355] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1214.953492][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (000000000290881e [000000000290881e], 8006, f00, 0, 00000000a9902595, 5) UNIMPLEMENTED [ 1214.968511][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (000000000290881e [000000000290881e], 8006, f00, 0, 000000001ac6a09c, 5) UNIMPLEMENTED [ 1214.982278][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1214.991882][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1215.001305][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1215.009622][ T2346] usb usb41: Product: Wireless USB HWA host controller [ 1215.016830][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1215.023806][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1215.032184][ T2346] hub 41-0:1.0: USB hub found [ 1215.032597][ T12] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1215.037645][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1215.045473][ T12] usb 5-1: config 0 has no interface number 0 06:13:59 executing program 1: utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="12090000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) 06:13:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:13:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1215.059558][ T12] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1215.070779][ T12] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping 06:13:59 executing program 2 (fault-call:4 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1215.134139][ T2346] usb 1-1: USB disconnect, device number 80 [ 1215.141437][ T2346] hwa-hc 1-1:0.66: remove, state 1 [ 1215.147025][ T2346] usb usb41: USB disconnect, device number 1 [ 1215.149326][ T3271] FAULT_INJECTION: forcing a failure. [ 1215.149326][ T3271] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.166521][ T3271] CPU: 0 PID: 3271 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 1215.174534][ T3271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.174551][ T3271] Call Trace: [ 1215.174608][ T3271] dump_stack+0x191/0x1f0 [ 1215.174667][ T3271] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1215.198267][ T3271] should_fail+0xa3f/0xa50 [ 1215.202763][ T3271] __should_failslab+0x264/0x280 [ 1215.207756][ T3271] should_failslab+0x29/0x70 [ 1215.212415][ T3271] kmem_cache_alloc+0xd6/0xd10 [ 1215.217254][ T3271] ? security_file_alloc+0x98/0x520 [ 1215.222533][ T3271] security_file_alloc+0x98/0x520 [ 1215.227638][ T3271] __alloc_file+0x1e8/0x720 [ 1215.232216][ T3271] alloc_empty_file+0x1f2/0x4a0 [ 1215.237123][ T3271] path_openat+0xf4/0x6bb0 [ 1215.241569][ T3271] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1215.247763][ T3271] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1215.253425][ T3271] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1215.259351][ T3271] ? should_fail+0x177/0xa50 [ 1215.263970][ T3271] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1215.269910][ T3271] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1215.275580][ T3271] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1215.281496][ T3271] do_filp_open+0x2b8/0x710 [ 1215.286060][ T3271] do_sys_open+0x642/0xa30 [ 1215.290501][ T3271] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1215.296465][ T3271] __se_sys_open+0xad/0xc0 [ 1215.300933][ T3271] __x64_sys_open+0x4a/0x70 [ 1215.305492][ T3271] do_syscall_64+0xbc/0xf0 [ 1215.309951][ T3271] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1215.315862][ T3271] RIP: 0033:0x413911 [ 1215.319783][ T3271] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1215.339416][ T3271] RSP: 002b:00007f7e32d9d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1215.347850][ T3271] RAX: ffffffffffffffda RBX: 00007f7e32d9dc90 RCX: 0000000000413911 [ 1215.355873][ T3271] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7e32d9d7d0 [ 1215.363895][ T3271] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000f [ 1215.371900][ T3271] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f7e32d9e6d4 [ 1215.379889][ T3271] R13: 00000000004c8d86 R14: 00000000004dfeb8 R15: 0000000000000006 [ 1215.391878][ T2346] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1215.473156][ T12] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1215.482798][ T12] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1215.491039][ T12] usb 5-1: Manufacturer: syz [ 1215.522987][ T12] usb 5-1: config 0 descriptor?? [ 1215.566080][ T12] usb 5-1: BUG? WUSB host has no security descriptors [ 1215.587020][ T12] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1215.596578][ T12] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1215.702683][ C0] net_ratelimit: 18 callbacks suppressed [ 1215.702697][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1215.714745][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:13:59 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1215.982633][ T12] hwa-hc 5-1:0.66: error waiting for HC to reset: -71 [ 1215.989758][ T12] hwa-hc 5-1:0.66: can't setup: -71 [ 1215.995540][ T12] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1216.003139][ T12] hwa-hc 5-1:0.66: Cannot add HCD: -71 [ 1216.009083][ T12] hwa-hc: probe of 5-1:0.66 failed with error -71 [ 1216.020333][ T12] usb 5-1: USB disconnect, device number 98 [ 1216.202411][ T3369] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1216.252843][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.259093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.265536][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.271571][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.332761][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.339475][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:00 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:00 executing program 2 (fault-call:4 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1216.553955][ T3296] FAULT_INJECTION: forcing a failure. [ 1216.553955][ T3296] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.566863][ T3296] CPU: 1 PID: 3296 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 1216.566884][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.566898][ T3296] Call Trace: [ 1216.566952][ T3296] dump_stack+0x191/0x1f0 [ 1216.567011][ T3296] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1216.584927][ T3296] should_fail+0xa3f/0xa50 [ 1216.598468][ T3296] __should_failslab+0x264/0x280 [ 1216.609038][ T3296] should_failslab+0x29/0x70 [ 1216.613701][ T3296] kmem_cache_alloc+0xd6/0xd10 [ 1216.618532][ T3296] ? __d_alloc+0x8e/0xc40 [ 1216.622793][ T3369] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1216.622935][ T3296] __d_alloc+0x8e/0xc40 [ 1216.631092][ T3369] usb 1-1: config 0 has no interface number 0 [ 1216.635169][ T3296] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1216.635217][ T3296] d_alloc_parallel+0x135/0x2220 [ 1216.635270][ T3296] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1216.641392][ T3369] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1216.647233][ T3296] ? __d_lookup+0x828/0x960 [ 1216.647276][ T3296] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1216.647331][ T3296] path_openat+0x2795/0x6bb0 [ 1216.652384][ T3369] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1216.658390][ T3296] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1216.700215][ T3296] do_filp_open+0x2b8/0x710 [ 1216.704782][ T3296] do_sys_open+0x642/0xa30 [ 1216.709223][ T3296] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1216.715153][ T3296] __se_sys_open+0xad/0xc0 [ 1216.719592][ T3296] __x64_sys_open+0x4a/0x70 [ 1216.724115][ T3296] do_syscall_64+0xbc/0xf0 [ 1216.728587][ T3296] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1216.734586][ T3296] RIP: 0033:0x413911 [ 1216.738502][ T3296] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1216.758643][ T3296] RSP: 002b:00007f7e32d9d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1216.767073][ T3296] RAX: ffffffffffffffda RBX: 00007f7e32d9dc90 RCX: 0000000000413911 [ 1216.775060][ T3296] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7e32d9d7d0 [ 1216.783048][ T3296] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000f [ 1216.791029][ T3296] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f7e32d9e6d4 [ 1216.799017][ T3296] R13: 00000000004c8d86 R14: 00000000004dfeb8 R15: 0000000000000006 06:14:00 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000000)={{0x3, 0x2, 0x0, 0x1, 0x8}, 0xffffffff, 0xa7}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1216.852971][ T3369] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1216.862583][ T3369] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1216.870739][ T3369] usb 1-1: Manufacturer: syz 06:14:00 executing program 2 (fault-call:4 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1216.905364][ T3369] usb 1-1: config 0 descriptor?? [ 1216.906747][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.916485][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.945029][ T3369] usb 1-1: BUG? WUSB host has no security descriptors [ 1216.952670][ T12] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1216.961170][ T3369] hwa-hc 1-1:0.66: Wireless USB HWA host controller 06:14:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) [ 1216.996378][ T3369] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 06:14:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1217.144496][T11523] usb 2-1: new high-speed USB device number 3 using dummy_hcd 06:14:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x15, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) write$FUSE_POLL(r1, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x7, {0xfb}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'caif0\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, &(0x7f0000000200)=0x800) ioctl$LOOP_CLR_FD(r5, 0x4c01) r9 = fcntl$dupfd(r2, 0x605, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000180)={0x2, 0x0, 0x5, 0x0, 0x8, 0x3, 0x400, 0x1f, 0x5, 0x8406260, 0x7, 0x8000, 0x101}) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x8001) 06:14:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1217.322752][ T12] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1217.331038][ T12] usb 5-1: config 0 has no interface number 0 [ 1217.337344][ T12] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1217.348474][ T12] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1217.419783][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1217.433584][ T12] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1217.443312][ T12] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1217.451485][ T12] usb 5-1: Manufacturer: syz [ 1217.460538][ T12] usb 5-1: config 0 descriptor?? [ 1217.504908][ T12] usb 5-1: BUG? WUSB host has no security descriptors [ 1217.513535][ T12] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1217.525648][ T12] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1217.552697][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1217.560854][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.571468][T11523] usb 2-1: config 0 has no interface number 0 [ 1217.577985][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1217.589311][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1217.602470][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1217.611551][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.620730][ T3369] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1217.628420][ T3369] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000126fd036 [00000000126fd036], 8006, f00, 0, 000000008739bece, 5) UNIMPLEMENTED [ 1217.641771][ T3369] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000126fd036 [00000000126fd036], 8006, f00, 0, 000000008739bece, 5) UNIMPLEMENTED [ 1217.655128][ T3369] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000126fd036 [00000000126fd036], 8006, f00, 0, 000000008739bece, 5) UNIMPLEMENTED [ 1217.668347][ T3369] usb usb41: unable to get BOS descriptor or descriptor too short [ 1217.678089][ T3369] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1217.687479][ T3369] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1217.695863][ T3369] usb usb41: Product: Wireless USB HWA host controller [ 1217.702941][ T3369] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1217.709683][ T3369] usb usb41: SerialNumber: wusb-hwa [ 1217.716881][T11523] usb 2-1: config 0 descriptor?? [ 1217.725673][ T3369] hub 41-0:1.0: USB hub found [ 1217.730907][ T3369] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1217.767322][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1217.795648][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1217.808055][ T2346] usb 1-1: USB disconnect, device number 81 [ 1217.815065][ T2346] hwa-hc 1-1:0.66: remove, state 1 [ 1217.821362][ T2346] usb usb41: USB disconnect, device number 1 [ 1217.831953][ T2346] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1217.932779][ T12] hwa-hc 5-1:0.66: error waiting for HC to reset: -71 [ 1217.939752][ T12] hwa-hc 5-1:0.66: can't setup: -71 [ 1217.945354][ T12] hwa-hc 5-1:0.66: USB bus 42 deregistered [ 1217.953241][ T12] hwa-hc 5-1:0.66: Cannot add HCD: -71 [ 1217.959359][ T12] hwa-hc: probe of 5-1:0.66 failed with error -71 [ 1217.970556][ T12] usb 5-1: USB disconnect, device number 99 [ 1217.986280][T11523] usb 2-1: USB disconnect, device number 3 [ 1218.005013][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:14:02 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:02 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="100000000000ffff000000000000050000000000080000001400020100000000040019000000000000000000000000000000f21080000000000000fb0000000000000000000000006a14ca0049153894c80de631f456827a0f79a820e3724a7f4ab1dcee36017e6ef188e27d288d6313e96bbe67fd93fd94a1482e052479cc60d94cfedddb7e5b87a5f3f5b988587ff6d0b8f5979f924636b9e8dc571710329d908a15d511d6c869327a5ea49e25790f8b8b69a384ce1bccb40ebd268668277b148fdc8c480a927545d49faac857bf1d6a34783f1e11105549503d418eacd7f629e08d517e44ffff664e98e18447f048b18777b43746f73b1fc892faba96943fd47de18bdc10d995375a00000000"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:02 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018b, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000040)="767960c40a10f04b6981aa538afa5bef523fdae0a44e", 0x16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, &(0x7f0000000200)}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1218.642512][ T2346] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1218.772455][T11523] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1218.832407][ T12] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1219.012548][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1219.012600][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1219.012668][ T2346] usb 1-1: config 0 has no interface number 0 [ 1219.032377][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1219.043904][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1219.132456][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1219.141639][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1219.150011][ T2346] usb 1-1: Manufacturer: syz [ 1219.153075][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1219.157378][ T2346] usb 1-1: config 0 descriptor?? [ 1219.162956][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.163039][T11523] usb 2-1: config 0 has no interface number 0 [ 1219.184398][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1219.195881][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1219.206181][ T2346] usb 1-1: BUG? WUSB host has no security descriptors [ 1219.208933][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1219.217246][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1219.224701][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.243078][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1219.243422][T11523] usb 2-1: config 0 descriptor?? [ 1219.272638][ T12] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1219.280958][ T12] usb 5-1: config 0 has no interface number 0 [ 1219.287459][ T12] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1219.298757][ T12] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1219.312999][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1219.327021][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1219.382668][ T12] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1219.392056][ T12] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1219.400453][ T12] usb 5-1: Manufacturer: syz [ 1219.406259][ T12] usb 5-1: config 0 descriptor?? [ 1219.444059][ T12] usb 5-1: BUG? WUSB host has no security descriptors [ 1219.451871][ T12] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1219.460884][ T12] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 42 [ 1219.501634][T11355] usb 2-1: USB disconnect, device number 4 [ 1219.514136][T11355] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1219.832414][ T2346] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1219.839902][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (000000005e696ab1 [000000005e696ab1], 8006, f00, 0, 000000003077def0, 5) UNIMPLEMENTED [ 1219.853336][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (000000005e696ab1 [000000005e696ab1], 8006, f00, 0, 000000003077def0, 5) UNIMPLEMENTED [ 1219.866734][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (000000005e696ab1 [000000005e696ab1], 8006, f00, 0, 000000003077def0, 5) UNIMPLEMENTED [ 1219.880950][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1219.881523][ T12] hwa-hc 5-1:0.66: error waiting for HC to reset: -71 [ 1219.894735][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1219.895830][ T12] hwa-hc 5-1:0.66: can't setup: -71 [ 1219.905102][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1219.910376][ T12] hwa-hc 5-1:0.66: USB bus 42 deregistered [ 1219.918516][ T2346] usb usb41: Product: Wireless USB HWA host controller 06:14:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, &(0x7f0000000200)}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'yam0\x00'}) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:04 executing program 2: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1219.931225][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1219.938045][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1219.948849][ T2346] hub 41-0:1.0: USB hub found 06:14:04 executing program 1: msgget(0x2, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000140)="11dca50d5e0b00000000709a7d738ab08244f30078d0ab44ff98c74ffda83a7908488127f0983ebea0c698b1128e096b40bbc96457e573de095acdcc1104c4c0881a90710e613a03e9aa7e7a7d747dec41c9b9c76f7482eaa15f3a00000000000000") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00', 0x4}, 0xfffffffffffffd0d) syz_usb_connect(0x6, 0x0, &(0x7f0000000080)=ANY=[], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000001c0)={0x6}) ptrace(0x10, r2) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x1, @remote, 0x66a0}, 0x1c) ptrace$getregset(0x4203, r2, 0x0, &(0x7f0000000280)={0x0}) r4 = getpgid(r2) ptrace$setregs(0xf, r4, 0x1, &(0x7f0000000080)="be53b8fbfcf7a12ce8d63b3f7b3b2ed126ad802ef0d0b8dd7191a1a222aa9428c91839ea205ba49d1fdaab362ad5aa4f15c93484ad4f62017a6459100dd9a2fae0388e53cc99d0fbdf97708c6eff2851d995988d1e0945212718caf48c04bb5243d431477a4910aa5f6d8979ec3ac12ec021389f2527d2") r5 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$BLKRRPART(r5, 0x125f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1220.006533][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1220.031042][ T12] hwa-hc 5-1:0.66: Cannot add HCD: -71 [ 1220.065912][ T12] hwa-hc: probe of 5-1:0.66 failed with error -71 06:14:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x100) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000001c0)=""/68) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180), 0x4) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000000c0)) ptrace(0x10, r5) ptrace$getregset(0x4203, r5, 0x0, &(0x7f0000000280)={0x0}) tkill(r5, 0x3f) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e21, 0x800, @mcast2, 0x7}, {0xa, 0x4e23, 0x3, @ipv4={[], [], @broadcast}, 0xd27}, 0x5, [0x100, 0x4, 0x92, 0x8, 0x9, 0x8, 0x7fff, 0x52da]}, 0x5c) r6 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1220.119121][ T2346] usb 1-1: USB disconnect, device number 82 [ 1220.119741][ T12] usb 5-1: USB disconnect, device number 100 [ 1220.126565][ T2346] hwa-hc 1-1:0.66: remove, state 1 [ 1220.137093][ T2346] usb usb41: USB disconnect, device number 1 [ 1220.227044][ T2346] hwa-hc 1-1:0.66: USB bus 41 deregistered 06:14:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x0, &(0x7f0000000200)}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="100000000000ffff000000000000050000000000080000001400020100000000040019000000000000000000000000000000f21080000000000000fb0000000000000000000000006a14ca0049153894c80de631f456827a0f79a820e3724a7f4ab1dcee36017e6ef188e27d288d6313e96bbe67fd93fd94a1482e052479cc60d94cfedddb7e5b87a5f3f5b988587ff6d0b8f5979f924636b9e8dc571710329d908a15d511d6c869327a5ea49e25790f8b8b69a384ce1bccb40ebd268668277b148fdc8c480a927545d49faac857bf1d6a34783f1e11105549503d418eacd7f629e08d517e44ffff664e98e18447f048b18777b43746f73b1fc892faba96943fd47de18bdc10d995375a00000000"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:04 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x19, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8a"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:04 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 06:14:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) mlockall(0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x84080, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000100)="ed304dc0636d48b5b12985b91c9b49807269f547e41f638bd4ceba4bd9ed413e041d25dc22344843f9407a2927371e7355742f325d1e66e23224a06b9a206dd7beb28c3938be64d9bf78a7be0a8b1308eb34bb2516aafab2ecd87634cd1a4fe3f55821d52306663da29ff29efa6af56f83df0c679b83aaca9e483fc44514fe3cddc2ee2cd95c3ddbe427d61cda5e04555530a07d2379f64ae3deb70c14a8c6b4b4598514974943a47aab27ce4df2e98735bdca6123a651f9f8c0deeedc0479f586801ec514579351ad791d", 0xcb) 06:14:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x19, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8a"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x2, 0x1, 0x2}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x2c00000}}, 0x10) [ 1220.932825][ T2346] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1221.052518][ C1] net_ratelimit: 22 callbacks suppressed [ 1221.052531][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.064731][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:05 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126048703a42202014400"/58], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x19, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8a"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000080)={0x1, 0x0, [0x3f, 0x10000, 0x3f, 0x0, 0x0, 0xfff, 0xfb6, 0xfffffffa]}) openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r8, 0x8818564c, &(0x7f00000002c0)) r9 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r9, 0x40045567, 0x3) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r11 = fcntl$dupfd(r10, 0x80c, r0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r11, 0xc0104811, &(0x7f0000000140)={0x4, 0x5, 0x1c32, 0xca5}) [ 1221.132824][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.138996][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1221.360361][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1221.368763][ T2346] usb 1-1: config 0 has no interface number 0 [ 1221.375161][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1221.386344][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1221.482706][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1221.493037][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1221.501255][ T2346] usb 1-1: Manufacturer: syz [ 1221.507310][ T2346] usb 1-1: config 0 descriptor?? [ 1221.522824][ T12] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1221.564610][ T2346] usb 1-1: BUG? WUSB host has no security descriptors [ 1221.572454][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1221.581015][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1221.772748][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 1221.912553][ T12] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1221.920823][ T12] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1221.929640][ T12] usb 2-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 1221.940296][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.940550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1221.952372][ T12] usb 2-1: config 0 has no interface number 0 [ 1221.958678][ T12] usb 2-1: config 0 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1221.972061][ T12] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1221.981197][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.990673][ T12] usb 2-1: config 0 descriptor?? [ 1222.202613][ T2346] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1222.210013][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000009a58a77 [0000000009a58a77], 8006, f00, 0, 00000000fb294d98, 5) UNIMPLEMENTED [ 1222.224324][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000009a58a77 [0000000009a58a77], 8006, f00, 0, 00000000fb294d98, 5) UNIMPLEMENTED [ 1222.237727][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000009a58a77 [0000000009a58a77], 8006, f00, 0, 00000000fb294d98, 5) UNIMPLEMENTED [ 1222.251078][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1222.264408][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1222.273758][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1222.282729][ T2346] usb usb41: Product: Wireless USB HWA host controller [ 1222.283184][ T12] usb 2-1: string descriptor 0 read error: -71 [ 1222.289716][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1222.298715][ T12] ldusb 2-1:0.28: Interrupt in endpoint not found [ 1222.302709][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1222.317345][ T12] usb 2-1: USB disconnect, device number 5 [ 1222.325976][ T2346] hub 41-0:1.0: USB hub found [ 1222.333727][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1222.406891][T11523] usb 1-1: USB disconnect, device number 83 [ 1222.414346][T11523] hwa-hc 1-1:0.66: remove, state 1 [ 1222.419723][T11523] usb usb41: USB disconnect, device number 1 [ 1222.430315][T11523] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1222.492952][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.499093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.505523][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.511675][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:14:06 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) splice(r3, &(0x7f0000000040), r0, &(0x7f0000000080), 0x4, 0x14) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x501, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000180)=0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:06 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 06:14:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x26, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3e"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1223.032780][ T2346] usb 2-1: new high-speed USB device number 6 using dummy_hcd 06:14:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) sync() ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x5) 06:14:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x26, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3e"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1223.254191][T11355] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1223.274140][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1223.392706][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1223.401082][ T2346] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1223.411268][ T2346] usb 2-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 1223.421670][ T2346] usb 2-1: config 0 has no interface number 0 [ 1223.427970][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1223.441099][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1223.450307][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.467796][ T2346] usb 2-1: config 0 descriptor?? [ 1223.633098][T11355] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1223.641306][T11355] usb 1-1: config 0 has no interface number 0 [ 1223.647558][T11355] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1223.658715][T11355] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1223.742677][ T2346] usb 2-1: string descriptor 0 read error: -71 [ 1223.751718][ T2346] ldusb 2-1:0.28: Interrupt in endpoint not found [ 1223.763624][ T2346] usb 2-1: USB disconnect, device number 6 [ 1223.770974][T11355] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1223.780285][T11355] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1223.788529][T11355] usb 1-1: Manufacturer: syz [ 1223.795998][T11355] usb 1-1: config 0 descriptor?? [ 1223.834653][T11355] usb 1-1: BUG? WUSB host has no security descriptors [ 1223.843210][T11355] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1223.851142][T11355] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 06:14:08 executing program 1: syz_usb_connect(0x3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c948000000000009041c01029126da0009058977cc668f1f00000007fa2bb2d30f518b0201441f5a"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0xc0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000280)={0x1f, {0x5, 0x7, 0x1, 0x6, 0x0, 0x8}, 0x5}, 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x1f) sendmmsg(r2, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xb) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @local}, &(0x7f00000001c0)=0xc) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x341482, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000000c0)=""/197) 06:14:08 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 06:14:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCEXCL(r3, 0x540c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) write(r4, &(0x7f0000000100)="ac97dfa8c1e1418c8a79f7f6b42a99b3b9c420d48c41ce076df6da6f0d97506af0795173ae8807568a5bd23cc922f66ec9108a039acb12c584d92f253c3a31bd1032e449f827aa6bb6b6ae50e90095067e68c41e3fe607fa39e55fde4c43403b5011b53cc687", 0x66) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x8}}, 0x35b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_DISCONNECT(r8, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r5}}, 0xc) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x26, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3e"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1224.482578][T11355] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1224.490019][T11355] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000028d142b4 [0000000028d142b4], 8006, f00, 0, 00000000164ff24b, 5) UNIMPLEMENTED [ 1224.504833][T11355] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000028d142b4 [0000000028d142b4], 8006, f00, 0, 00000000164ff24b, 5) UNIMPLEMENTED [ 1224.518272][T11355] hwa-hc 1-1:0.66: wusbhc_rh_control (0000000028d142b4 [0000000028d142b4], 8006, f00, 0, 00000000164ff24b, 5) UNIMPLEMENTED [ 1224.532822][T11355] usb usb41: unable to get BOS descriptor or descriptor too short [ 1224.542599][T11355] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1224.551898][T11355] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1224.560268][T11355] usb usb41: Product: Wireless USB HWA host controller [ 1224.567425][T11355] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1224.574236][T11355] usb usb41: SerialNumber: wusb-hwa [ 1224.583648][T11355] hub 41-0:1.0: USB hub found [ 1224.588849][T11355] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1224.686881][T11355] usb 1-1: USB disconnect, device number 84 [ 1224.694652][T11355] hwa-hc 1-1:0.66: remove, state 1 [ 1224.701036][T11355] usb usb41: USB disconnect, device number 1 [ 1224.710628][T11355] hwa-hc 1-1:0.66: USB bus 41 deregistered 06:14:09 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="100000000000ffff000000000000050000000000080000001400020100000000040019000000000000000000000000000000f21080000000000000fb0000000000000000000000006a14ca0049153894c80de631f456827a0f79a820e3724a7f4ab1dcee36017e6ef188e27d288d6313e96bbe67fd93fd94a1482e052479cc60d94cfedddb7e5b87a5f3f5b988587ff6d0b8f5979f924636b9e8dc571710329d908a15d511d6c869327a5ea49e25790f8b8b69a384ce1bccb40ebd268668277b148fdc8c480a927545d49faac857bf1d6a34783f1e11105549503d418eacd7f629e08d517e44ffff664e98e18447f048b18777b43746f73b1fc892faba96943fd47de18bdc10d995375a00000000"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x2c, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffd4, 0xa, 0xffdc}, [@map_val={0x18, 0x0, 0x2, 0x0, r3}]}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_sctp(0xa, 0x9f5c6787c52b88a, 0x84) 06:14:09 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000100)="bd7f64a135a5dd3b3246c2a1b40f1e2bc65d457781e9695491845ff6895070eec7b2f0310c5a682468e8e024aa33268f327ae6b8ce1ebb3e218aa3d290e25e3d5763c07e944de2e2d57be4ec40e220acfc83a61cdb4a0fcf29ae71235d2309b597d5e042c140696bee9c98235480f24c159417da42212106498e4bf1c62c5ecb91d03f76b3813b663a0076864e56d99bac747db268d6a970aade15fa16b1c2966bd0defc", 0xa4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x2c, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:09 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40100, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)={0x23, 0x6f, 0x2, {0x2, [{0x10, 0x3, 0x8}, {0x8, 0x0, 0x8}]}}, 0x23) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x2c, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1225.522750][T11523] usb 1-1: new high-speed USB device number 85 using dummy_hcd 06:14:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x400000008000, 0x100) write$P9_RLERRORu(r3, &(0x7f0000000200)={0xf, 0x7, 0x6, {{0x2, '%)'}, 0x800}}, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r7, &(0x7f00000000c0), 0x40000000000018b, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@local, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0xd}, 0xaef, 0x8, 0x0, 0x400, 0x4, 0x800003, r11}) r13 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x9, 0x70, 0xff, 0x0, 0x4a, 0x4, 0x0, 0x9, 0x100000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe1f, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x10, 0x7, 0x10000, 0x4, 0x80, 0x6, 0x2}, r4, 0x8, r13, 0x0) 06:14:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x2f, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c010"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1225.843851][T11355] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1225.882666][T11523] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1225.890885][T11523] usb 1-1: config 0 has no interface number 0 [ 1225.897165][T11523] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1225.908276][T11523] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1226.003600][T11523] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1226.013062][T11523] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1226.021327][T11523] usb 1-1: Manufacturer: syz [ 1226.027734][T11523] usb 1-1: config 0 descriptor?? [ 1226.082423][T11355] usb 2-1: Using ep0 maxpacket: 8 [ 1226.086021][T11523] usb 1-1: BUG? WUSB host has no security descriptors [ 1226.094853][ C0] net_ratelimit: 18 callbacks suppressed [ 1226.094866][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.095309][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.114164][T11523] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1226.122173][T11523] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1226.202474][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1226.210747][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.222378][T11355] usb 2-1: config 0 has no interface number 0 [ 1226.228558][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1226.239912][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.253173][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1226.262482][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.271693][T11355] usb 2-1: config 0 descriptor?? [ 1226.315820][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1226.330333][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1226.515952][T11355] usb 2-1: USB disconnect, device number 7 [ 1226.533912][T11355] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1226.652791][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.658955][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.665375][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.671828][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.732539][T11523] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1226.739917][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000d5423e03 [00000000d5423e03], 8006, f00, 0, 00000000ebc5bf71, 5) UNIMPLEMENTED [ 1226.742649][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.753371][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000d5423e03 [00000000d5423e03], 8006, f00, 0, 00000000ebc5bf71, 5) UNIMPLEMENTED [ 1226.759003][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.772023][T11523] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000d5423e03 [00000000d5423e03], 8006, f00, 0, 00000000ebc5bf71, 5) UNIMPLEMENTED [ 1226.790536][T11523] usb usb41: unable to get BOS descriptor or descriptor too short [ 1226.800330][T11523] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1226.809751][T11523] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1226.818457][T11523] usb usb41: Product: Wireless USB HWA host controller [ 1226.825522][T11523] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1226.832315][T11523] usb usb41: SerialNumber: wusb-hwa [ 1226.840726][T11523] hub 41-0:1.0: USB hub found [ 1226.846130][T11523] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1226.935637][T11523] usb 1-1: USB disconnect, device number 85 [ 1226.943150][T11523] hwa-hc 1-1:0.66: remove, state 1 [ 1226.948557][T11523] usb usb41: USB disconnect, device number 1 [ 1226.958554][T11523] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1227.292746][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.299023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.305203][T11355] usb 2-1: new high-speed USB device number 8 using dummy_hcd 06:14:11 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:11 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x8001}}, 0x9ee, 0x7, 0x0, 0x1000, 0x32}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x8, 0x80000000, 0x1c8}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x2f, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c010"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1227.577168][T11355] usb 2-1: Using ep0 maxpacket: 8 06:14:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x2f, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c010"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1227.702853][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1227.711144][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.721546][T11355] usb 2-1: config 0 has no interface number 0 [ 1227.728152][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1227.739467][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1227.752519][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1227.761662][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.783298][T11355] usb 2-1: config 0 descriptor?? [ 1227.826048][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1227.842654][ T2346] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1227.878890][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1228.025043][T11523] usb 2-1: USB disconnect, device number 8 [ 1228.044260][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1228.212530][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1228.220813][ T2346] usb 1-1: config 0 has no interface number 0 [ 1228.227127][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1228.238268][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1228.322563][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1228.332343][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1228.340604][ T2346] usb 1-1: Manufacturer: syz [ 1228.346716][ T2346] usb 1-1: config 0 descriptor?? [ 1228.384150][ T2346] usb 1-1: BUG? WUSB host has no security descriptors [ 1228.391933][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1228.401081][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 06:14:12 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00020900c90809058977cc660f1f000000000009058703a4d6020144057de8ba2db813be5482f1cbfcd01e4c7e33948e03214ede5aa0abc0603639198b0ccf"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x200) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x0) 06:14:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x31, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a9"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:12 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1228.872483][T11355] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1229.032625][ T2346] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1229.040119][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000887cb317 [00000000887cb317], 8006, f00, 0, 00000000b5d38656, 5) UNIMPLEMENTED [ 1229.053655][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000887cb317 [00000000887cb317], 8006, f00, 0, 00000000b5d38656, 5) UNIMPLEMENTED [ 1229.066996][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000887cb317 [00000000887cb317], 8006, f00, 0, 00000000b5d38656, 5) UNIMPLEMENTED [ 1229.080351][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1229.090114][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1229.099638][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1229.107972][ T2346] usb usb41: Product: Wireless USB HWA host controller [ 1229.115061][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1229.121755][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1229.128252][T11355] usb 2-1: Using ep0 maxpacket: 8 [ 1229.136160][ T2346] hub 41-0:1.0: USB hub found [ 1229.141457][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1229.241273][ T2346] usb 1-1: USB disconnect, device number 86 [ 1229.248718][ T2346] hwa-hc 1-1:0.66: remove, state 1 [ 1229.254142][ T2346] usb usb41: USB disconnect, device number 1 [ 1229.261597][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1229.270081][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.280567][T11355] usb 2-1: config 0 has no interface number 0 [ 1229.286830][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1229.298051][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1229.311081][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1229.320226][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.330634][ T2346] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1229.337915][T11355] usb 2-1: config 0 descriptor?? [ 1229.632924][T11355] usb 2-1: string descriptor 0 read error: -71 [ 1229.639848][T11355] hub 2-1:0.28: ignoring external hub [ 1229.647822][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1229.666444][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1229.677489][T11355] usb 2-1: USB disconnect, device number 9 [ 1229.686851][T11355] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:14:13 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x100000a912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r7, 0x5606, 0xb1f3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e22, @remote}}) ioctl$FICLONE(r3, 0x40049409, r4) 06:14:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x31, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a9"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:13 executing program 4: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x31, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a9"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000140)=""/126) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='syzkaller0\x00') syz_open_dev$char_usb(0xc, 0xb4, 0x3) [ 1230.074466][ T2346] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1230.382715][T11523] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1230.462527][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1230.470771][ T2346] usb 1-1: config 0 has no interface number 0 [ 1230.477082][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1230.488332][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1230.572675][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1230.581871][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1230.590142][ T2346] usb 1-1: Manufacturer: syz [ 1230.595929][ T2346] usb 1-1: config 0 descriptor?? [ 1230.633938][ T2346] usb 1-1: BUG? WUSB host has no security descriptors [ 1230.641631][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1230.642342][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1230.652438][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1230.782572][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1230.790981][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.801406][T11523] usb 2-1: config 0 has no interface number 0 [ 1230.807840][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1230.820884][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1230.834069][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1230.843258][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.853577][T11523] usb 2-1: config 0 descriptor?? [ 1231.152651][T11523] usb 2-1: string descriptor 0 read error: -71 [ 1231.159569][T11523] hub 2-1:0.28: ignoring external hub [ 1231.167506][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1231.181262][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1231.192316][T11523] usb 2-1: USB disconnect, device number 10 [ 1231.200617][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1231.282651][ T2346] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1231.289938][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000e18500ec [00000000e18500ec], 8006, f00, 0, 0000000031408631, 5) UNIMPLEMENTED [ 1231.303460][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000e18500ec [00000000e18500ec], 8006, f00, 0, 0000000031408631, 5) UNIMPLEMENTED [ 1231.316689][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000e18500ec [00000000e18500ec], 8006, f00, 0, 0000000031408631, 5) UNIMPLEMENTED [ 1231.329877][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1231.339386][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1231.348803][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1231.357131][ T2346] usb usb41: Product: Wireless USB HWA host controller [ 1231.364172][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1231.370862][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1231.380768][ T2346] hub 41-0:1.0: USB hub found [ 1231.385967][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1231.462712][ C1] net_ratelimit: 22 callbacks suppressed [ 1231.462733][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.474640][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1231.485616][ T2346] usb 1-1: USB disconnect, device number 87 [ 1231.492943][ T2346] hwa-hc 1-1:0.66: remove, state 1 [ 1231.498231][ T2346] usb usb41: USB disconnect, device number 1 [ 1231.508212][ T2346] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1231.532758][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.538820][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:15 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) 06:14:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:15 executing program 4: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0x7530}, {0x0, 0x2710}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:16 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xfffff989}, &(0x7f0000000140)=0x8) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x9, r7, 0x1, 0x0, 0x6, @broadcast}, 0x7) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r8, 0x1) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000200)={r10}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000180)={r10, 0x3, 0x3, [0x401, 0x7, 0x0]}, &(0x7f00000001c0)=0xe) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r13, 0x4068aea3, &(0x7f00000001c0)={0x79}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r14, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_GET_MSRS(r14, 0xc008ae88, &(0x7f0000000240)={0x3, 0x0, [{}, {}, {}]}) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000002c0)={r5, 0x2, 0x201e, 0x2, 0x485, 0x1, 0x2, 0x200, {r11, @in={{0x2, 0x4e21, @broadcast}}, 0x1, 0x3, 0x2, 0x9, 0x1}}, &(0x7f0000000200)=0xb0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x7530}, 0xa, 0x8}, {{0x77359400}, 0x4, 0x2, 0x42}, {{0x0, 0x2710}, 0x17, 0x5a3, 0x1f}, {{0x0, 0x2710}, 0x4, 0x0, 0x1}], 0x60) 06:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1231.952490][T11523] usb 2-1: new high-speed USB device number 11 using dummy_hcd 06:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:16 executing program 4: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1232.192737][T11523] usb 2-1: Using ep0 maxpacket: 8 06:14:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004800)=ANY=[@ANYBLOB="c10100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x8c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1232.314516][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1232.323034][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.333995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.334440][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.346835][T11523] usb 2-1: config 0 has no interface number 0 [ 1232.352738][ T2346] usb 1-1: new high-speed USB device number 88 using dummy_hcd 06:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1232.353067][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1232.371911][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1232.385798][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1232.395001][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.497385][T11523] usb 2-1: config 0 descriptor?? [ 1232.545934][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1232.564902][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1232.747260][T11523] usb 2-1: USB disconnect, device number 11 [ 1232.755651][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1232.763268][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1232.771461][ T2346] usb 1-1: config 0 has no interface number 0 [ 1232.777994][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1232.789120][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1232.872608][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1232.881999][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1232.890307][ T2346] usb 1-1: Manufacturer: syz [ 1232.897877][ T2346] usb 1-1: config 0 descriptor?? [ 1232.902709][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.909001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.915220][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.921299][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.943956][ T2346] usb 1-1: BUG? WUSB host has no security descriptors [ 1232.951860][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1232.960809][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1233.532354][T11355] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1233.582583][ T2346] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1233.590263][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000efe688ee [00000000efe688ee], 8006, f00, 0, 00000000a75bbbe2, 5) UNIMPLEMENTED [ 1233.603706][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000efe688ee [00000000efe688ee], 8006, f00, 0, 00000000a75bbbe2, 5) UNIMPLEMENTED [ 1233.618157][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000efe688ee [00000000efe688ee], 8006, f00, 0, 00000000a75bbbe2, 5) UNIMPLEMENTED [ 1233.631336][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1233.641062][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1233.650444][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1233.658734][ T2346] usb usb41: Product: Wireless USB HWA host controller [ 1233.665765][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1233.672548][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1233.681090][ T2346] hub 41-0:1.0: USB hub found [ 1233.686457][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1233.785564][ T2346] usb 1-1: USB disconnect, device number 88 [ 1233.793271][ T2346] hwa-hc 1-1:0.66: remove, state 1 [ 1233.798660][ T2346] usb usb41: USB disconnect, device number 1 [ 1233.806690][T11355] usb 2-1: Using ep0 maxpacket: 8 [ 1233.813433][ T2346] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1233.922596][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1233.930883][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.941168][T11355] usb 2-1: config 0 has no interface number 0 [ 1233.947381][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1233.958676][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.971776][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1233.980974][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.990401][T11355] usb 2-1: config 0 descriptor?? [ 1234.035900][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1234.059271][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1234.234100][ T2346] usb 2-1: USB disconnect, device number 12 [ 1234.242058][ T2346] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:14:18 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x10000) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:18 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:18 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000002000e4ff070012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) 06:14:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r2, &(0x7f00000000c0), 0x40000000000018b, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x80, 0xd6, 0x0, 0x40, 0x7f, 0x6, 0xb6, 0x77, 0x0, 0x40, 0x1}, 0xb) r4 = fcntl$dupfd(r1, 0x0, r0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000100)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x9}}, 0xfffffffffffffe29) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1235.006772][ T2346] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1235.043154][T11523] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1235.282486][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1235.402660][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1235.411032][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.421481][T11523] usb 2-1: config 0 has no interface number 0 [ 1235.422661][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1235.427720][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1235.435838][ T2346] usb 1-1: config 0 has no interface number 0 [ 1235.446991][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1235.453157][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1235.466092][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1235.477148][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1235.486140][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.508236][T11523] usb 2-1: config 0 descriptor?? [ 1235.556376][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1235.570298][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1235.613804][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1235.622994][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1235.631099][ T2346] usb 1-1: Manufacturer: syz [ 1235.637470][ T2346] usb 1-1: config 0 descriptor?? [ 1235.694871][ T2346] usb 1-1: BUG? WUSB host has no security descriptors [ 1235.702676][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1235.710519][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1235.756915][T11355] usb 2-1: USB disconnect, device number 13 [ 1235.774539][T11355] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1236.332684][ T2346] hwa-hc 1-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1236.340285][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000efe688ee [00000000efe688ee], 8006, f00, 0, 0000000058a54938, 5) UNIMPLEMENTED [ 1236.353878][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000efe688ee [00000000efe688ee], 8006, f00, 0, 0000000058a54938, 5) UNIMPLEMENTED [ 1236.367368][ T2346] hwa-hc 1-1:0.66: wusbhc_rh_control (00000000efe688ee [00000000efe688ee], 8006, f00, 0, 0000000058a54938, 5) UNIMPLEMENTED [ 1236.380608][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1236.390382][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1236.399871][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1236.408200][ T2346] usb usb41: Product: Wireless USB HWA host controller [ 1236.415277][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1236.421944][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1236.430434][ T2346] hub 41-0:1.0: USB hub found [ 1236.435584][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1236.502623][ C0] net_ratelimit: 18 callbacks suppressed [ 1236.502636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1236.514808][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1236.535683][ T2346] usb 1-1: USB disconnect, device number 89 [ 1236.542751][T11523] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1236.543595][ T2346] hwa-hc 1-1:0.66: remove, state 1 [ 1236.555561][ T2346] usb usb41: USB disconnect, device number 1 [ 1236.566011][ T2346] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1236.792383][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1236.922681][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1236.930921][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.941209][T11523] usb 2-1: config 0 has no interface number 0 [ 1236.947457][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1236.958739][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1236.971799][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1236.981041][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.990296][T11523] usb 2-1: config 0 descriptor?? [ 1237.035891][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1237.052909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.059292][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.065942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.072378][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.080142][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1237.132824][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.138895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.235024][ T2346] usb 2-1: USB disconnect, device number 14 [ 1237.238987][ T3676] ldusb 2-1:0.28: Couldn't submit interrupt_in_urb -19 [ 1237.248825][ T2346] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1237.692502][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.698539][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:21 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x20000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@mcast2, 0x40, r1}) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x60, 0x2, 0x4, "31733ee0e722db184db66ee101e9aa37", "10de611a0a35a18371438e51311ec8a6b607d5f78950d9e05fba0677ff55a54d7ab6f01d320513624bfd0268fe98a8f4585f367599ddc800835cd48f3b9f55b8bb507223ed34fcc028cb86"}, 0x60, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2, 0x0) ioctl$int_out(r5, 0x5460, &(0x7f0000000100)) r6 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:21 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:21 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) timerfd_gettime(r2, &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x980, 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1238.054534][T11523] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1238.114052][ T2346] usb 2-1: new high-speed USB device number 15 using dummy_hcd 06:14:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1238.352447][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1238.432568][T11523] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1238.440834][T11523] usb 1-1: config 0 has no interface number 0 [ 1238.447103][T11523] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1238.458233][T11523] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1238.492539][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1238.500768][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.512108][ T2346] usb 2-1: config 0 has no interface number 0 [ 1238.518406][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1238.529670][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1238.542561][T11523] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1238.542613][T11523] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1238.542667][T11523] usb 1-1: Manufacturer: syz [ 1238.551755][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1238.551827][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.564050][T11523] usb 1-1: config 0 descriptor?? [ 1238.590248][ T2346] usb 2-1: config 0 descriptor?? [ 1238.624135][T11523] usb 1-1: BUG? WUSB host has no security descriptors [ 1238.631742][T11523] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1238.640026][T11523] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1238.646851][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1238.666198][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1238.853787][ T2346] usb 2-1: USB disconnect, device number 15 [ 1238.864300][ T2346] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1239.052924][T11523] hwa-hc 1-1:0.66: error waiting for HC to reset: -71 [ 1239.059935][T11523] hwa-hc 1-1:0.66: can't setup: -71 [ 1239.065462][T11523] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1239.072942][T11523] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1239.079140][T11523] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1239.090300][T11523] usb 1-1: USB disconnect, device number 90 [ 1239.632406][T11523] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1239.872387][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1239.992465][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1240.000657][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.010969][T11523] usb 2-1: config 0 has no interface number 0 [ 1240.017192][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1240.028461][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1240.041619][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1240.050873][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.060062][T11523] usb 2-1: config 0 descriptor?? [ 1240.116088][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1240.129798][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1240.316093][T11523] usb 2-1: USB disconnect, device number 16 [ 1240.334700][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:14:24 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b980811747fbeac480000000109022400010000000009041c00029126c90009058990cc660f3f000000000009020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:24 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:24 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x0, @loopback, 0x1}, {0xa, 0x4e23, 0x6, @mcast2, 0x4}, 0x5, [0x400, 0x5, 0x1, 0xd1d, 0x9, 0x80, 0x3, 0x6]}, 0x5c) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000400)={0xb0, "a8d1cfaf92eb1c6749b92585bb75cb25cdd9d51c53d3c6593a6f7899241878fa", 0x2}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r4, &(0x7f00000000c0), 0x40000000000018b, 0x0) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r6, &(0x7f00000000c0), 0x40000000000018b, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r8, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x4) getsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000100)={0xa, 0x4e24, 0xfffffad4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="dfd29739366f1756f5bfadb47ee75340cdbd206f6575bd3ee139dbae504fd7aaa559088a4011921980a398f395efff65beb12f99f40f7f9918742a8cf7a83c1f0a9e1b3b306664d9f000c3b00601137514b641a0227224703d96364486176ca4518e24f2fbd20569b3ddd99ed2", 0x6d}, {&(0x7f00000001c0)="6f2591ac96abe81a4decd37adf090ae36998d8016ddaa99f54af2a04f2cb57cb9d06198efc2b75f15f67b7b41b52a2264faa1272357b4d7e558b681b93a738bc9fb3d046", 0x44}], 0x2, &(0x7f0000000400), 0xfffffffffffffc89}, 0x4000) 06:14:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1241.152712][T11523] usb 1-1: new high-speed USB device number 91 using dummy_hcd 06:14:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1241.213834][ T2346] usb 2-1: new high-speed USB device number 17 using dummy_hcd 06:14:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1241.463311][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1241.513008][T11523] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1241.521291][T11523] usb 1-1: config 0 has no interface number 0 [ 1241.527577][T11523] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1241.538697][T11523] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1241.592685][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1241.600883][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.611295][ T2346] usb 2-1: config 0 has no interface number 0 [ 1241.617771][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 64 [ 1241.624266][T11523] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1241.628888][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.638021][T11523] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1241.650945][ T2346] usb 2-1: New USB device found, idVendor=7411, idProduct=be7f, bcdDevice=48.ac [ 1241.651017][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.659130][T11523] usb 1-1: Manufacturer: syz [ 1241.671995][ T2346] usb 2-1: config 0 descriptor?? [ 1241.686402][T11523] usb 1-1: config 0 descriptor?? [ 1241.733617][T11523] usb 1-1: BUG? WUSB host has no security descriptors [ 1241.741529][T11523] hwa-hc 1-1:0.66: Wireless USB HWA host controller [ 1241.751873][T11523] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1241.852651][ C1] net_ratelimit: 22 callbacks suppressed [ 1241.852664][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.864566][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1241.927559][ T12] usb 2-1: USB disconnect, device number 17 [ 1241.942688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.948857][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1242.142851][T11523] hwa-hc 1-1:0.66: error waiting for HC to reset: -71 [ 1242.150115][T11523] hwa-hc 1-1:0.66: can't setup: -71 [ 1242.155529][T11523] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1242.163214][T11523] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1242.169142][T11523] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1242.180379][T11523] usb 1-1: USB disconnect, device number 91 [ 1242.712790][T11523] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1242.732726][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1242.738791][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1242.962413][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1243.082633][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1243.091266][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.101709][T11523] usb 2-1: config 0 has no interface number 0 [ 1243.107961][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 64 [ 1243.119102][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.132306][T11523] usb 2-1: New USB device found, idVendor=7411, idProduct=be7f, bcdDevice=48.ac [ 1243.141406][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.150863][T11523] usb 2-1: config 0 descriptor?? [ 1243.292637][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.298934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.305389][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.311446][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.395261][ T2346] usb 2-1: USB disconnect, device number 18 06:14:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:27 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:27 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:28 executing program 0: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:28 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:14:28 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) recvmmsg(r3, &(0x7f0000007e00)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000300)=""/64, 0x40}], 0x2, &(0x7f0000000380)=""/127, 0x7f}}, {{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/23, 0x17}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/225, 0xe1}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/189, 0xbd}], 0x8, &(0x7f0000001940)=""/164, 0xa4}, 0x5}, {{&(0x7f0000001a00)=@x25={0x9, @remote}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001a80)=""/232, 0xe8}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/155, 0x9b}], 0x4, &(0x7f0000002d40)=""/180, 0xb4}, 0xffffffbe}, {{&(0x7f0000002e00)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002e80)=""/111, 0x6f}, {&(0x7f0000002f00)=""/233, 0xe9}, {&(0x7f0000003000)=""/97, 0x61}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/241, 0xf1}], 0x5, &(0x7f0000004200)=""/207, 0xcf}, 0xa1}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004300)}, {&(0x7f0000004340)=""/55, 0x37}, {&(0x7f0000004380)=""/81, 0x51}], 0x3}, 0x8}, {{&(0x7f0000004440)=@caif=@util, 0x80, &(0x7f0000005640)=[{&(0x7f00000044c0)=""/251, 0xfb}, {&(0x7f00000045c0)=""/80, 0x50}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x3, &(0x7f0000005680)=""/130, 0x82}, 0x4}, {{&(0x7f0000005740)=@nfc, 0x80, &(0x7f0000005900)=[{&(0x7f00000057c0)=""/110, 0x6e}, {&(0x7f0000005840)=""/59, 0x3b}, {&(0x7f0000005880)=""/80, 0x50}], 0x3, &(0x7f0000005940)=""/54, 0x36}, 0x7f}, {{&(0x7f0000005980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/188, 0xbc}], 0x2, &(0x7f0000006b00)}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000006b40)=""/4096, 0x1000}], 0x1, &(0x7f0000007b80)=""/101, 0x65}, 0xffffffff}, {{&(0x7f0000007c00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000007c80)=""/60, 0x3c}], 0x1, &(0x7f0000007d00)=""/219, 0xdb}, 0x8}], 0xa, 0x10000, 0x0) sendmmsg(r1, &(0x7f00000000c0), 0x40000000000018b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, r5, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x4, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60840002}, 0xc, &(0x7f0000000180)={&(0x7f0000008080)={0x5e, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x66e}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0xffffffffffffff6c, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001090}, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x2, 0xff, [{0x8, 0x0, 0xfffffffffffff781}, {0x2, 0x0, 0x3}]}) [ 1244.282414][ T2346] usb 1-1: new high-speed USB device number 92 using dummy_hcd 06:14:28 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:14:28 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r2, &(0x7f00000000c0), 0x40000000000018b, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140), &(0x7f0000000100)=0x2) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01006504", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYBLOB="080007200000ff00080003800000100dff7f17577370b97d431589722959c876399abace43c7dcbcfd22f27ac416ffac3d5ee14155840ef76de81bff9d74ea6c798fb7c9649bbe1157cc762aa99e76d34465a1786ec38903f514443cf5a9c80926741db29b936a227d71f70e6af1586c723e24c310abd90117dd9b56814902ea95643d844a52352f26d0346ea9996f1519b51824ad11da30a033632720ea72d3c3fd4f84f327d6cfa4d509822b4b4368"], &(0x7f0000000080)=0x16) r7 = fcntl$dupfd(r1, 0x0, r0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r16, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) r21 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r21, &(0x7f0000000080)={0x11, 0x0, r22, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r21, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r21, &(0x7f00000000c0), 0x40000000000018b, 0x0) getpeername$packet(r21, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000940)=0x14) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)={0x32c, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x238, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r3}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x9, 0x2, 0x3f, 0x8}, {0x7, 0x7, 0x6, 0x8}, {0x823, 0x5, 0x2, 0x8}, {0x2, 0xfc, 0x5, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r23}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x40000014}, 0x24000001) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1244.584025][T11523] usb 2-1: new high-speed USB device number 19 using dummy_hcd 06:14:28 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1244.712593][ T2346] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1244.720888][ T2346] usb 1-1: config 0 has no interface number 0 [ 1244.727207][ T2346] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1244.738652][ T2346] usb 1-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1244.823597][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1244.896764][ T2346] usb 1-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1244.906010][ T2346] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1244.914289][ T2346] usb 1-1: Manufacturer: syz [ 1244.953218][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1244.961543][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.971828][T11523] usb 2-1: config 0 has no interface number 0 [ 1244.978124][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1244.986094][ T2346] usb 1-1: config 0 descriptor?? [ 1244.989443][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1245.007479][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1245.016719][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.036745][ T2346] usb 1-1: BUG? WUSB host has no security descriptors 06:14:29 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1245.049661][ T2346] hwa-hc 1-1:0.66: Wireless USB HWA host controller 06:14:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x100000a912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r7, 0x5606, 0xb1f3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e22, @remote}}) ioctl$FICLONE(r3, 0x40049409, r4) [ 1245.098645][ T2346] hwa-hc 1-1:0.66: new USB bus registered, assigned bus number 41 [ 1245.214216][T11523] usb 2-1: config 0 descriptor?? [ 1245.256152][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1245.307789][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1245.328632][ T3851] IPVS: Error connecting to the multicast addr [ 1245.542757][ T2346] hwa-hc 1-1:0.66: error waiting for HC to reset: -71 [ 1245.549709][ T2346] hwa-hc 1-1:0.66: can't setup: -71 [ 1245.555289][ T2346] hwa-hc 1-1:0.66: USB bus 41 deregistered [ 1245.562839][ T2346] hwa-hc 1-1:0.66: Cannot add HCD: -71 [ 1245.568840][ T2346] hwa-hc: probe of 1-1:0.66 failed with error -71 [ 1245.579811][ T2346] usb 1-1: USB disconnect, device number 92 06:14:30 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 06:14:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x800, 0x0, [], {0x0, @bt={0xf65, 0x7, 0xcdfa0ef7fea91b80, 0x1, 0x7, 0x9, 0x3, 0x1, 0x8000, 0x69, 0x7, 0x2, 0x9, 0x7fffffff}}}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$cdc_ncm(0x4, 0x85, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x8, 0xa0, 0x70, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x21, {{0x8, 0x24, 0x6, 0x0, 0x1, "4140d6"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0x100, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x48}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x8054186f1cb680a4}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x29, 0x20, 0xff, 0x40}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x80}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x7, "", {{{0x9, 0x5, 0x82, 0x2, 0x188, 0x0, 0x81, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x104, 0x1, 0x1f, 0x7}}}}}}}]}}, &(0x7f0000000680)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0a061001010000005b00"], @ANYBLOB="15010000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"], @ANYBLOB="0500000004000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="04036008"], @ANYBLOB="c5000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="c5034aa75c5dfaa9d81c6735f7def51d8e64d2fd53f1e7e1fd2d1f27902568516c9bcc2b1064ab78fabb39c918d89cf2761d3df9dd8206f5b8a41cc33cf5ce5c085603b2709c34807dfdb58048164246563826d6ea1214ba22115103642fc6e5bdcdf6916a7d50efddd314420c1a8a00a796068366af70d69ea3a5624995626355434c42598dc206659deafd5ac765279ae9c654e2689641918aa747de116c0b4fd40dfddde6707c8568078315f71ac4fcfef24bdce3985c2ec1961fefa3bb0a8f4dbd2902"], @ANYBLOB="04000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="04032c02"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="04034308"], @ANYBLOB='%\x00\x00\x00', @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB="2503c181f235c67ab3eda7c586bce1ad0ae7990d3fe1f8ad8d53a3cc864bb3dc4ea1af35b2"]]) syz_usb_ep_write(r3, 0xb, 0x3, &(0x7f0000000700)="2e76f3") ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000100)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:30 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1246.342416][T11523] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1246.582393][T11523] usb 3-1: Using ep0 maxpacket: 8 [ 1246.782782][T11523] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1246.794406][T11523] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 392 [ 1246.804509][T11523] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 260 [ 1246.892617][ C0] net_ratelimit: 18 callbacks suppressed [ 1246.892629][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1246.904797][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.982820][T11523] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.991933][T11523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.000118][T11523] usb 3-1: Product: Ȭ [ 1247.004738][T11523] usb 3-1: Manufacturer: Ꝋ嵜ꧺ᳘㕧᷵撎﷒ⷽ✟▐全魬⯌搐碫믺줹ᵶ綠苝꒸쌜峎嘈눃鱰耴ﵽ肵ᙈ䙂㡖혦ዪ먔ᄢ͑⽤춽釶絪폝䈔ᨌŠ隧茆꽦홰ꎞ报镉换䍕䉌赙ۂ鵥﷪읚❥哆棢䆖誑䞧ᇞ୬푏ﴍ籰梅茇쐚ﻼ䯲岘섮ᾖꏯ઻䶏⦽ [ 1247.034863][T11523] usb 3-1: SerialNumber: ࡃ 06:14:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x10001, 0x7, 0x39, 0x7, 0x9, 0x2, 0x1, 0x4, 0x10b, 0x4447567c, 0xfffff800, 0xffff}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c948000000010902240001000000000b041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) [ 1247.392750][T11523] cdc_ncm 3-1:1.0: bind() failure [ 1247.400251][ T2346] usb 2-1: USB disconnect, device number 19 [ 1247.408641][ T2346] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:14:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x100000a912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r7, 0x5606, 0xb1f3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e22, @remote}}) ioctl$FICLONE(r3, 0x40049409, r4) 06:14:31 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:31 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:31 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 1247.434421][T11523] cdc_ncm 3-1:1.1: bind() failure [ 1247.452798][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.459073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.465669][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.471924][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.518105][ T3873] IPVS: Error connecting to the multicast addr [ 1247.518342][T11523] usb 3-1: USB disconnect, device number 98 [ 1247.532939][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.539369][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x100000a912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r7, 0x5606, 0xb1f3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e22, @remote}}) ioctl$FICLONE(r3, 0x40049409, r4) 06:14:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:31 executing program 3: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1247.702699][ T3889] IPVS: Error connecting to the multicast addr 06:14:31 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:31 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1247.982649][ T2346] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1248.092433][ T12] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1248.102737][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1248.108872][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1248.162462][T11523] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1248.232317][ T2346] usb 2-1: Using ep0 maxpacket: 8 06:14:32 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:32 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 1248.357914][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1248.366159][ T2346] usb 2-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1248.376584][ T2346] usb 2-1: config 0 has no interface number 0 [ 1248.382839][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1248.395987][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1248.405186][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.416666][ T2346] usb 2-1: config 0 descriptor?? [ 1248.455881][ T2346] ldusb 2-1:0.28: Interrupt in endpoint not found [ 1248.475341][ T12] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 1248.483719][ T12] usb 4-1: config 0 has no interface number 0 [ 1248.489915][ T12] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1248.501402][ T12] usb 4-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1248.592796][ T12] usb 4-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1248.602060][ T12] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1248.610366][ T12] usb 4-1: Manufacturer: syz [ 1248.616171][ T12] usb 4-1: config 0 descriptor?? [ 1248.654868][ T12] usb 4-1: BUG? WUSB host has no security descriptors [ 1248.663385][ T12] hwa-hc 4-1:0.66: Wireless USB HWA host controller [ 1248.664688][ T2346] usb 2-1: USB disconnect, device number 20 [ 1248.675813][ T12] hwa-hc 4-1:0.66: new USB bus registered, assigned bus number 41 [ 1249.302631][ T12] hwa-hc 4-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1249.310202][ T12] hwa-hc 4-1:0.66: wusbhc_rh_control (0000000057ab929e [0000000057ab929e], 8006, f00, 0, 00000000afdb1ab7, 5) UNIMPLEMENTED [ 1249.323804][ T12] hwa-hc 4-1:0.66: wusbhc_rh_control (0000000057ab929e [0000000057ab929e], 8006, f00, 0, 00000000afdb1ab7, 5) UNIMPLEMENTED [ 1249.336987][ T12] hwa-hc 4-1:0.66: wusbhc_rh_control (0000000057ab929e [0000000057ab929e], 8006, f00, 0, 00000000afdb1ab7, 5) UNIMPLEMENTED [ 1249.350457][ T12] usb usb41: unable to get BOS descriptor or descriptor too short [ 1249.360135][ T12] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1249.369501][ T12] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1249.377817][ T12] usb usb41: Product: Wireless USB HWA host controller [ 1249.384888][ T12] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1249.391588][ T12] usb usb41: SerialNumber: wusb-hwa [ 1249.400554][ T12] hub 41-0:1.0: USB hub found [ 1249.405940][ T12] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1249.464075][ T3369] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1249.515217][ T12] usb 4-1: USB disconnect, device number 31 [ 1249.522063][ T12] hwa-hc 4-1:0.66: remove, state 1 [ 1249.527461][ T12] usb usb41: USB disconnect, device number 1 [ 1249.538932][ T12] hwa-hc 4-1:0.66: USB bus 41 deregistered [ 1249.732492][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1249.852814][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1249.861084][ T3369] usb 2-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1249.871691][ T3369] usb 2-1: config 0 has no interface number 0 [ 1249.877959][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1249.891216][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1249.900402][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.909981][ T3369] usb 2-1: config 0 descriptor?? [ 1249.955561][ T3369] ldusb 2-1:0.28: Interrupt in endpoint not found [ 1250.154417][ T3369] usb 2-1: USB disconnect, device number 21 06:14:34 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSKBLED(r5, 0x4b65, 0x93000000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:34 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000040)=0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x424d) 06:14:34 executing program 3: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0xffff, &(0x7f0000000100)=0x2) 06:14:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x34, 0x1, 0x2, "c1f85355d732feea449107654c5538c0", "cb40755bbb00323d3b94799b017b8203864b2e2d70ef62073225ba6e09a36d"}, 0x34, 0x3) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x0, 0x1b0, 0x0, 0x0, 0x1b0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, &(0x7f0000000080), {[{{@ipv6={@loopback, @mcast2, [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {0xff}, 0x3b, 0x3, 0x4, 0x90}, 0x0, 0x180, 0x1b0, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x87, 0x81, 0x4, 0x9f, 0x20, @mcast2, @dev={0xfe, 0x80, [], 0x17}, @mcast1, [0xff, 0xffffff00], [0xff000000, 0x7f000080, 0xffffff00], [0x952cc96e915f31e1, 0x4fa076b7a353cc86, 0x0, 0xff000000], 0x10, 0x1200}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x80000001, 0x200}}}, {{@ipv6={@loopback, @remote, [0xff, 0xff000000, 0xf0106d9ed5ec14d0, 0xff], [0xffffff00, 0xff000000, 0x0, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {}, 0x88, 0x81, 0xe86e3576aea46337, 0x2c80e1a4a40fdad2}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x57e, 0x3, 0xfffffffe, 'netbios-ns\x00', 0x3ff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCGETX(r6, 0x5432, &(0x7f0000000100)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1250.893839][ T3369] usb 4-1: new high-speed USB device number 32 using dummy_hcd 06:14:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x637a0889be41f848) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r5, &(0x7f00000000c0), 0x40000000000018b, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={&(0x7f0000000080), 0xc, &(0x7f00000012c0)={&(0x7f0000000240)=@deltfilter={0x3c, 0x2d, 0x220, 0x70bd25, 0x25dfdbfd, {0x0, r9, {0x2, 0xf}, {0x10, 0xffff}, {0x1, 0x1fff6}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x8, 0x5, {0x3f, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x1000) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r3, r4, 0x4, 0x1000, &(0x7f00000002c0)="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", 0x0, 0x40, 0x1, 0x800, 0x7, 0x0, 0xd1bd, 'syz1\x00'}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:35 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:35 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xcee2f7a75566aab4, 0x82012, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0xfffffe15, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x9}}, 0xffffffa8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000100)={0x5, 0x4, 0x2c, 0x10001, [], [], [], 0x80, 0x36f, 0x5, 0x3, "0d439e409c00"}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x3) socket$inet6_sctp(0xa, 0xc0ed968bbc86e77, 0x84) [ 1251.264071][ T3369] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 1251.272635][ T3369] usb 4-1: config 0 has no interface number 0 [ 1251.278831][ T3369] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1251.289961][ T3369] usb 4-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping 06:14:35 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) prctl$PR_GET_KEEPCAPS(0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1251.413068][ T3369] usb 4-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1251.422301][ T3369] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1251.430511][ T3369] usb 4-1: Manufacturer: syz [ 1251.454264][ T3369] usb 4-1: config 0 descriptor?? [ 1251.495066][ T3369] usb 4-1: BUG? WUSB host has no security descriptors [ 1251.503759][ T3369] hwa-hc 4-1:0.66: Wireless USB HWA host controller [ 1251.513241][ T3369] hwa-hc 4-1:0.66: new USB bus registered, assigned bus number 41 [ 1251.702392][ T2346] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1251.913005][ T3369] hwa-hc 4-1:0.66: error waiting for HC to reset: -71 [ 1251.920013][ T3369] hwa-hc 4-1:0.66: can't setup: -71 [ 1251.925477][ T3369] hwa-hc 4-1:0.66: USB bus 41 deregistered [ 1251.938550][ T3369] hwa-hc 4-1:0.66: Cannot add HCD: -71 [ 1251.945193][ T3369] hwa-hc: probe of 4-1:0.66 failed with error -71 [ 1251.962406][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1251.968240][ T3369] usb 4-1: USB disconnect, device number 32 [ 1252.082590][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1252.090933][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.101254][ T2346] usb 2-1: config 0 has no interface number 0 [ 1252.107445][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1252.118718][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1252.131739][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1252.140958][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.150479][ T2346] usb 2-1: config 0 descriptor?? [ 1252.196075][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1252.212901][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1252.252587][ C1] net_ratelimit: 22 callbacks suppressed [ 1252.252607][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1252.264676][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1252.332618][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1252.338704][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:36 executing program 3: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:36 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:36 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1252.397096][ T3369] usb 2-1: USB disconnect, device number 22 [ 1252.416033][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:14:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000000c0)) ptrace(0x10, r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100001f1eabfd1b982fec0c2a2b5500", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={r7}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r7, 0x7fff}, 0x8) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r8, &(0x7f00000000c0), 0x40000000000018b, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r10, 0x1) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000200)={r12}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000180)={r12, 0x5, 0x3, [0x2, 0x7, 0x2e22]}, &(0x7f00000001c0)=0xe) ptrace$getregset(0x4203, r4, 0x0, &(0x7f0000000280)={0x0}) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r4}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1252.784745][ T2346] usb 4-1: new high-speed USB device number 33 using dummy_hcd 06:14:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) bind$isdn(r3, &(0x7f0000000040)={0x22, 0x0, 0x9, 0x3f, 0x1f}, 0x6) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) ioctl$sock_proto_private(r5, 0x89eb, &(0x7f00000002c0)="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") 06:14:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1253.132755][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.139096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.152836][ T2346] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 1253.161104][ T2346] usb 4-1: config 0 has no interface number 0 [ 1253.167351][ T2346] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1253.178632][ T2346] usb 4-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1253.190217][T11355] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1253.262614][ T2346] usb 4-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1253.271927][ T2346] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1253.280233][ T2346] usb 4-1: Manufacturer: syz [ 1253.286909][ T2346] usb 4-1: config 0 descriptor?? [ 1253.325192][ T2346] usb 4-1: BUG? WUSB host has no security descriptors [ 1253.333179][ T2346] hwa-hc 4-1:0.66: Wireless USB HWA host controller [ 1253.341178][ T2346] hwa-hc 4-1:0.66: new USB bus registered, assigned bus number 41 [ 1253.432338][T11355] usb 2-1: Using ep0 maxpacket: 8 [ 1253.552458][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1253.560743][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.571249][T11355] usb 2-1: config 0 has no interface number 0 [ 1253.577468][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1253.588814][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.601962][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1253.611186][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.620574][T11355] usb 2-1: config 0 descriptor?? [ 1253.665797][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1253.680545][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1253.692663][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.698825][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.705274][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.711408][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.865588][ T3369] usb 2-1: USB disconnect, device number 23 [ 1253.884227][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1253.972476][ T2346] hwa-hc 4-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1253.979894][ T2346] hwa-hc 4-1:0.66: wusbhc_rh_control (000000006d576de5 [000000006d576de5], 8006, f00, 0, 00000000f7317aae, 5) UNIMPLEMENTED [ 1253.993341][ T2346] hwa-hc 4-1:0.66: wusbhc_rh_control (000000006d576de5 [000000006d576de5], 8006, f00, 0, 00000000f7317aae, 5) UNIMPLEMENTED [ 1254.006516][ T2346] hwa-hc 4-1:0.66: wusbhc_rh_control (000000006d576de5 [000000006d576de5], 8006, f00, 0, 00000000f7317aae, 5) UNIMPLEMENTED [ 1254.019938][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1254.029410][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1254.038800][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1254.047087][ T2346] usb usb41: Product: Wireless USB HWA host controller [ 1254.054130][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1254.060841][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1254.069500][ T2346] hub 41-0:1.0: USB hub found [ 1254.074890][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1254.184110][ T3369] usb 4-1: USB disconnect, device number 33 [ 1254.190859][ T3369] hwa-hc 4-1:0.66: remove, state 1 [ 1254.196335][ T3369] usb usb41: USB disconnect, device number 1 [ 1254.206031][ T3369] hwa-hc 4-1:0.66: USB bus 41 deregistered 06:14:38 executing program 0: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:38 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) prctl$PR_GET_KEEPCAPS(0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLOCK(r2, &(0x7f0000000000)={0x8, 0x35, 0x3, 0x3}, 0x8) syz_usb_connect(0x1, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:38 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$ppp(r5, &(0x7f0000000100)="dc9169daf325d2ac518319f428d9827476c3e00b92058dc6d5c2b9b625cecbd5289d98b3b3bd3e8b477bf50d27f554769e5a243e8e846fa73b06a6e5cb299617946f82d6fbe74127f0a0ebb820f99b9e5f55e4e3f35dc8ae5196b4a510519afc597777ae16acd10406547b6348c4ebdde1f92679daf87dcd0ac9cebb9a7f042722ee7033ac553529b305", 0x8a) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x2, "00b82f921f3720c8"}) 06:14:39 executing program 0: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1255.073945][ T2346] usb 4-1: new high-speed USB device number 34 using dummy_hcd 06:14:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x802, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioprio_set$uid(0x3, r4, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)={0xa8, 0x0, 0x1, [{{0x6, 0x2, 0x0, 0x5, 0xad2, 0x1, {0x3, 0x8, 0x1, 0x5, 0x5, 0x9, 0x7, 0x5, 0x5, 0x6, 0x1, r4, 0xee01, 0xef, 0xfe}}, {0x1, 0x7, 0x0, 0x1}}]}, 0xa8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r10, 0x4004743a, &(0x7f0000000040)=0x1) 06:14:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1255.314766][ T2346] usb 4-1: Using ep0 maxpacket: 8 [ 1255.432537][ T2346] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 1255.440875][ T2346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.451247][ T2346] usb 4-1: config 0 has no interface number 0 [ 1255.457507][ T2346] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1255.468786][ T2346] usb 4-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.482017][ T2346] usb 4-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1255.491223][ T2346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.500740][ T2346] usb 4-1: config 0 descriptor?? [ 1255.545791][ T2346] ldusb 4-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1255.559075][ T2346] ldusb 4-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1255.750948][ T2346] usb 4-1: USB disconnect, device number 34 [ 1255.763948][ T2346] ldusb 4-1:0.28: LD USB Device #0 now disconnected 06:14:40 executing program 3: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:40 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:40 executing program 0: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:40 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x323) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x38004}, 0x40) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000001c0)) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20001010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x200180e7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1256.603003][ T2346] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1256.623030][T11355] usb 4-1: new high-speed USB device number 35 using dummy_hcd 06:14:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 06:14:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1256.843583][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1256.962885][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1256.971254][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.981504][ T2346] usb 2-1: config 0 has no interface number 0 [ 1256.987739][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1256.999243][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1257.012340][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1257.021429][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.031102][T11355] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 1257.039507][T11355] usb 4-1: config 0 has no interface number 0 [ 1257.046028][T11355] usb 4-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1257.057222][T11355] usb 4-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1257.068826][ T2346] usb 2-1: config 0 descriptor?? [ 1257.115650][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1257.131261][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1257.149145][T11355] usb 4-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1257.158478][T11355] usb 4-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1257.166847][T11355] usb 4-1: Manufacturer: syz [ 1257.173102][T11355] usb 4-1: config 0 descriptor?? [ 1257.214931][T11355] usb 4-1: BUG? WUSB host has no security descriptors [ 1257.223118][T11355] hwa-hc 4-1:0.66: Wireless USB HWA host controller [ 1257.231128][T11355] hwa-hc 4-1:0.66: new USB bus registered, assigned bus number 41 [ 1257.292523][ C0] net_ratelimit: 18 callbacks suppressed [ 1257.292536][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1257.304570][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1257.317568][ T3369] usb 2-1: USB disconnect, device number 24 [ 1257.333930][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1257.852610][T11355] hwa-hc 4-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1257.852787][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1257.861642][T11355] hwa-hc 4-1:0.66: wusbhc_rh_control (000000008453aaa4 [000000008453aaa4], 8006, f00, 0, 00000000e3f54653, 5) UNIMPLEMENTED [ 1257.865884][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1257.881277][T11355] hwa-hc 4-1:0.66: wusbhc_rh_control (000000008453aaa4 [000000008453aaa4], 8006, f00, 0, 00000000e3f54653, 5) UNIMPLEMENTED [ 1257.884844][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1257.899953][T11355] hwa-hc 4-1:0.66: wusbhc_rh_control (000000008453aaa4 [000000008453aaa4], 8006, f00, 0, 00000000e3f54653, 5) UNIMPLEMENTED [ 1257.903776][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1257.918753][T11355] usb usb41: unable to get BOS descriptor or descriptor too short [ 1257.932721][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1257.938845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1257.947751][T11355] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1257.957084][T11355] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1257.965730][T11355] usb usb41: Product: Wireless USB HWA host controller [ 1257.972785][T11355] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1257.979490][T11355] usb usb41: SerialNumber: wusb-hwa [ 1257.988151][T11355] hub 41-0:1.0: USB hub found [ 1257.993322][T11355] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1258.142127][T11355] usb 4-1: USB disconnect, device number 35 [ 1258.149584][T11355] hwa-hc 4-1:0.66: remove, state 1 [ 1258.154862][T11355] usb usb41: USB disconnect, device number 1 [ 1258.165874][T11355] hwa-hc 4-1:0.66: USB bus 41 deregistered [ 1258.192444][ T3369] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1258.492553][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.498782][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:42 executing program 3 (fault-call:9 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:42 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x9a0000, 0x8001, 0x6, [], &(0x7f0000000080)={0x9c0906, 0x4, [], @ptr=0x1f}}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:42 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:42 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0x400000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r4, &(0x7f00000000c0), 0x40000000000018b, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000002c0)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r6, 0x1) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={r8, 0x1f}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={r9, 0x3}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r3}, 0x8) openat$md(0xffffffffffffff9c, &(0x7f0000000300)='/dev/md0\x00', 0x181840, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r3, 0x33}, &(0x7f00000000c0)=0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dMv/null\x00', 0x2000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) sendmmsg$inet6(r3, &(0x7f00000017c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000100)="232807d117f090fb48a03b46c2c7d4987fb1589ef58023b2d0", 0x19}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000140)="e8a3db017b2de6753421e1cd268cd8632e394704b4b873bbb6bd088c2b803eefef2cb26aabe539913ac1a285e076b77e9ba3f8180561307ec44ffcefbf6f4dde16621a6bd8fe53cdcb50f7524a5791ddac786b39bd89a831680c08d41b164625972c476d88cfdaf5f10bbd02871a784682c4536eb525ebbe0ca67b11cc19a934d8d0865d01abe7779e65b53f41661002dd831c74644508f5a5999d3bb0c2efc7536f9ffe720b2bb15daa292afb44d95ebd7bd7287fc2ce4b6f6f79667e520b99e3db3e8002f4499a8be3159aa9d57637962bc04a0fa7cdfbc2ae448a0913194e987fcad07d17650e5c5dd383fd0d444eb4acb415", 0xf4}, {&(0x7f00000012c0)="521f4e1f4eed15f10932e6226c8bc478aec65b5c273c9bdbdbfe3b1cdc4cf6c378e6a2335373e71e0bc0ee41c30b1ffaeab3fdce6b303c7c3abec5eaba20a372d40cc7d4cd9439684c34114fcb0f91e1a887b06008a4ea3badbfdffdda0f1746b4307afcecc350654c0671aced2e6186fbf9b4a5fd236b57bac82de88060c09ddcdd44cb90b8b616d6d11f8224e6e5e6413d6a9e3bd21f03471a1430fc7bea8ded6c713564b6f871f18ea045ae7e1a8a2b0d88e3528dfa0257fa", 0xba}, {&(0x7f0000001380)="45c0e661c94ebede6e054507647782c409e83260a082ab53f3950d796ad3549801aea335c463d4753aad75a7e8f37e60960313f0c7e47d040e05fbdcc5d54707c7db8ac42e1c571187a735d0f4cfbf628094382e01d1f284e47aec5bccebfb315ae2ce33c46971a31cd701d2bc1b53210a9000a6c2eeb45d8008d2a5d1c222cea129439759b7dafdfe", 0x89}, {&(0x7f0000001440)="42082864c68f7ee95ff960da56dd3b87cc415e74106bde2b4f8312294950df24519be07808f68c7ad5114822789bb394854d7561a6a11d3db80141d07e625a47e77a9893669a51d89d7fcaab077034b179ca3887861764ab91395a5daa20fe1aa9348009faceb8593e64c47fbc48d61d69f9d90337274bf338155cff69d31f9984424d", 0x83}, {&(0x7f0000000240)="b5d76c875046f8e64cc8ccb8e638e9f4a73e061c94786d9ccae64af1315643e9", 0x20}, {&(0x7f0000001500)="7aa315dc4ab0522b0568e3a69ef9b88965202dc6fdcd4f4b65d4ba13f28ce76e574752566106f34cccf73e244fe0a89d7b3870d6ef14cf360a6bfd25a37d5917da031b79920e97fe7d6563c9d78bc3550779be709a576b249b92a0e607389ff52c3ad80a4346dd30f61e33ec81e19d387e484df048e66d6eeeadea39881aa486abaa4fc4242bdd5f6d782c6ecb6f721c0965bb0996a67382c711", 0x9a}, {&(0x7f00000015c0)="8cd03a876d710dfa9c180dd235b837d86f5da0724c5ee56fbd68c3c996471867bfeb5cf142ff48e6cdbef9a60f90204083e8d43a5087cf2294dc8f16e70764be2245a7dd13806ac18ee7c76dc3aea5f6fc931c381809fc0fbd1de74eddcc1dcf36e4a9a557669871e3e4fa7bedac41d0d692b2d0de5a0e4d3c3ff371b3e6fd31ca06406db7ad27c855c72fa8ee1a7af95356362d35b5589c696a6bce90012657", 0xa0}], 0x9, &(0x7f0000001740)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, [], [@ra={0x5, 0x2, 0x2}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r6}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x60}}], 0x1, 0x40) [ 1258.830095][ T4128] FAULT_INJECTION: forcing a failure. [ 1258.830095][ T4128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1258.843985][ T4128] CPU: 1 PID: 4128 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1258.851916][ T4128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.851932][ T4128] Call Trace: [ 1258.851988][ T4128] dump_stack+0x191/0x1f0 [ 1258.852053][ T4128] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1258.865864][ T4128] should_fail+0xa3f/0xa50 [ 1258.880516][ T4128] should_fail_alloc_page+0x1fb/0x270 [ 1258.885931][ T4128] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 1258.891424][ T4128] ? stack_trace_save+0x11c/0x1b0 [ 1258.896466][ T4128] ? stack_trace_save+0x11c/0x1b0 [ 1258.901510][ T4128] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1258.907679][ T4128] ? update_stack_state+0xa12/0xb40 [ 1258.912911][ T4128] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1258.919002][ T4128] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1258.925091][ T4128] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1258.931284][ T4128] ? stack_trace_save+0x11c/0x1b0 [ 1258.936326][ T4128] ? stack_trace_save+0x11c/0x1b0 [ 1258.941367][ T4128] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1258.947553][ T4128] ? update_stack_state+0xa12/0xb40 [ 1258.952779][ T4128] ? rose_rt_ioctl+0xdf1/0x3360 [ 1258.957660][ T4128] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1258.963834][ T4128] alloc_pages_vma+0xb54/0x1210 [ 1258.968728][ T4128] do_huge_pmd_anonymous_page+0xbbf/0x2ab0 [ 1258.974553][ T4128] ? update_stack_state+0xa12/0xb40 [ 1258.979773][ T4128] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1258.985526][ T4128] handle_mm_fault+0x5cad/0x9ef0 [ 1258.990513][ T4128] do_user_addr_fault+0x905/0x1510 [ 1258.995662][ T4128] __do_page_fault+0x1a2/0x410 [ 1259.000458][ T4128] do_page_fault+0xbb/0x500 [ 1259.004985][ T4128] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 1259.010380][ T4128] page_fault+0x4e/0x60 [ 1259.014564][ T4128] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1259.020997][ T4128] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1259.040624][ T4128] RSP: 0018:ffff8881c1b3f630 EFLAGS: 00010202 [ 1259.046744][ T4128] RAX: ffffffff810bcf00 RBX: ffff8881c1b3f638 RCX: 0000000000000004 [ 1259.054726][ T4128] RDX: 0000000000000004 RSI: ffff8881c1b3f808 RDI: 0000000020fe8001 [ 1259.062719][ T4128] RBP: ffff8881c1b3f718 R08: 0000000000000004 R09: ffff8881c1b3f748 [ 1259.071915][ T4128] R10: 0000000000000004 R11: ffffffff813035e0 R12: 0000000000000004 [ 1259.079895][ T4128] R13: 0000000000000000 R14: ffff8881c1b3f808 R15: 0000000020fe8001 [ 1259.087985][ T4128] ? enable_irq_window+0x1c0/0x1c0 [ 1259.093159][ T4128] ? kvm_write_guest_offset_cached+0x360/0x730 [ 1259.099342][ T4128] ? kvm_write_guest_offset_cached+0x45a/0x730 [ 1259.105539][ T4128] kvm_write_guest_cached+0xc4/0xe0 [ 1259.110810][ T4128] kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1259.116340][ T4128] kvm_arch_vcpu_ioctl_run+0x877e/0xd410 [ 1259.121992][ T4128] ? stack_trace_save+0x1b0/0x1b0 [ 1259.127156][ T4128] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1259.132196][ T4128] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1259.138128][ T4128] ? kvm_vm_release+0x90/0x90 [ 1259.142832][ T4128] do_vfs_ioctl+0xea8/0x2c50 [ 1259.147469][ T4128] ? security_file_ioctl+0x1bd/0x200 [ 1259.152788][ T4128] __se_sys_ioctl+0x1da/0x270 [ 1259.157501][ T4128] __x64_sys_ioctl+0x4a/0x70 [ 1259.162119][ T4128] do_syscall_64+0xbc/0xf0 [ 1259.166573][ T4128] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1259.172476][ T4128] RIP: 0033:0x459a29 [ 1259.176389][ T4128] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1259.196803][ T4128] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.205250][ T4128] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1259.213233][ T4128] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1259.221218][ T4128] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:14:43 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1259.229205][ T4128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1259.237275][ T4128] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:43 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:43 executing program 3 (fault-call:9 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1259.542532][ T3369] usb 2-1: device descriptor read/64, error -71 [ 1259.634603][ T4154] FAULT_INJECTION: forcing a failure. [ 1259.634603][ T4154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1259.648060][ T4154] CPU: 0 PID: 4154 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1259.655925][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.666027][ T4154] Call Trace: [ 1259.669585][ T4154] dump_stack+0x191/0x1f0 [ 1259.673989][ T4154] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1259.679963][ T4154] should_fail+0xa3f/0xa50 [ 1259.684464][ T4154] should_fail_alloc_page+0x1fb/0x270 [ 1259.689901][ T4154] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 1259.695436][ T4154] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1259.701718][ T4154] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1259.707680][ T4154] alloc_pages_current+0x68d/0x9a0 [ 1259.712874][ T4154] pte_alloc_one+0x59/0x1a0 [ 1259.717651][ T4154] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1259.723343][ T4154] __pte_alloc+0x6d/0x460 [ 1259.727741][ T4154] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1259.733961][ T4154] handle_mm_fault+0x4d18/0x9ef0 [ 1259.739000][ T4154] do_user_addr_fault+0x905/0x1510 [ 1259.744207][ T4154] __do_page_fault+0x1a2/0x410 [ 1259.749044][ T4154] do_page_fault+0xbb/0x500 [ 1259.753616][ T4154] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 1259.759084][ T4154] page_fault+0x4e/0x60 [ 1259.763304][ T4154] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1259.769686][ T4154] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1259.789339][ T4154] RSP: 0018:ffff8881e2f4f630 EFLAGS: 00010202 [ 1259.795462][ T4154] RAX: ffffffff810bcf00 RBX: ffff8881e2f4f638 RCX: 0000000000000004 [ 1259.803488][ T4154] RDX: 0000000000000004 RSI: ffff8881e2f4f808 RDI: 0000000020fe8001 [ 1259.811520][ T4154] RBP: ffff8881e2f4f718 R08: 0000000000000004 R09: ffff8881e2f4f748 [ 1259.819549][ T4154] R10: 0000000000000004 R11: ffffffff813035e0 R12: 0000000000000004 [ 1259.827572][ T4154] R13: 0000000000000000 R14: ffff8881e2f4f808 R15: 0000000020fe8001 06:14:43 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x210101, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x34, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffea9, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r5, &(0x7f00000000c0), 0x40000000000018b, 0x0) r7 = gettid() r8 = socket$kcm(0x10, 0x802, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioprio_set$uid(0x3, r9, 0x0) r10 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r10, 0x0, r12) r13 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x40, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) ioctl$sock_SIOCGPGRP(r14, 0x8904, &(0x7f0000000240)=0x0) r16 = getegid() r17 = getpid() rt_tgsigqueueinfo(r17, r17, 0x16, &(0x7f00000000c0)) ptrace(0x10, r17) ptrace$getregset(0x4203, r17, 0x0, &(0x7f0000000280)={0x0}) r18 = socket$kcm(0x10, 0x802, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioprio_set$uid(0x3, r19, 0x0) r20 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r20, 0x0, r22) r23 = gettid() r24 = socket$kcm(0x10, 0x802, 0x0) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioprio_set$uid(0x3, r25, 0x0) r26 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r27 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r26, 0x0, r28) r29 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) r30 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r30, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r30, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r31 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x408040, 0x0) r32 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r32, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r32, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r33 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r33, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r33, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r34 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r34, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r34, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r35 = syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x8000) r36 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r36, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r36, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r37 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r37, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r37, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r38 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r38, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r38, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r39 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x40, 0x0) r40 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r40, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r40, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) sendmmsg$unix(r5, &(0x7f0000001840)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r12, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=0xee01, @ANYRES32=r16, @ANYBLOB="000000c91c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r19, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=r25, @ANYRES32=r28, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r29, @ANYRES32, @ANYRES32, @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r2, @ANYRES32=r33, @ANYRES32=r0, @ANYRES32=r34, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r35, @ANYRES32=r36, @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r37, @ANYBLOB="00000005000000000000000053c57f52899826d962fb39b54f430100000001000000129b7b9ffeb141aab770bb04e979e499979d075fd8988f89da341313ba59f4b72e113d609230ff7c82b7bf3f1355e28c98b5de7537b69b7f48219fc0a88504ab7b", @ANYRES32=r38, @ANYRES32=r1, @ANYRES32=r39, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x4000010}, {&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)="a4ec21c57c5e4009d80801ed0d6556ab84386eb35aa6108908174779d316d75f5c49603040087bc8be4987c2e15ef0ec5413cfd7097e57970f06e0385541113dbc8dba5ba64ec7ca98eb2c00279b420ffb2979c3dcf90047221697e10aa14ca37e638fbf89bf592d2e2e952de846b75f0836b703da199cead5fa948df12c2316a916b601138ac3448774eb143fbba33068d6e6f6bb927a2ba25d89265a96d688f5992a7add401c31716af035d239b71a55", 0xb1}, {&(0x7f0000000640)="4a04b0cd8d9ad15dd724e641c8b95313", 0x10}], 0x2}, {&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000740)="078d80486808dc082aa6dbec44d531e572b2ae46ed096cb1154e37cb37732442fb6cc4a445f938f6dc44060201a3005311d757684fb1804f2bfb7de08ef743e44d6c82da1e76f948716ec7ed3c1a64db0eefb150fd2b1fc11c0ce6517a8577a6abb74859", 0x64}, {&(0x7f00000007c0)="8da342d8cb387beb214e3d7e7e9452f2066c5879de8e375365d7f60b7727847ab4b1d09aca081cb86bcc4654502f4d2cd32800e58bd25120e3b6cffe651170592d953b6f6c258b0200dbb00723da76daad80193e6a2adba2abdb7a62126e6e8228b18f12a71127f39a1f5e44a71b796a553789fa7a90c3667e4fe7f09b87e64b9b29a7a173119630a902e0abb85e8c69f1ce79ff157da6a80e2cba6dc0ee7f47a25f8604fc8e3dd21ada4628d9e445636ad3870b773e857c9b519f1f67893999d314a7011df9cef7352cd0526b4c156d65ff5eaebba495f46719eb5319be1febfffc900be8daea61ad049b2a7ad61de67e7c792132ffd174d36458a7d9fc8c5fb05971f0a742434157fc3a267e29722d27a0d48b4a4f3a777a6831a0f28c563505b711449ba40a95936faffe0c6435e9d05f3608097e62c2c9f4d45d9cc902640432844a45bc13599cab75188527f3ce4a1aea4e3f432f0a5a97eab6e85c30b7eceb3ca7f8c6d12a6a7674668e13960ac438adb88c6bee20f3e14174dc89251bb7f9b6ed89391a83bfab7e1685c86f2c02fa31dd5877ebafcc93d8da3f464fb98d08778fb51690306b53b32e59d52d3bebd3c85deaf34ad04d457da3b2003fdc39f2c82035f11cc699cdc30a109d5c7351ee6936d12e43d2a803b96b23c8243a54a6c81801cfc0ea38a7ba111f9022a110328da17e99004e693a84e39283b32510245865660730b6e785129e95e3683d75ff903c271a66853dc3c0df6b7761690a6ba7d78ded4f8d8852c09aefa30da5610035f1d392e7eee200f28a1d835e7e5b3f26234423e33ed1b9a5255ac7e9c3801018d5c4cb34ba0454f4cf426bab81718cf2b587ba2f50599716694b3b4e362445641b35301a36016082eb8e138d4abb94d277c0a82459ed393691a329b5f843b8de42bfda5afd398eaae327f5229cc23d6a9e03e479ec8b7c9bfbb5b621fc3aa647e2ba91b93c0be6b6c69dc75756ec7be66f6f12e6e4efab8a25be2b6b9514c3ed42b0f9579b1581bd5e91f6e8f89cf88fdd47675eedd588ae72c9b0321609cea6dd96a878cf16f2157aff9fd8c40197368a30bc6c1a29af635ec7d8e61ef9972fcfa4eb84cc0886a57a28cf7c3c521d00ae36f5129bb20d162c2b81e5c769691a637b23e2b7a773a5d9590f8f0ca1f10c1dccbef494f27d2a6c613b69ddfad46159221698b6a229617f21e6279a1df200c017070c8bb73f7a72f8b599d32246183c05c131a9b98b3808f5a17154ee358900c03fc5ada6b15f8f50c3fd5eaaf19ddbf6236bee4dc197d25ba68db92bc80223fed334f7a9afa62f0b1bc36cb6ac8ca9e132efd38375338457e56e0ee7774d40a98bbb23b3804d45d933d11c8e993372db5d33dac6302067aee446228ecab1767cca7d1647949743270023eaf2ced5e85433172a80ad63eeb8186abf1e815e5cf426d9e422ca206e502ddac497c9f4217e7a8cb960a753155e07b52010c1b865c1c1b11d99cb90b5178442cd2abb53d1dc79c8ba9f6b7839f54fbc3a6e32821c333b0d1a5f6185c5697bb1a03f2f928bb7cc0c5ecf7761bcef14607901533ac76053cd7f3cb4c7f6628a249c99ad2f28da7e8d4a4f771ee5ea5a1fa33fca1da62a554fb9fb792528ac0347d25423275d93a72da7ad983b7d12af41589dd115e2fed9613ca7f3e6f29a446a0ec9449ec7ee328d394b9d7ee99bb69c35f9a86113641183486b99de7ebfa61c92534c928270c3c2bd84356bdb58667d8db16111f41bffb62014fcc1c49063dd8adb6c0d7151d7c7b6a5f177be39499de5285d6cd8ccce1fa2a71ca918a4da15a465666418edae63e5cad890bd35a884c73f7e396333645f7b65ebcc1240c99cc9e4fd04685f195cc79e572a22acff7cdfc6ba999a393b669e434ddd41ea2765c508151018c4ab0a240d74dc84644240b33776bac34723e7360e32d52995d63359113122dfb3e51fd606e22eefc6dec776b9995c651ded1a3f5765a44a66cf22880c592e99c90c0cf62da0527f383b0fe8c36141f31b873c2025d8049cb87b8c3c2dfe2a38f897900365087208d8c1df8701ca04b6cffbbe4479c510779f358abf7c12e567d495ba3dd3a3a2d42030fa0ac7dd4c53c23571686ee3c4bc9e55c4287e4f3c081786ed04e1abcf1c6a1e1c0852de900b4486ce70664c2182dafdb65491b5074e0bbca2a218daa101fe12e8fc1bb3a60ea4a9d11665171d69f007c4126073f014c0663e25ab85527af687ec2a9495748033dc2fa35b369a5123d0ea6fad9ba2eece5165e74ba73b965a54e784476771053f9d8f2dee2de32cb23e07d87c2b97383ed3dc48de614734304af6431bc996e4a06503b9a19798467408acf1320c6b39dfe6a8b9abcf9f9999230991bb8e7661d5d7276c57b265bcfbe9db4e1856ecf8c028e60b978695f4b118f58e8f67c68b8bc516cdb82dffd493fd5d783530f2df345c450dbc97aafad1bed8c9899ab810bc234fb5b6f9cc4ed767024e2eef3adffbefdd1f00aa60d76be0ae62f994313be179c295f7c89d6961d42de54cf1a57e3ed1bf190ee435bd397633b0fdf3c86b5f8f040d3cf75860a71aa43b48ae3617d16766554cd0f375d06e94767372680b14778652216c4ae3ded311c796a106c557fb93d495d2f5d39bc1b513cd19746fbcedf40c04f4bfdf706ff94deaac805eb3a2825a057eeb19d536054656b68fcb9d9d4e4133ab7488fecc13da411f32f6fdfc2ca110ccb94446f1e773accba7a5744684ec06891189c1ffe811a6cba73a0ce0fb34e13337caff3b9d12c4d319331ba75ff43e6db02acae47206bfb2467a70ab9b1cafe71dc5b35a74161291960fcc4e9c9c7260e211c9f447e523b733821dc9197d5609780489e74fc6b06fe25667371002f705471852f71cdb6124cc2ad2727d279e69d1762a405c2faf50a7757afc1638df1f5bd5f2c336afc3e35a9d0119ccd7b0dfcb7891a1246c189501f84c43cfd539118d91cb949613c5b07a7f91027b68fef189b402fadb63a526ad4a4b266cf920b655cfd0521547c8d468802b5e900ce7a5f6bef2586c140091ba240884b9e87222e8dc219a4966ba46ca4f31dbc2fac785266a0feaf6a870b69f65d22da088d8aa1ddc153061940f4fba75f6d92dd09341206cdea883307917d0e6d89c0dea62c460e9090614193e5c0b5706f8ef3d5585a2e075c1288dd05696e6df73653db3472e92ce604ca6237eca75f67408486c11fa7b34d3850274991809594436712fbcc673ee6436681c9c68a27f4d43a7898dfaf8314785ab4327af58efe83f36559e3e647388b8915fa22fdcd2c00ad2d08a1a2d93cb8dbf497cf317c051cf83d17d2da3df94f0525c5374fce82963d0809ae8f87179f690a8f6ec5cf9539772319b5aea892fe028554ba5eb1c0b407bdd56738f450403123a913fc70f306ccc0440069dd89794b5c336a88c8b6fda06b86598b84ab510bdd92252dfc6b82ee4671269043e20b28d49767bf7616602355bcd7eb99dca442eae83be7763eae632c4532190dcd7f56edcf97683885bf612694ede351f0f4d6acfcd27a8f5553a23e9ca0da0ad889c6aad024c93e30c15750a6d8c7484b5d3f872cb233ebb7a600ed17e9bbb7b1de52bce1bd325e9557917a46786c5af8b77fb3b36cf834ade4181153ab7c5dda44e455d89a220038b05ef1d7263f1bfe79fcb22f6b1fc2b6e5d7d33b29ce421dbb1b0777dfe10e1dace268d4981b68b2f5aa0c23ea9dc34f82c5ad5c7b33af08e5558b47420bfce767b36dc0212852be55f9078fcc020e832441f9a392b66537cb3c6f6952e41e1dc071dabd0b8973efc04ac4bc42ff5cf5b44141745f7644de1c9d56d53a2e3e142212cd6f0c66bfe1a8458b4f6c1c71ecd5f23ecb09c4f0bb3120d031604ead6f3f7cdd7bb1114e949ecf600961e7e0842436835512affcf697508b19a1c5984b84f02a90f341d8ba4310c204c681fc18394ed20274aa1a5e54ae2472c411a18e94af450f1ea7a63ff4e5e439e01acc1f640dcdc055090ccc3a5b558478dd67c3a1c9707b81a2c8605311e9bf470819368c9b9374b0432510b8ec349ec6ba87133b6c98f2d2ed1b7a7de254990865855174cfee253bd701bc298773c2ae1282977a0b6e8d0bfe4827639988064cc10a80eacd0d41a67860de476be32a8d893e0f30515a9b566bf31e03bfd42e9adef92b060d99ad973982c2e4f60ffbfc1171f322bc5ae003e69dd447271cc5aaf9b3778b452c830db509bdf42d9a45ae1ddd25e493d79603fe2530fc64d9e43de141a42c0fb0dde58e9ab7dfeb02ca822a9ede348fccece0a74b5e0264f2a0379e311b39cb6141213723d3e317a829c44c985c3b9efba9ee1e76ce914f96606a3a405fe1c0f477282c652596d2a57b9228a08b809a92aba3b709f192d74827fef822cb65d05611558c7b52270de21e888538da9ded326c3bf88e72504008e6c2b2722d24288482ae9a9ee9cd3ac411db570aece2ef16569196cfb92bdd3ad0cae2b076bf9b6f09f959d88d1bb97212284d09cadfeca43380c266eadaf99b4e4a403013d7038c84699889be290b37b41f98eca61d7ed221b90ffc886cf119fa99bf5104c8d018c613b2ef7329c27e6ed197e12b3ae9154dab60636fa6fbbd6657aca10177de476a5c7935e07d5bce3cd84bff0225f6ccbc67596e6af2a49745c9ef20532f76042c53257567eb693a2cde75a2532df72a7db7d128cc297e67043636297e5e6a69f57eeed9b7ef7170f6af07998fcccf4ca58866b0f3e4f6ec175372bcd4b203ffb54b90ad91521df0e9ed8743a7cb907159632e46be62f902b8a0749d72197fefb7064656e32074c2ccf8743106dc6927a32a44da83dfb164a43c97767eeab0bf6b6f9e52fa047151b3be22a662402016e0bcc1ba2baf0578b92a4183965663516486a5e32fc70f886208c1637b807ff66f617502f7908d94301994fa5165fb940df8cabc161fe0b3c80d1c56db00275d14b46bda531ca1c8bb3fec18dbe8483abbb60c3ebadb9a263aef85abd152c2799dd65f8739a0418a590bc177050fbf9453f5fa2c5351029093673bd2531f7a660802e109bc9f082ee52681fd3da85a8a3832b18f1cf9b3b41522136c0e1226007df3942fc61cb955bed7e0bbb58f8dad2234232e90eef7c17e41f250e1647ef0d05c96feb00644ce38882ea27d733cd19280970239d61b22d70548d0c9111529ddc58d14e832b6d53d0748c422d7d0d05fcf9f6a6166852cf6dced12f7097d5c5312799ff5d15c9950bbe0fe1c32a6417c7d3823e1399113f13e631c218398cf9d6d1518336fcfe65b147afe879414f2a4fa006ed022649f6f972471dd407c523594c883e7f35ab17eaacd9306766f31567e9cf8f61c8ec3e10849a6e8b89c7bbb8e1ce719a466e8608b2fa982e4ef46d326501db034d7f5a9f1f8678473e1e15d63f28289447afd2a52b8309b23383089baf254338f0d77007d07bd2816bd983598a6213618a71a1bb1d314e3ec59906ce729749d21dae63dfad6e2d1bc4c4a148b928e2135863d8b5d6255706768ab4405d1feea1940719cae2a81d074adaa8973a9632ba84d1f590d2ec72f338b0a98ccaf34f459b3bd7434a0c880f2148668b680935f58529c807989b1d50b092297f3c01ae213d24686e7ff98b9aca3ffa49ac3f686ea3c59b475dbd53591634fd5e3b3f848a8329ceecf5581dae0cbb82cf9d4943e819718dc070d936c8dffd7c1c3e7c28869550e6fa1512fd3268d5ffe1828b8a7fb854", 0x1000}], 0x2, &(0x7f0000001800)=[@rights={{0x14, 0x1, 0x1, [r40]}}], 0x18, 0x745ada2dc3318ee4}], 0x3, 0x20008063) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1259.835636][ T4154] ? enable_irq_window+0x1c0/0x1c0 [ 1259.840823][ T4154] ? kvm_write_guest_offset_cached+0x360/0x730 [ 1259.847066][ T4154] ? kvm_write_guest_offset_cached+0x45a/0x730 [ 1259.853319][ T4154] kvm_write_guest_cached+0xc4/0xe0 [ 1259.858594][ T4154] kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1259.864153][ T4154] kvm_arch_vcpu_ioctl_run+0x877e/0xd410 [ 1259.869847][ T4154] ? stack_trace_save+0x1b0/0x1b0 [ 1259.875057][ T4154] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1259.880091][ T4154] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 06:14:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1259.886045][ T4154] ? kvm_vm_release+0x90/0x90 [ 1259.890778][ T4154] do_vfs_ioctl+0xea8/0x2c50 [ 1259.895449][ T4154] ? security_file_ioctl+0x1bd/0x200 [ 1259.900802][ T4154] __se_sys_ioctl+0x1da/0x270 [ 1259.905552][ T4154] __x64_sys_ioctl+0x4a/0x70 [ 1259.910204][ T4154] do_syscall_64+0xbc/0xf0 [ 1259.914699][ T4154] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1259.920889][ T4154] RIP: 0033:0x459a29 [ 1259.924808][ T4154] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1259.944425][ T4154] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.952861][ T4154] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1259.960844][ T4154] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1259.968826][ T4154] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1259.976809][ T4154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1259.984880][ T4154] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:44 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80800, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:44 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:44 executing program 3 (fault-call:9 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1260.284967][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1260.340024][ T4173] FAULT_INJECTION: forcing a failure. [ 1260.340024][ T4173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1260.353374][ T4173] CPU: 0 PID: 4173 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1260.361185][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.371256][ T4173] Call Trace: [ 1260.374578][ T4173] dump_stack+0x191/0x1f0 [ 1260.378917][ T4173] should_fail+0xa3f/0xa50 [ 1260.383333][ T4173] should_fail_alloc_page+0x1fb/0x270 [ 1260.388696][ T4173] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 1260.394227][ T4173] ? try_charge+0x2e6a/0x3d70 [ 1260.399071][ T4173] ? prep_new_page+0x792/0x9b0 [ 1260.403836][ T4173] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1260.409728][ T4173] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1260.415785][ T4173] kmsan_alloc_page+0xc3/0x360 [ 1260.420543][ T4173] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1260.426430][ T4173] __alloc_pages_nodemask+0x142d/0x5fa0 [ 1260.431983][ T4173] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1260.438162][ T4173] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1260.444049][ T4173] alloc_pages_current+0x68d/0x9a0 [ 1260.449181][ T4173] pte_alloc_one+0x59/0x1a0 [ 1260.453692][ T4173] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1260.459339][ T4173] __pte_alloc+0x6d/0x460 [ 1260.463683][ T4173] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1260.469585][ T4173] handle_mm_fault+0x4d18/0x9ef0 [ 1260.474521][ T4173] do_user_addr_fault+0x905/0x1510 [ 1260.479640][ T4173] __do_page_fault+0x1a2/0x410 [ 1260.484575][ T4173] do_page_fault+0xbb/0x500 [ 1260.489065][ T4173] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 1260.494443][ T4173] page_fault+0x4e/0x60 [ 1260.498617][ T4173] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1260.504940][ T4173] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1260.524538][ T4173] RSP: 0018:ffff8881c1b3f630 EFLAGS: 00010202 [ 1260.531298][ T4173] RAX: ffffffff810bcf00 RBX: ffff8881c1b3f638 RCX: 0000000000000004 [ 1260.539272][ T4173] RDX: 0000000000000004 RSI: ffff8881c1b3f808 RDI: 0000000020fe8001 [ 1260.547254][ T4173] RBP: ffff8881c1b3f718 R08: 0000000000000004 R09: ffff8881c1b3f748 [ 1260.555223][ T4173] R10: 0000000000000004 R11: ffffffff813035e0 R12: 0000000000000004 [ 1260.563210][ T4173] R13: 0000000000000000 R14: ffff8881c1b3f808 R15: 0000000020fe8001 [ 1260.571199][ T4173] ? enable_irq_window+0x1c0/0x1c0 [ 1260.576332][ T4173] ? kvm_write_guest_offset_cached+0x360/0x730 [ 1260.583301][ T4173] ? kvm_write_guest_offset_cached+0x45a/0x730 [ 1260.589453][ T4173] kvm_write_guest_cached+0xc4/0xe0 [ 1260.594803][ T4173] kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1260.600388][ T4173] kvm_arch_vcpu_ioctl_run+0x877e/0xd410 [ 1260.606116][ T4173] ? stack_trace_save+0x1b0/0x1b0 [ 1260.611189][ T4173] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1260.616037][ T4173] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1260.621940][ T4173] ? kvm_vm_release+0x90/0x90 [ 1260.626608][ T4173] do_vfs_ioctl+0xea8/0x2c50 [ 1260.631196][ T4173] ? security_file_ioctl+0x1bd/0x200 [ 1260.636471][ T4173] __se_sys_ioctl+0x1da/0x270 [ 1260.641159][ T4173] __x64_sys_ioctl+0x4a/0x70 [ 1260.645761][ T4173] do_syscall_64+0xbc/0xf0 [ 1260.650713][ T4173] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1260.656618][ T4173] RIP: 0033:0x459a29 [ 1260.660524][ T4173] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1260.680143][ T4173] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1260.688550][ T4173] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1260.696510][ T4173] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1260.704472][ T4173] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1260.712430][ T4173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1260.720386][ T4173] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1260.807421][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1260.815702][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.826221][ T3369] usb 2-1: config 0 has no interface number 0 [ 1260.832447][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1260.843701][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1260.856827][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1260.866004][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.879284][ T3369] usb 2-1: config 0 descriptor?? [ 1260.936115][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1260.948591][ T3369] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1261.174585][ T3369] usb 2-1: USB disconnect, device number 25 [ 1261.182840][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1261.952447][ T3369] usb 2-1: new high-speed USB device number 26 using dummy_hcd 06:14:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000001c0)=0x44) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x85, @mcast1, 0x5}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x1, @local, 0x100}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}], 0xa4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:46 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:46 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:46 executing program 3 (fault-call:9 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:46 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) gettid() setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x3f}, 0x8) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x0, @dev={[], 0x29}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1262.397754][ T4188] FAULT_INJECTION: forcing a failure. [ 1262.397754][ T4188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1262.411015][ T4188] CPU: 0 PID: 4188 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1262.418808][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.428850][ T4188] Call Trace: [ 1262.432142][ T4188] dump_stack+0x191/0x1f0 [ 1262.436476][ T4188] should_fail+0xa3f/0xa50 [ 1262.440891][ T4188] should_fail_alloc_page+0x1fb/0x270 [ 1262.446257][ T4188] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 1262.451719][ T4188] ? prep_new_page+0x792/0x9b0 [ 1262.456495][ T4188] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1262.462383][ T4188] kmsan_alloc_page+0x131/0x360 [ 1262.467242][ T4188] __alloc_pages_nodemask+0x142d/0x5fa0 [ 1262.473046][ T4188] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1262.479230][ T4188] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1262.485116][ T4188] alloc_pages_current+0x68d/0x9a0 [ 1262.490227][ T4188] pte_alloc_one+0x59/0x1a0 [ 1262.494720][ T4188] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1262.500346][ T4188] __pte_alloc+0x6d/0x460 [ 1262.504672][ T4188] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1262.510571][ T4188] handle_mm_fault+0x4d18/0x9ef0 [ 1262.515540][ T4188] do_user_addr_fault+0x905/0x1510 [ 1262.520659][ T4188] __do_page_fault+0x1a2/0x410 [ 1262.525419][ T4188] do_page_fault+0xbb/0x500 [ 1262.529917][ T4188] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 1262.535286][ T4188] page_fault+0x4e/0x60 [ 1262.539436][ T4188] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1262.545753][ T4188] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1262.565349][ T4188] RSP: 0018:ffff8881e23cf630 EFLAGS: 00010202 [ 1262.571407][ T4188] RAX: ffffffff810bcf00 RBX: ffff8881e23cf638 RCX: 0000000000000004 [ 1262.579375][ T4188] RDX: 0000000000000004 RSI: ffff8881e23cf808 RDI: 0000000020fe8001 [ 1262.587334][ T4188] RBP: ffff8881e23cf718 R08: 0000000000000004 R09: ffff8881e23cf748 [ 1262.595309][ T4188] R10: 0000000000000004 R11: ffffffff813035e0 R12: 0000000000000004 [ 1262.603288][ T4188] R13: 0000000000000000 R14: ffff8881e23cf808 R15: 0000000020fe8001 [ 1262.611286][ T4188] ? enable_irq_window+0x1c0/0x1c0 [ 1262.616391][ T4188] ? kvm_write_guest_offset_cached+0x360/0x730 [ 1262.622543][ T4188] ? kvm_write_guest_offset_cached+0x45a/0x730 [ 1262.628704][ T4188] kvm_write_guest_cached+0xc4/0xe0 [ 1262.633908][ T4188] kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1262.639369][ T4188] kvm_arch_vcpu_ioctl_run+0x877e/0xd410 [ 1262.645033][ T4188] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1262.650883][ T4188] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1262.655739][ T4188] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1262.661625][ T4188] ? kvm_vm_release+0x90/0x90 [ 1262.666291][ T4188] do_vfs_ioctl+0xea8/0x2c50 [ 1262.670881][ T4188] ? security_file_ioctl+0x1bd/0x200 [ 1262.676165][ T4188] __se_sys_ioctl+0x1da/0x270 [ 1262.680892][ T4188] __x64_sys_ioctl+0x4a/0x70 [ 1262.685476][ T4188] do_syscall_64+0xbc/0xf0 [ 1262.689889][ T4188] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1262.695769][ T4188] RIP: 0033:0x459a29 [ 1262.699653][ T4188] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1262.719507][ T4188] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1262.727909][ T4188] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1262.735883][ T4188] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1262.743856][ T4188] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1262.751823][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1262.759781][ T4188] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1262.772848][ C1] net_ratelimit: 22 callbacks suppressed [ 1262.772880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.784861][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.791213][ C1] protocol 88fb is buggy, dev hsr_slave_0 06:14:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = fcntl$dupfd(r0, 0x0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$rfkill(r5, &(0x7f0000000140), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) sendfile(r6, r0, &(0x7f0000000080), 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1262.797448][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:46 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:46 executing program 3 (fault-call:9 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1262.981694][ T4207] FAULT_INJECTION: forcing a failure. [ 1262.981694][ T4207] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1262.996203][ T4207] CPU: 1 PID: 4207 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1263.004072][ T4207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.014177][ T4207] Call Trace: [ 1263.017550][ T4207] dump_stack+0x191/0x1f0 [ 1263.021965][ T4207] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1263.027927][ T4207] should_fail+0xa3f/0xa50 [ 1263.032424][ T4207] should_fail_alloc_page+0x1fb/0x270 [ 1263.037848][ T4207] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 1263.043434][ T4207] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1263.049391][ T4207] alloc_pages_vma+0xb54/0x1210 [ 1263.054309][ T4207] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1263.060555][ T4207] handle_mm_fault+0x5281/0x9ef0 [ 1263.065619][ T4207] do_user_addr_fault+0x905/0x1510 [ 1263.070832][ T4207] __do_page_fault+0x1a2/0x410 [ 1263.075785][ T4207] do_page_fault+0xbb/0x500 [ 1263.080355][ T4207] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 1263.085981][ T4207] page_fault+0x4e/0x60 [ 1263.090213][ T4207] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1263.095764][ T3369] usb 2-1: device descriptor read/64, error -71 [ 1263.096592][ T4207] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1263.096620][ T4207] RSP: 0018:ffff8881df9ff630 EFLAGS: 00010202 [ 1263.096657][ T4207] RAX: ffffffff810bcf00 RBX: ffff8881df9ff638 RCX: 0000000000000004 [ 1263.096684][ T4207] RDX: 0000000000000004 RSI: ffff8881df9ff808 RDI: 0000000020fe8001 [ 1263.096711][ T4207] RBP: ffff8881df9ff718 R08: 0000000000000004 R09: ffff8881df9ff748 [ 1263.096734][ T4207] R10: 0000000000000004 R11: ffffffff813035e0 R12: 0000000000000004 [ 1263.096773][ T4207] R13: 0000000000000000 R14: ffff8881df9ff808 R15: 0000000020fe8001 [ 1263.169266][ T4207] ? enable_irq_window+0x1c0/0x1c0 [ 1263.174406][ T4207] ? kvm_write_guest_offset_cached+0x360/0x730 [ 1263.180721][ T4207] ? kvm_write_guest_offset_cached+0x45a/0x730 [ 1263.186931][ T4207] kvm_write_guest_cached+0xc4/0xe0 [ 1263.192287][ T4207] kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1263.197793][ T4207] kvm_arch_vcpu_ioctl_run+0x877e/0xd410 [ 1263.203481][ T4207] ? stack_trace_save+0x1b0/0x1b0 [ 1263.208674][ T4207] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1263.213772][ T4207] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1263.219741][ T4207] ? kvm_vm_release+0x90/0x90 [ 1263.224457][ T4207] do_vfs_ioctl+0xea8/0x2c50 [ 1263.229108][ T4207] ? security_file_ioctl+0x1bd/0x200 [ 1263.234438][ T4207] __se_sys_ioctl+0x1da/0x270 [ 1263.239132][ T4207] __x64_sys_ioctl+0x4a/0x70 [ 1263.243761][ T4207] do_syscall_64+0xbc/0xf0 [ 1263.248246][ T4207] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1263.254171][ T4207] RIP: 0033:0x459a29 [ 1263.258124][ T4207] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1263.278129][ T4207] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.286572][ T4207] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1263.294708][ T4207] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1263.302728][ T4207] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1263.310752][ T4207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1263.318783][ T4207] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:47 executing program 3 (fault-call:9 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:47 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1263.462441][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1263.507762][ T4217] FAULT_INJECTION: forcing a failure. [ 1263.507762][ T4217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1263.521002][ T4217] CPU: 0 PID: 4217 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1263.528815][ T4217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.538883][ T4217] Call Trace: [ 1263.542205][ T4217] dump_stack+0x191/0x1f0 [ 1263.546559][ T4217] should_fail+0xa3f/0xa50 [ 1263.551001][ T4217] should_fail_alloc_page+0x1fb/0x270 06:14:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1263.556391][ T4217] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 1263.561861][ T4217] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1263.567771][ T4217] ? kmsan_get_shadow_origin_ptr+0x1ab/0x4c0 [ 1263.573768][ T4217] ? prep_new_page+0x792/0x9b0 [ 1263.578561][ T4217] ? get_page_from_freelist+0x11a1/0x19c0 [ 1263.584318][ T4217] kmsan_alloc_page+0xc3/0x360 [ 1263.589091][ T4217] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1263.595614][ T4217] __alloc_pages_nodemask+0x142d/0x5fa0 [ 1263.601251][ T4217] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1263.607169][ T4217] alloc_pages_vma+0xb54/0x1210 [ 1263.612036][ T4217] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1263.618213][ T4217] handle_mm_fault+0x5281/0x9ef0 [ 1263.623180][ T4217] do_user_addr_fault+0x905/0x1510 [ 1263.628386][ T4217] __do_page_fault+0x1a2/0x410 [ 1263.633143][ T4217] do_page_fault+0xbb/0x500 [ 1263.637639][ T4217] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 1263.643006][ T4217] page_fault+0x4e/0x60 [ 1263.647155][ T4217] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1263.653475][ T4217] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1263.673069][ T4217] RSP: 0018:ffff8881c1f4f630 EFLAGS: 00010202 [ 1263.679136][ T4217] RAX: ffffffff810bcf00 RBX: ffff8881c1f4f638 RCX: 0000000000000004 [ 1263.687094][ T4217] RDX: 0000000000000004 RSI: ffff8881c1f4f808 RDI: 0000000020fe8001 [ 1263.695057][ T4217] RBP: ffff8881c1f4f718 R08: 0000000000000004 R09: ffff8881c1f4f748 [ 1263.703018][ T4217] R10: 0000000000000004 R11: ffffffff813035e0 R12: 0000000000000004 [ 1263.711017][ T4217] R13: 0000000000000000 R14: ffff8881c1f4f808 R15: 0000000020fe8001 [ 1263.718991][ T4217] ? enable_irq_window+0x1c0/0x1c0 [ 1263.724186][ T4217] ? kvm_write_guest_offset_cached+0x360/0x730 [ 1263.730334][ T4217] ? kvm_write_guest_offset_cached+0x45a/0x730 [ 1263.736488][ T4217] kvm_write_guest_cached+0xc4/0xe0 [ 1263.741688][ T4217] kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1263.747167][ T4217] kvm_arch_vcpu_ioctl_run+0x877e/0xd410 [ 1263.752809][ T4217] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1263.758655][ T4217] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1263.763506][ T4217] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1263.769389][ T4217] ? kvm_vm_release+0x90/0x90 [ 1263.774053][ T4217] do_vfs_ioctl+0xea8/0x2c50 [ 1263.778648][ T4217] ? security_file_ioctl+0x1bd/0x200 [ 1263.783933][ T4217] __se_sys_ioctl+0x1da/0x270 [ 1263.789559][ T4217] __x64_sys_ioctl+0x4a/0x70 [ 1263.794142][ T4217] do_syscall_64+0xbc/0xf0 [ 1263.798553][ T4217] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1263.804435][ T4217] RIP: 0033:0x459a29 [ 1263.808318][ T4217] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1263.827909][ T4217] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.836306][ T4217] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1263.844321][ T4217] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:14:47 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1263.852290][ T4217] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1263.860248][ T4217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1263.868730][ T4217] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1263.877908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.884321][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1263.954071][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1263.962410][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.973000][ T3369] usb 2-1: config 0 has no interface number 0 [ 1263.979195][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1263.990514][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1264.003562][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1264.012803][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:14:48 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:48 executing program 3 (fault-call:9 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1264.092818][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.099161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.105694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.111970][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.169310][ T3369] usb 2-1: config 0 descriptor?? [ 1264.220414][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1264.244489][ T3369] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1264.263351][ T4234] FAULT_INJECTION: forcing a failure. [ 1264.263351][ T4234] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1264.276665][ T4234] CPU: 1 PID: 4234 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1264.284483][ T4234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.294555][ T4234] Call Trace: [ 1264.297886][ T4234] dump_stack+0x191/0x1f0 [ 1264.302251][ T4234] should_fail+0xa3f/0xa50 [ 1264.306753][ T4234] should_fail_alloc_page+0x1fb/0x270 [ 1264.312220][ T4234] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 1264.317692][ T4234] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1264.323606][ T4234] ? kmsan_get_shadow_origin_ptr+0x1ab/0x4c0 [ 1264.329637][ T4234] ? prep_new_page+0x792/0x9b0 [ 1264.334413][ T4234] ? get_page_from_freelist+0x11a1/0x19c0 [ 1264.340137][ T4234] kmsan_alloc_page+0x131/0x360 [ 1264.344984][ T4234] __alloc_pages_nodemask+0x142d/0x5fa0 [ 1264.350566][ T4234] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1264.356474][ T4234] alloc_pages_vma+0xb54/0x1210 [ 1264.361324][ T4234] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1264.367477][ T4234] handle_mm_fault+0x5281/0x9ef0 [ 1264.372465][ T4234] do_user_addr_fault+0x905/0x1510 [ 1264.377594][ T4234] __do_page_fault+0x1a2/0x410 [ 1264.382359][ T4234] do_page_fault+0xbb/0x500 [ 1264.386856][ T4234] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 1264.392236][ T4234] page_fault+0x4e/0x60 [ 1264.396407][ T4234] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1264.402734][ T4234] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1264.422342][ T4234] RSP: 0018:ffff8881c1f4f630 EFLAGS: 00010202 [ 1264.428396][ T4234] RAX: ffffffff810bcf00 RBX: ffff8881c1f4f638 RCX: 0000000000000004 [ 1264.436447][ T4234] RDX: 0000000000000004 RSI: ffff8881c1f4f808 RDI: 0000000020fe8001 [ 1264.444411][ T4234] RBP: ffff8881c1f4f718 R08: 0000000000000004 R09: ffff8881c1f4f748 [ 1264.452379][ T4234] R10: 0000000000000004 R11: ffffffff813035e0 R12: 0000000000000004 [ 1264.460355][ T4234] R13: 0000000000000000 R14: ffff8881c1f4f808 R15: 0000000020fe8001 [ 1264.468352][ T4234] ? enable_irq_window+0x1c0/0x1c0 [ 1264.473485][ T4234] ? kvm_write_guest_offset_cached+0x360/0x730 [ 1264.473510][ T4234] ? kvm_write_guest_offset_cached+0x45a/0x730 [ 1264.473556][ T4234] kvm_write_guest_cached+0xc4/0xe0 [ 1264.473584][ T4234] kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1264.473627][ T4234] kvm_arch_vcpu_ioctl_run+0x877e/0xd410 [ 1264.473691][ T4234] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1264.486056][ T4234] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1264.496651][ T4234] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1264.508151][ T4234] ? kvm_vm_release+0x90/0x90 [ 1264.518873][ T4234] do_vfs_ioctl+0xea8/0x2c50 [ 1264.528126][ T4234] ? security_file_ioctl+0x1bd/0x200 [ 1264.533433][ T4234] __se_sys_ioctl+0x1da/0x270 [ 1264.534259][ T3369] usb 2-1: USB disconnect, device number 26 [ 1264.538129][ T4234] __x64_sys_ioctl+0x4a/0x70 [ 1264.538149][ T4234] do_syscall_64+0xbc/0xf0 [ 1264.538172][ T4234] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1264.538185][ T4234] RIP: 0033:0x459a29 [ 1264.538200][ T4234] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1264.538227][ T4234] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.548715][ T4234] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1264.553223][ C0] ldusb 2-1:0.28: usb_submit_urb failed (-19) [ 1264.559012][ T4234] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1264.571418][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1264.582483][ T4234] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1264.582492][ T4234] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1264.582500][ T4234] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1265.342384][ T3369] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1265.592411][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1265.722674][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1265.730946][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.741247][ T3369] usb 2-1: config 0 has no interface number 0 [ 1265.747430][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1265.758715][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.771696][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1265.780839][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.790044][ T3369] usb 2-1: config 0 descriptor?? [ 1265.835582][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1265.850892][ T3369] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 06:14:50 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:50 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x0, 0x8}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:50 executing program 3 (fault-call:9 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:50 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1266.037100][T11355] usb 2-1: USB disconnect, device number 27 [ 1266.053638][T11355] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1266.190770][ T4251] FAULT_INJECTION: forcing a failure. [ 1266.190770][ T4251] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.203690][ T4251] CPU: 1 PID: 4251 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1266.211548][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.221650][ T4251] Call Trace: [ 1266.225010][ T4251] dump_stack+0x191/0x1f0 [ 1266.229404][ T4251] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1266.235358][ T4251] should_fail+0xa3f/0xa50 [ 1266.239846][ T4251] __should_failslab+0x264/0x280 [ 1266.244845][ T4251] should_failslab+0x29/0x70 [ 1266.249497][ T4251] kmem_cache_alloc+0xd6/0xd10 [ 1266.254318][ T4251] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1266.260343][ T4251] ? mmu_topup_memory_caches+0x109/0x910 [ 1266.266044][ T4251] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1266.272272][ T4251] mmu_topup_memory_caches+0x109/0x910 [ 1266.278029][ T4251] kvm_mmu_load+0x61/0x3700 [ 1266.282594][ T4251] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1266.288292][ T4251] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1266.294244][ T4251] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1266.299912][ T4251] ? stack_trace_save+0x1b0/0x1b0 [ 1266.305063][ T4251] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1266.309961][ T4251] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1266.315909][ T4251] ? kvm_vm_release+0x90/0x90 [ 1266.320661][ T4251] do_vfs_ioctl+0xea8/0x2c50 [ 1266.325298][ T4251] ? security_file_ioctl+0x1bd/0x200 [ 1266.330618][ T4251] __se_sys_ioctl+0x1da/0x270 [ 1266.335343][ T4251] __x64_sys_ioctl+0x4a/0x70 [ 1266.339960][ T4251] do_syscall_64+0xbc/0xf0 [ 1266.344425][ T4251] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1266.350348][ T4251] RIP: 0033:0x459a29 [ 1266.354270][ T4251] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1266.373896][ T4251] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.382330][ T4251] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 06:14:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x26}, 0x2}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1266.390322][ T4251] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1266.398309][ T4251] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1266.406298][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1266.414284][ T4251] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x3}], 0x55}, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x110) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r11 = dup(r0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r13 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x80000, 0x102) io_submit(r4, 0x5, &(0x7f0000000700)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0xa0ba, r5, &(0x7f0000000100)="8abc024e4c46e8969f1c15165c0d2fa5a7caef61a95ca5ce88f08d00ae526cd7245ad2f55b4012f45a664eee3b70885ab2694ee269b99218f397b8898dab5e83f83ff9584b43220078e5cb7e88be975ec2134b83eef30a73abd223c0e756dbd654d1195a5c75dac67f15048d91be7efa154012bd45cfe5a51a34c08d5f5fd7e910fdf1744c669223c7e5f5857021b682225f5632fe44faa4100f23dd38addfc9e8835592c18d7a00970cd0fbe2ba454b9ef0991676a63e2696fa32304d0bce2731860553f1fba9143a91bd1af2aa0d94e7af92fad8dd53c2b308b9190f1770ee13c6fcb86d1c672134f0c686904c", 0xee, 0x7, 0x0, 0x2, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0xf26, r7, &(0x7f00000002c0)="81d9ff5bc2a6861d825ff127f42fcf2b0317c9323e216b7576644102719e3e2f47713de02d456eeabc867a3fe567135b6264a2eb9281f6a58ac77e021004699fb8e7588e9020efbdd3201ce9f5049d4268351a17fa7d20f36527dbcc1a65370477f5dfa9dea856569ae0907df22b6cbc7e9fa46792e85b5993a2a489673bde9d27c9d285b50ce61e2d", 0x89, 0x2, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x381, r8, &(0x7f0000000380)="5d3b6e2efaeb953a91e30c20c0275d1ae100aedc27e9ce80e3b1b7e0e8ce307e4888fd256caa8939eb9369395b0ec48584416a1b0847d2f4500b80862a4a66a0af21904c2ef7c9f4c6099f6ddf67f73ae25c845bc8f939b3ae9444a4a57ff1e00c1f269dbeaac43fc51a0053fa18d1eba968b607f5cfa68bab35e1baf595d0e1bc33a89733cc8019950fa3c582e2a032d9e906cfb7", 0x95, 0x7, 0x0, 0x7, r9}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x6, r10, &(0x7f00000004c0)="db2140763686b88d42b16c2e64b719ad26e0b22f3ea4ce93313b9d7dc469378fd7bd53ec90c41306a589fb2c939761ee18f7abdc54980638dcdd6d109fe263c6d5d2e942546d3c58649c18a719fa3520c1b2ecd69192602bc238d12e8f94cd93825fe0bbadce1f7049c57ba2db7ab51af0701763a05f995e2eaf79ada16739bea635b19c", 0x84, 0x2658, 0x0, 0x2, r11}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x9, r12, &(0x7f00000005c0)="b05bdb7750809b1339bb632e518cd160a69f542799d3ce944931f69378b9f56a4a417739125759a66f8654de4e32cc1b3995db4e35cbba98af773d5ac64619742bfc5ccf478ec049e7eb0063580b442968771ab0e9703f3734cc9ae05baeea78e8f154db7902839eec7c120a47b16bc1f47d1ff3471e66a97fc23869e3b60ffe01308a8fc9888048893614c8e643e40e6e9fea512aa9cdbfb5ba6132e801092eb920f2cf9f96afe2b1cc094e93", 0xad, 0xffff, 0x0, 0x3, r13}]) r14 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r15 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r15, 0x6430) 06:14:50 executing program 3 (fault-call:9 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1266.656631][ T4275] QAT: Invalid ioctl 06:14:50 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1266.753978][T11355] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1266.802656][ T4278] FAULT_INJECTION: forcing a failure. [ 1266.802656][ T4278] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.816208][ T4278] CPU: 0 PID: 4278 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1266.824072][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.834181][ T4278] Call Trace: [ 1266.837548][ T4278] dump_stack+0x191/0x1f0 [ 1266.841958][ T4278] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1266.847930][ T4278] should_fail+0xa3f/0xa50 [ 1266.852436][ T4278] __should_failslab+0x264/0x280 [ 1266.857446][ T4278] should_failslab+0x29/0x70 [ 1266.862113][ T4278] kmem_cache_alloc+0xd6/0xd10 [ 1266.866955][ T4278] ? mmu_topup_memory_caches+0x109/0x910 [ 1266.872672][ T4278] mmu_topup_memory_caches+0x109/0x910 [ 1266.878202][ T4278] kvm_mmu_load+0x61/0x3700 [ 1266.882752][ T4278] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1266.888422][ T4278] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1266.894351][ T4278] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1266.900007][ T4278] ? stack_trace_save+0x1b0/0x1b0 [ 1266.905141][ T4278] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1266.910055][ T4278] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1266.916001][ T4278] ? kvm_vm_release+0x90/0x90 [ 1266.920698][ T4278] do_vfs_ioctl+0xea8/0x2c50 [ 1266.925344][ T4278] ? security_file_ioctl+0x1bd/0x200 [ 1266.930682][ T4278] __se_sys_ioctl+0x1da/0x270 [ 1266.935386][ T4278] __x64_sys_ioctl+0x4a/0x70 [ 1266.939996][ T4278] do_syscall_64+0xbc/0xf0 [ 1266.944458][ T4278] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1266.950368][ T4278] RIP: 0033:0x459a29 [ 1266.954286][ T4278] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1266.973920][ T4278] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.982980][ T4278] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1266.990988][ T4278] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1266.998977][ T4278] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1267.006963][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1267.014970][ T4278] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1267.162631][T11355] usb 2-1: Using ep0 maxpacket: 8 [ 1267.282741][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1267.291135][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.301535][T11355] usb 2-1: config 0 has no interface number 0 [ 1267.307747][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1267.319034][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1267.332047][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1267.341239][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.350620][T11355] usb 2-1: config 0 descriptor?? [ 1267.395867][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1267.408628][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1267.596419][ T3369] usb 2-1: USB disconnect, device number 28 [ 1267.614128][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1268.012675][ C0] net_ratelimit: 18 callbacks suppressed [ 1268.012689][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.024768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.252604][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.258689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.265091][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.271252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.392372][ T3369] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1268.492569][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.498726][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.642465][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1268.772578][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1268.780784][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.791215][ T3369] usb 2-1: config 0 has no interface number 0 [ 1268.797617][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1268.809129][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1268.822334][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1268.831429][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.841064][ T3369] usb 2-1: config 0 descriptor?? [ 1268.885688][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1268.900426][ T3369] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1269.052696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.059076][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.085286][ T3369] usb 2-1: USB disconnect, device number 29 06:14:53 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xc72) 06:14:53 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x2499) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$getregset(0x4203, 0x0, 0x0, &(0x7f0000000280)={0x0}) fcntl$setown(r4, 0x8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = syz_open_dev$cec(&(0x7f0000004400)='/dev/cec#\x00', 0x2, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000100)=0x10) shutdown(r6, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff5000/0xa000)=nil, 0xa000}, &(0x7f0000000080)=0xfffffffffffffe26) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000020f179e8968ad00335d8e012b533a7b18f4f3f152751bd8d3cf5d90929c6603f34756b99b25c8f2e8c280f81640b00ec3cad0347dc42700a3c4c61d02706520a0495a50f0cb4ed45e317b2bc7f8f0d3ee15824d088fefaa5bb38628fd2099bc28114e35baee719b3b8f666ec6cd9422a711ec25d341d1449e77b39c04a", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r8}, 0x8) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) dup2(r9, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000004440)={r8, 0x6}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000340)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000300)=r11) 06:14:53 executing program 3 (fault-call:9 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:53 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1269.114316][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1269.316595][ T4307] FAULT_INJECTION: forcing a failure. [ 1269.316595][ T4307] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.329816][ T4307] CPU: 1 PID: 4307 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1269.337983][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.348450][ T4307] Call Trace: [ 1269.352066][ T4307] dump_stack+0x191/0x1f0 [ 1269.356710][ T4307] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 06:14:53 executing program 2: r0 = semget$private(0x0, 0x9, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0x38000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000400)={0x8, 0x0, 0x8654eec4df4a7bce, 0x1ff, 0x101, 0x6, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x3}) ptrace(0x10, r6) socket$unix(0x1, 0x1, 0x0) ptrace$getregset(0x4203, r6, 0x0, &(0x7f0000000280)={0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f00000002c0)={{0x7, 0x6, 0xfffffff9, 0x0, 'syz1\x00', 0x3}, 0x1, 0x10, 0x7fff, r6, 0x3, 0x6, 'syz1\x00', &(0x7f0000000040)=['\x00', '\x06systemvmnet1,vboxnet0em0[:mime_type\x00', '}ppp0\xe1securityposix_acl_access\x00'], 0x45, [], [0x20, 0x6, 0x3, 0x4]}) r7 = fcntl$dupfd(r2, 0x0, r1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x4, @loopback, 0x8ca4}}, 0x0, 0x100, 0x0, "56856d77d48737f548ae14c4328641ce374c5590cb654dae43c1712a747e737ed2238f0ca888ce9b92a2bb48d6af2a30b4815f6b55354b3d44a7610aec7feb6dbd6189772af397b872a06ae2195b7ddf"}, 0xd8) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="ac1414bbffefffffff0300071fdda6e0c25f75856100000300000000000005ac14142aac1414bb"], 0x1c) [ 1269.362947][ T4307] should_fail+0xa3f/0xa50 [ 1269.367464][ T4307] __should_failslab+0x264/0x280 [ 1269.372471][ T4307] should_failslab+0x29/0x70 [ 1269.377251][ T4307] kmem_cache_alloc+0xd6/0xd10 [ 1269.382180][ T4307] ? mmu_topup_memory_caches+0x109/0x910 [ 1269.387865][ T4307] mmu_topup_memory_caches+0x109/0x910 [ 1269.393570][ T4307] kvm_mmu_load+0x61/0x3700 [ 1269.398122][ T4307] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1269.404236][ T4307] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1269.410208][ T4307] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1269.415882][ T4307] ? stack_trace_save+0x1b0/0x1b0 [ 1269.421027][ T4307] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1269.426063][ T4307] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1269.432011][ T4307] ? kvm_vm_release+0x90/0x90 [ 1269.436786][ T4307] do_vfs_ioctl+0xea8/0x2c50 [ 1269.441430][ T4307] ? security_file_ioctl+0x1bd/0x200 [ 1269.446751][ T4307] __se_sys_ioctl+0x1da/0x270 [ 1269.451523][ T4307] __x64_sys_ioctl+0x4a/0x70 [ 1269.456158][ T4307] do_syscall_64+0xbc/0xf0 [ 1269.460796][ T4307] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1269.466809][ T4307] RIP: 0033:0x459a29 [ 1269.470740][ T4307] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1269.490662][ T4307] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.499547][ T4307] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1269.507559][ T4307] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:14:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1269.515568][ T4307] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1269.523569][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1269.531569][ T4307] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:53 executing program 3 (fault-call:9 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1269.727020][ T4328] FAULT_INJECTION: forcing a failure. [ 1269.727020][ T4328] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.740353][ T4328] CPU: 1 PID: 4328 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1269.748474][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.758884][ T4328] Call Trace: [ 1269.762347][ T4328] dump_stack+0x191/0x1f0 [ 1269.767053][ T4328] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1269.773031][ T4328] should_fail+0xa3f/0xa50 [ 1269.777731][ T4328] __should_failslab+0x264/0x280 [ 1269.783633][ T4328] should_failslab+0x29/0x70 [ 1269.788288][ T4328] kmem_cache_alloc+0xd6/0xd10 [ 1269.793085][ T4328] ? mmu_topup_memory_caches+0x109/0x910 [ 1269.798768][ T4328] mmu_topup_memory_caches+0x109/0x910 [ 1269.804273][ T4328] kvm_mmu_load+0x61/0x3700 [ 1269.809253][ T4328] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1269.814937][ T4328] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1269.820874][ T4328] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1269.826692][ T4328] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1269.832594][ T4328] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1269.837499][ T4328] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1269.843433][ T4328] ? kvm_vm_release+0x90/0x90 [ 1269.848140][ T4328] do_vfs_ioctl+0xea8/0x2c50 [ 1269.852910][ T4328] ? security_file_ioctl+0x1bd/0x200 [ 1269.858713][ T4328] __se_sys_ioctl+0x1da/0x270 [ 1269.863597][ T4328] __x64_sys_ioctl+0x4a/0x70 [ 1269.868389][ T4328] do_syscall_64+0xbc/0xf0 [ 1269.872936][ T4328] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1269.878951][ T4328] RIP: 0033:0x459a29 [ 1269.882887][ T4328] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1269.902867][ T4328] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.911317][ T4328] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1269.919401][ T4328] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:14:54 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1269.927530][ T4328] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1269.935706][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1269.943874][ T4328] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1269.953273][ T3369] usb 2-1: new high-speed USB device number 30 using dummy_hcd 06:14:54 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1270.192497][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1270.312482][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1270.321592][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.334356][ T3369] usb 2-1: config 0 has no interface number 0 [ 1270.340786][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1270.352837][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1270.365902][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1270.375309][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.384997][ T3369] usb 2-1: config 0 descriptor?? [ 1270.425995][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1270.442042][ T3369] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1270.633366][ T3369] usb 2-1: USB disconnect, device number 30 [ 1270.652300][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1271.442390][ T3369] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1271.692411][ T3369] usb 2-1: Using ep0 maxpacket: 8 [ 1271.832481][ T3369] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1271.841271][ T3369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.852317][ T3369] usb 2-1: config 0 has no interface number 0 [ 1271.858724][ T3369] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1271.870115][ T3369] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1271.883566][ T3369] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1271.892962][ T3369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.902581][ T3369] usb 2-1: config 0 descriptor?? [ 1271.945769][ T3369] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1271.960324][ T3369] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 06:14:56 executing program 1: syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES32]], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800481, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x300) [ 1272.145982][ T3369] usb 2-1: USB disconnect, device number 31 [ 1272.175067][ T3369] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:14:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r2, &(0x7f00000000c0), 0x40000000000018b, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) 06:14:56 executing program 3 (fault-call:9 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:56 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c56"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:56 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1272.350014][ T4364] FAULT_INJECTION: forcing a failure. [ 1272.350014][ T4364] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.363632][ T4364] CPU: 1 PID: 4364 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1272.371592][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.382036][ T4364] Call Trace: [ 1272.385445][ T4364] dump_stack+0x191/0x1f0 [ 1272.389860][ T4364] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1272.395918][ T4364] should_fail+0xa3f/0xa50 [ 1272.400558][ T4364] __should_failslab+0x264/0x280 [ 1272.405539][ T4364] should_failslab+0x29/0x70 [ 1272.410483][ T4364] kmem_cache_alloc+0xd6/0xd10 [ 1272.415368][ T4364] ? mmu_topup_memory_caches+0x109/0x910 [ 1272.421105][ T4364] mmu_topup_memory_caches+0x109/0x910 [ 1272.426608][ T4364] kvm_mmu_load+0x61/0x3700 [ 1272.431256][ T4364] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1272.436941][ T4364] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1272.443009][ T4364] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1272.448703][ T4364] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1272.454619][ T4364] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1272.459522][ T4364] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1272.465611][ T4364] ? kvm_vm_release+0x90/0x90 [ 1272.470340][ T4364] do_vfs_ioctl+0xea8/0x2c50 [ 1272.475005][ T4364] ? security_file_ioctl+0x1bd/0x200 [ 1272.480329][ T4364] __se_sys_ioctl+0x1da/0x270 [ 1272.485041][ T4364] __x64_sys_ioctl+0x4a/0x70 [ 1272.489665][ T4364] do_syscall_64+0xbc/0xf0 [ 1272.494266][ T4364] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1272.500186][ T4364] RIP: 0033:0x459a29 [ 1272.504208][ T4364] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1272.524087][ T4364] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.532680][ T4364] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1272.540816][ T4364] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:14:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1272.548878][ T4364] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1272.556963][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1272.565250][ T4364] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:56 executing program 3 (fault-call:9 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1272.735817][ T4382] FAULT_INJECTION: forcing a failure. [ 1272.735817][ T4382] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.748688][ T4382] CPU: 1 PID: 4382 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1272.757544][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.767665][ T4382] Call Trace: [ 1272.771202][ T4382] dump_stack+0x191/0x1f0 [ 1272.775795][ T4382] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1272.781887][ T4382] should_fail+0xa3f/0xa50 [ 1272.786486][ T4382] __should_failslab+0x264/0x280 [ 1272.791701][ T4382] should_failslab+0x29/0x70 [ 1272.796574][ T4382] kmem_cache_alloc+0xd6/0xd10 [ 1272.801385][ T4382] ? mmu_topup_memory_caches+0x109/0x910 [ 1272.807079][ T4382] mmu_topup_memory_caches+0x109/0x910 [ 1272.812579][ T4382] kvm_mmu_load+0x61/0x3700 [ 1272.817140][ T4382] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1272.822817][ T4382] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1272.828760][ T4382] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1272.834460][ T4382] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1272.840366][ T4382] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1272.845493][ T4382] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1272.851434][ T4382] ? kvm_vm_release+0x90/0x90 [ 1272.856211][ T4382] do_vfs_ioctl+0xea8/0x2c50 [ 1272.860931][ T4382] ? security_file_ioctl+0x1bd/0x200 [ 1272.866278][ T4382] __se_sys_ioctl+0x1da/0x270 [ 1272.871137][ T4382] __x64_sys_ioctl+0x4a/0x70 [ 1272.875893][ T4382] do_syscall_64+0xbc/0xf0 [ 1272.880442][ T4382] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1272.886597][ T4382] RIP: 0033:0x459a29 [ 1272.890551][ T4382] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1272.910623][ T4382] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.919176][ T4382] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1272.927265][ T4382] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:14:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1272.935355][ T4382] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1272.943437][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1272.951428][ T4382] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:57 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:57 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c56"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x80000000, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x24, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9b7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008401}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$CAPI_INSTALLED(r5, 0x80024322) [ 1273.212809][ C1] net_ratelimit: 22 callbacks suppressed [ 1273.212829][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.225676][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.232626][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.239395][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:14:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) fallocate(r3, 0x20, 0x1, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x8}}, 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:14:57 executing program 3 (fault-call:9 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:57 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:57 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c56"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:14:57 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x8c}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@empty, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0xff, 0x2, 0x180, 0x80, 0x2f, r2}, {0x5, 0x0, 0x100000001, 0x8, 0x0, 0x0, 0x3, 0x8}, {0xfffffffffffffeff, 0x2, 0x6, 0x100000000}, 0x7fff, 0x6e6bb4, 0x3, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d5}, 0xa, @in=@loopback, 0x3503, 0xaedb5c206b67b5a4, 0x2, 0x3f, 0xfffeffff, 0x200, 0x5}}, 0xe8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1273.898430][ T4409] FAULT_INJECTION: forcing a failure. [ 1273.898430][ T4409] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.911692][ T4409] CPU: 1 PID: 4409 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1273.919567][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.930086][ T4409] Call Trace: [ 1273.933727][ T4409] dump_stack+0x191/0x1f0 [ 1273.938383][ T4409] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1273.948682][ T4409] should_fail+0xa3f/0xa50 [ 1273.953259][ T4409] __should_failslab+0x264/0x280 [ 1273.958242][ T4409] should_failslab+0x29/0x70 [ 1273.962870][ T4409] kmem_cache_alloc+0xd6/0xd10 [ 1273.967664][ T4409] ? mmu_topup_memory_caches+0x109/0x910 [ 1273.973332][ T4409] mmu_topup_memory_caches+0x109/0x910 [ 1273.978928][ T4409] kvm_mmu_load+0x61/0x3700 [ 1273.985045][ T4409] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1273.990791][ T4409] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1273.996740][ T4409] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1274.002410][ T4409] ? stack_trace_save+0x1b0/0x1b0 [ 1274.007870][ T4409] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1274.012771][ T4409] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1274.019010][ T4409] ? kvm_vm_release+0x90/0x90 [ 1274.023821][ T4409] do_vfs_ioctl+0xea8/0x2c50 [ 1274.028476][ T4409] ? security_file_ioctl+0x1bd/0x200 [ 1274.033830][ T4409] __se_sys_ioctl+0x1da/0x270 [ 1274.040073][ T4409] __x64_sys_ioctl+0x4a/0x70 [ 1274.044967][ T4409] do_syscall_64+0xbc/0xf0 [ 1274.049510][ T4409] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1274.055680][ T4409] RIP: 0033:0x459a29 [ 1274.059672][ T4409] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1274.080347][ T4409] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1274.089048][ T4409] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 06:14:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x4, &(0x7f0000000180)="11dca50d5e0bcfe47bf08361442869e54696316b4704bd6a9cd70787bc11880d91ca9dab8df268875dd95d0f28ae29fa0b044d13525c61d6975a32dee765fbdf0fbcbd048b29f30f8c1d63da419df5de6ca39d24dacd222ecf71a2ec36fea6abaa057c0409ec3295b26fc48ecf9d0c2d903ae5851bf976ee259e2017bb3d0c4c0cec925be98a6f4dca02104289196c3914809c0c7363827e53db978438b1e146d5c3ff49bf01407d946c1c207a3a48eb08") setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) tee(r7, r8, 0x9b, 0x0) fallocate(r6, 0x28, 0x9, 0x3f) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x20080) [ 1274.097154][ T4409] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1274.105435][ T4409] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1274.113493][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1274.121692][ T4409] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:58 executing program 3 (fault-call:9 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:14:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0x3ff) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1274.252862][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.259328][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.283129][T11355] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1274.323817][ T4432] FAULT_INJECTION: forcing a failure. [ 1274.323817][ T4432] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.337346][ T4432] CPU: 1 PID: 4432 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1274.345395][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.355634][ T4432] Call Trace: [ 1274.359151][ T4432] dump_stack+0x191/0x1f0 [ 1274.363667][ T4432] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1274.369623][ T4432] should_fail+0xa3f/0xa50 [ 1274.374117][ T4432] __should_failslab+0x264/0x280 [ 1274.379300][ T4432] should_failslab+0x29/0x70 [ 1274.384043][ T4432] kmem_cache_alloc+0xd6/0xd10 [ 1274.388928][ T4432] ? mmu_topup_memory_caches+0x109/0x910 [ 1274.394612][ T4432] mmu_topup_memory_caches+0x109/0x910 [ 1274.400200][ T4432] kvm_mmu_load+0x61/0x3700 [ 1274.404779][ T4432] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1274.410523][ T4432] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1274.416469][ T4432] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1274.422226][ T4432] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1274.428314][ T4432] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1274.433233][ T4432] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1274.439295][ T4432] ? kvm_vm_release+0x90/0x90 [ 1274.444186][ T4432] do_vfs_ioctl+0xea8/0x2c50 [ 1274.448839][ T4432] ? security_file_ioctl+0x1bd/0x200 [ 1274.454256][ T4432] __se_sys_ioctl+0x1da/0x270 [ 1274.459100][ T4432] __x64_sys_ioctl+0x4a/0x70 [ 1274.463721][ T4432] do_syscall_64+0xbc/0xf0 [ 1274.468184][ T4432] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1274.474098][ T4432] RIP: 0033:0x459a29 [ 1274.478027][ T4432] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1274.499501][ T4432] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1274.508152][ T4432] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1274.516605][ T4432] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:14:58 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1274.524893][ T4432] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1274.533365][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1274.541372][ T4432] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:14:58 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1274.616570][ T4443] QAT: Invalid ioctl 06:14:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1274.645160][ T4446] QAT: Invalid ioctl [ 1274.652881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.659287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.665992][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.672381][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.672519][T11355] usb 2-1: Using ep0 maxpacket: 8 06:14:58 executing program 3 (fault-call:9 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:14:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r5, &(0x7f00000000c0), 0x40000000000018b, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x1, 0x4) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x80}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x8000}}, [0x6, 0x100000001, 0x2, 0x3, 0x8, 0x8, 0x3, 0x8001, 0x0, 0x1, 0x647f, 0x7ff, 0xaf, 0x3f]}, &(0x7f0000000200)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1274.803068][T11355] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1274.811385][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.821748][T11355] usb 2-1: config 0 has no interface number 0 [ 1274.827984][T11355] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1274.839375][T11355] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.852491][T11355] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1274.861714][T11355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.927504][ T4462] FAULT_INJECTION: forcing a failure. [ 1274.927504][ T4462] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.940479][ T4462] CPU: 1 PID: 4462 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1274.948332][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.958429][ T4462] Call Trace: [ 1274.961791][ T4462] dump_stack+0x191/0x1f0 [ 1274.966185][ T4462] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1274.972147][ T4462] should_fail+0xa3f/0xa50 [ 1274.976648][ T4462] __should_failslab+0x264/0x280 [ 1274.981665][ T4462] should_failslab+0x29/0x70 [ 1274.986321][ T4462] kmem_cache_alloc+0xd6/0xd10 [ 1274.991144][ T4462] ? mmu_topup_memory_caches+0x109/0x910 [ 1274.996843][ T4462] mmu_topup_memory_caches+0x109/0x910 [ 1275.002338][ T4462] kvm_mmu_load+0x61/0x3700 [ 1275.006879][ T4462] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1275.012557][ T4462] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1275.020311][ T4462] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1275.025974][ T4462] ? stack_trace_save+0x1b0/0x1b0 [ 1275.031137][ T4462] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1275.036027][ T4462] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1275.041945][ T4462] ? kvm_vm_release+0x90/0x90 [ 1275.046644][ T4462] do_vfs_ioctl+0xea8/0x2c50 [ 1275.051278][ T4462] ? security_file_ioctl+0x1bd/0x200 [ 1275.056590][ T4462] __se_sys_ioctl+0x1da/0x270 [ 1275.061296][ T4462] __x64_sys_ioctl+0x4a/0x70 [ 1275.065903][ T4462] do_syscall_64+0xbc/0xf0 [ 1275.070351][ T4462] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1275.076266][ T4462] RIP: 0033:0x459a29 [ 1275.080187][ T4462] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1275.099827][ T4462] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.108269][ T4462] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1275.116255][ T4462] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:14:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1275.124347][ T4462] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1275.132348][ T4462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1275.140343][ T4462] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1275.152847][ T3369] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1275.153278][T11355] usb 2-1: config 0 descriptor?? 06:14:59 executing program 3 (fault-call:9 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1275.205857][T11355] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1275.241504][T11355] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1275.389869][ T4474] FAULT_INJECTION: forcing a failure. [ 1275.389869][ T4474] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.402778][ T4474] CPU: 1 PID: 4474 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1275.410631][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.420820][ T4474] Call Trace: [ 1275.424190][ T4474] dump_stack+0x191/0x1f0 [ 1275.428590][ T4474] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1275.434560][ T4474] should_fail+0xa3f/0xa50 [ 1275.439021][ T4474] __should_failslab+0x264/0x280 [ 1275.443996][ T4474] should_failslab+0x29/0x70 [ 1275.448617][ T4474] kmem_cache_alloc+0xd6/0xd10 [ 1275.453738][ T4474] ? mmu_topup_memory_caches+0x109/0x910 [ 1275.459434][ T4474] mmu_topup_memory_caches+0x109/0x910 [ 1275.464937][ T4474] kvm_mmu_load+0x61/0x3700 [ 1275.469495][ T4474] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1275.475279][ T4474] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1275.481269][ T4474] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1275.486956][ T4474] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1275.492848][ T4474] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1275.497751][ T4474] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1275.503658][ T4474] ? kvm_vm_release+0x90/0x90 [ 1275.508389][ T4474] do_vfs_ioctl+0xea8/0x2c50 [ 1275.513064][ T4474] ? security_file_ioctl+0x1bd/0x200 [ 1275.518415][ T4474] __se_sys_ioctl+0x1da/0x270 [ 1275.523123][ T4474] __x64_sys_ioctl+0x4a/0x70 [ 1275.527745][ T4474] do_syscall_64+0xbc/0xf0 [ 1275.532205][ T4474] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1275.538126][ T4474] RIP: 0033:0x459a29 [ 1275.542030][ T4474] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1275.561741][ T4474] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.570180][ T4474] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1275.578179][ T4474] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1275.586354][ T4474] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1275.594340][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1275.602339][ T4474] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1275.684550][T11523] usb 2-1: USB disconnect, device number 32 [ 1275.704162][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1275.724033][ T3369] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1275.732828][ T3369] usb 5-1: config 0 has no interface number 0 [ 1275.739023][ T3369] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1275.750128][ T3369] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1275.842679][ T3369] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1275.851889][ T3369] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1275.860195][ T3369] usb 5-1: Manufacturer: syz [ 1275.866128][ T3369] usb 5-1: config 0 descriptor?? [ 1275.913989][ T3369] usb 5-1: BUG? WUSB host has no security descriptors [ 1275.921706][ T3369] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1275.930687][ T3369] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1276.352552][ T3369] hwa-hc 5-1:0.66: error waiting for HC to reset: -71 [ 1276.359545][ T3369] hwa-hc 5-1:0.66: can't setup: -71 [ 1276.365104][ T3369] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1276.372661][ T3369] hwa-hc 5-1:0.66: Cannot add HCD: -71 [ 1276.378692][ T3369] hwa-hc: probe of 5-1:0.66 failed with error -71 [ 1276.389751][ T3369] usb 5-1: USB disconnect, device number 101 [ 1276.482371][T11523] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1276.734157][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1276.852598][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1276.860874][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.871159][T11523] usb 2-1: config 0 has no interface number 0 [ 1276.877596][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1276.888887][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1276.901936][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1276.911119][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.922902][T11523] usb 2-1: config 0 descriptor?? [ 1276.965516][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1276.980242][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 06:15:01 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c94800000001090212d3afd05ea851187f6d2e6b61de29352400010000000009041c00029126c90009058977cc66"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:15:01 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:15:01 executing program 3 (fault-call:9 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:15:01 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1277.166182][T11523] usb 2-1: USB disconnect, device number 33 [ 1277.193913][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1277.346240][ T4497] FAULT_INJECTION: forcing a failure. [ 1277.346240][ T4497] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.359149][ T4497] CPU: 1 PID: 4497 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1277.367008][ T4497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1277.377118][ T4497] Call Trace: [ 1277.380564][ T4497] dump_stack+0x191/0x1f0 [ 1277.384932][ T4497] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1277.390856][ T4497] should_fail+0xa3f/0xa50 [ 1277.395316][ T4497] __should_failslab+0x264/0x280 [ 1277.400291][ T4497] should_failslab+0x29/0x70 [ 1277.404907][ T4497] kmem_cache_alloc+0xd6/0xd10 [ 1277.409712][ T4497] ? mmu_topup_memory_caches+0x109/0x910 [ 1277.415382][ T4497] mmu_topup_memory_caches+0x109/0x910 [ 1277.420897][ T4497] kvm_mmu_load+0x61/0x3700 [ 1277.425455][ T4497] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1277.431118][ T4497] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1277.437056][ T4497] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1277.442744][ T4497] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1277.448641][ T4497] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1277.453546][ T4497] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1277.459465][ T4497] ? kvm_vm_release+0x90/0x90 [ 1277.464177][ T4497] do_vfs_ioctl+0xea8/0x2c50 [ 1277.468815][ T4497] ? security_file_ioctl+0x1bd/0x200 [ 1277.474130][ T4497] __se_sys_ioctl+0x1da/0x270 [ 1277.478837][ T4497] __x64_sys_ioctl+0x4a/0x70 [ 1277.483484][ T4497] do_syscall_64+0xbc/0xf0 [ 1277.488369][ T4497] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1277.494273][ T4497] RIP: 0033:0x459a29 [ 1277.498189][ T4497] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1277.517821][ T4497] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.526276][ T4497] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1277.534284][ T4497] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:15:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_pts(r2, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDIO(r7, 0x80345621, &(0x7f0000000080)) r8 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1277.542270][ T4497] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1277.550263][ T4497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1277.558248][ T4497] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:15:01 executing program 3 (fault-call:9 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sched_rr_get_interval(r6, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40106614, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) readahead(r8, 0x313, 0x8000) [ 1277.723332][T11355] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1277.798397][ T4513] FAULT_INJECTION: forcing a failure. [ 1277.798397][ T4513] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.811754][ T4513] CPU: 1 PID: 4513 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1277.819610][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1277.829784][ T4513] Call Trace: [ 1277.833150][ T4513] dump_stack+0x191/0x1f0 [ 1277.837553][ T4513] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1277.843509][ T4513] should_fail+0xa3f/0xa50 [ 1277.847970][ T4513] __should_failslab+0x264/0x280 [ 1277.852956][ T4513] should_failslab+0x29/0x70 [ 1277.857605][ T4513] kmem_cache_alloc+0xd6/0xd10 [ 1277.862411][ T4513] ? mmu_topup_memory_caches+0x109/0x910 [ 1277.868203][ T4513] mmu_topup_memory_caches+0x109/0x910 [ 1277.872602][T11523] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1277.873711][ T4513] kvm_mmu_load+0x61/0x3700 [ 1277.873766][ T4513] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1277.873825][ T4513] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1277.897687][ T4513] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1277.903412][ T4513] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1277.909436][ T4513] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1277.914339][ T4513] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1277.920281][ T4513] ? kvm_vm_release+0x90/0x90 [ 1277.925028][ T4513] do_vfs_ioctl+0xea8/0x2c50 [ 1277.929669][ T4513] ? security_file_ioctl+0x1bd/0x200 [ 1277.935095][ T4513] __se_sys_ioctl+0x1da/0x270 [ 1277.939835][ T4513] __x64_sys_ioctl+0x4a/0x70 [ 1277.944461][ T4513] do_syscall_64+0xbc/0xf0 [ 1277.948897][ T4513] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1277.954810][ T4513] RIP: 0033:0x459a29 [ 1277.958744][ T4513] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1277.978453][ T4513] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.986898][ T4513] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 06:15:02 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1277.994887][ T4513] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1278.003031][ T4513] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1278.011041][ T4513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1278.019129][ T4513] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:15:02 executing program 3 (fault-call:9 fault-nth:19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1278.112814][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1278.230640][ T4529] FAULT_INJECTION: forcing a failure. [ 1278.230640][ T4529] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.236757][T11523] usb 2-1: config index 0 descriptor too short (expected 54034, got 36) [ 1278.243914][ T4529] CPU: 1 PID: 4529 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1278.251800][T11523] usb 2-1: config 208 has too many interfaces: 175, using maximum allowed: 32 [ 1278.259562][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.259583][ T4529] Call Trace: [ 1278.259644][ T4529] dump_stack+0x191/0x1f0 [ 1278.259688][ T4529] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1278.259730][ T4529] should_fail+0xa3f/0xa50 [ 1278.259786][ T4529] __should_failslab+0x264/0x280 [ 1278.268736][T11523] usb 2-1: config 208 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.278711][ T4529] should_failslab+0x29/0x70 [ 1278.278771][ T4529] kmem_cache_alloc+0xd6/0xd10 [ 1278.282074][T11523] usb 2-1: config 208 has 0 interfaces, different from the descriptor's value: 175 [ 1278.286365][ T4529] ? mmu_topup_memory_caches+0x109/0x910 [ 1278.286434][ T4529] mmu_topup_memory_caches+0x109/0x910 [ 1278.292429][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1278.296756][ T4529] kvm_mmu_load+0x61/0x3700 [ 1278.301712][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.311960][ T4529] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1278.312026][ T4529] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1278.375702][ T4529] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1278.381393][ T4529] ? stack_trace_save+0x1b0/0x1b0 [ 1278.386506][ T4529] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1278.391389][ T4529] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1278.397439][ T4529] ? kvm_vm_release+0x90/0x90 [ 1278.402155][ T4529] do_vfs_ioctl+0xea8/0x2c50 [ 1278.406793][ T4529] ? security_file_ioctl+0x1bd/0x200 [ 1278.412108][ T4529] __se_sys_ioctl+0x1da/0x270 [ 1278.412721][ C0] net_ratelimit: 18 callbacks suppressed [ 1278.412740][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.416841][ T4529] __x64_sys_ioctl+0x4a/0x70 [ 1278.416878][ T4529] do_syscall_64+0xbc/0xf0 [ 1278.416983][ T4529] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1278.423045][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.428498][ T4529] RIP: 0033:0x459a29 [ 1278.453094][ T4529] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1278.472750][ T4529] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.481206][ T4529] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1278.489188][ T4529] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1278.497171][ T4529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1278.505170][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1278.513172][ T4529] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1278.554049][T11355] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1278.562342][T11355] usb 5-1: config 0 has no interface number 0 [ 1278.568526][T11355] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1278.568613][T11355] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1278.612607][T11523] usb 2-1: string descriptor 0 read error: -71 [ 1278.621246][T11523] usb 2-1: USB disconnect, device number 34 [ 1278.673024][T11355] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1278.682349][T11355] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1278.690496][T11355] usb 5-1: Manufacturer: syz [ 1278.697281][T11355] usb 5-1: config 0 descriptor?? [ 1278.755031][T11355] usb 5-1: BUG? WUSB host has no security descriptors [ 1278.763097][T11355] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1278.770953][T11355] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1278.812854][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.819101][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.825598][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.831690][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.892717][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.898875][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.172764][T11355] hwa-hc 5-1:0.66: error waiting for HC to reset: -71 [ 1279.179925][T11355] hwa-hc 5-1:0.66: can't setup: -71 [ 1279.185574][T11355] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1279.193184][T11355] hwa-hc 5-1:0.66: Cannot add HCD: -71 [ 1279.199141][T11355] hwa-hc: probe of 5-1:0.66 failed with error -71 [ 1279.210576][T11355] usb 5-1: USB disconnect, device number 102 [ 1279.362483][ T2346] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1279.602319][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1279.612746][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.618804][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.722820][ T2346] usb 2-1: config index 0 descriptor too short (expected 54034, got 36) [ 1279.731429][ T2346] usb 2-1: config 208 has too many interfaces: 175, using maximum allowed: 32 [ 1279.740499][ T2346] usb 2-1: config 208 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.751258][ T2346] usb 2-1: config 208 has 0 interfaces, different from the descriptor's value: 175 [ 1279.760733][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1279.770065][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.052787][ T2346] usb 2-1: string descriptor 0 read error: -71 [ 1280.060548][ T2346] usb 2-1: USB disconnect, device number 35 06:15:04 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) read$char_usb(r0, &(0x7f0000000040), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7fff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) 06:15:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:04 executing program 3 (fault-call:9 fault-nth:20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:15:04 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:15:04 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1280.431545][ T4544] FAULT_INJECTION: forcing a failure. [ 1280.431545][ T4544] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.444765][ T4544] CPU: 1 PID: 4544 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1280.452619][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.462699][ T4544] Call Trace: [ 1280.466040][ T4544] dump_stack+0x191/0x1f0 [ 1280.470567][ T4544] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1280.476665][ T4544] should_fail+0xa3f/0xa50 [ 1280.481117][ T4544] __should_failslab+0x264/0x280 [ 1280.486078][ T4544] should_failslab+0x29/0x70 [ 1280.490692][ T4544] kmem_cache_alloc+0xd6/0xd10 [ 1280.495473][ T4544] ? mmu_topup_memory_caches+0x109/0x910 [ 1280.501136][ T4544] mmu_topup_memory_caches+0x109/0x910 [ 1280.506622][ T4544] kvm_mmu_load+0x61/0x3700 [ 1280.511155][ T4544] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1280.516817][ T4544] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1280.522740][ T4544] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1280.528396][ T4544] ? stack_trace_save+0x1b0/0x1b0 [ 1280.533529][ T4544] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1280.538423][ T4544] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1280.544337][ T4544] ? kvm_vm_release+0x90/0x90 [ 1280.549037][ T4544] do_vfs_ioctl+0xea8/0x2c50 [ 1280.553689][ T4544] ? security_file_ioctl+0x1bd/0x200 [ 1280.559000][ T4544] __se_sys_ioctl+0x1da/0x270 [ 1280.563701][ T4544] __x64_sys_ioctl+0x4a/0x70 [ 1280.568324][ T4544] do_syscall_64+0xbc/0xf0 [ 1280.572771][ T4544] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1280.578677][ T4544] RIP: 0033:0x459a29 [ 1280.582600][ T4544] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1280.602229][ T4544] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.610665][ T4544] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1280.618650][ T4544] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:15:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1280.626648][ T4544] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1280.634729][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1280.643412][ T4544] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:15:04 executing program 3 (fault-call:9 fault-nth:21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="7c4afb353e438b79022488b0a32961fb296bcb0a16d654a8a35e6741e417c5a8abf5695939bff5f1d314fe71cb83fc3f344485ef528c63c32ade7339377278ebd7c32b", @ANYRESOCT, @ANYPTR64, @ANYPTR64, @ANYBLOB="dd493ccc4cbf1abf91fcd90d87d299c65afacd8ccc8029a14affdf332b07fe38cab5bab16387cdc320ed159d0b588f6086077f87807fe39c78261ae40d45fff992b90e6e4966d5a66abe7f3c83b4d748e6f9837d9957f20ff34713f25e20f02bd9720f7a321d75b04b50c3d1c11d5b478e0c", @ANYBLOB="d3c26e12ee954426b14630a303f61376bd8fa1bf9085cec6a8fc619b672647fc47e812c070129e1f665685ae40fdcc1efafe96e7236eb3c4660a7e3a43f06b0a70b9640bc91908d51fd2819a3df0cbefa157c1ee40b7816499ac91b378f0297d83c91c5aada6c035ab65abe1c08c6d1b7bb9bde3567a10f9dd98ce25b47a3474097885aed38ec05f1a19880f4729f0fc3674ccfa1308e949187c24b63ee377e1b7f3636a484d6acc63d0109b33dd58bc2b8e1ff5f0d9580e72d393cfa776347dbf9beb51d9b13ec8a33086f973763e6d", @ANYRES64=r1, @ANYRES16=r2, @ANYRES16, @ANYRES64=0x0], @ANYRESOCT, @ANYRES16, @ANYRESDEC=r4, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESOCT]], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:15:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x4000000000080002, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r3, &(0x7f00000000c0), 0x40000000000018b, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0xb1b6, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0xa}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1280.812656][ T2346] usb 5-1: new high-speed USB device number 103 using dummy_hcd 06:15:05 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1280.948967][ T4560] FAULT_INJECTION: forcing a failure. [ 1280.948967][ T4560] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.964057][ T4560] CPU: 0 PID: 4560 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1280.971945][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.982039][ T4560] Call Trace: [ 1280.985373][ T4560] dump_stack+0x191/0x1f0 [ 1280.989913][ T4560] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1280.995862][ T4560] should_fail+0xa3f/0xa50 [ 1281.000311][ T4560] __should_failslab+0x264/0x280 [ 1281.005270][ T4560] should_failslab+0x29/0x70 [ 1281.009883][ T4560] kmem_cache_alloc+0xd6/0xd10 [ 1281.014686][ T4560] ? mmu_topup_memory_caches+0x109/0x910 [ 1281.020894][ T4560] mmu_topup_memory_caches+0x109/0x910 [ 1281.026376][ T4560] kvm_mmu_load+0x61/0x3700 [ 1281.030913][ T4560] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1281.036594][ T4560] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1281.042532][ T4560] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1281.048184][ T4560] ? stack_trace_save+0x1b0/0x1b0 [ 1281.053323][ T4560] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1281.058209][ T4560] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1281.064132][ T4560] ? kvm_vm_release+0x90/0x90 [ 1281.069004][ T4560] do_vfs_ioctl+0xea8/0x2c50 [ 1281.073639][ T4560] ? security_file_ioctl+0x1bd/0x200 [ 1281.078982][ T4560] __se_sys_ioctl+0x1da/0x270 [ 1281.083688][ T4560] __x64_sys_ioctl+0x4a/0x70 [ 1281.088296][ T4560] do_syscall_64+0xbc/0xf0 [ 1281.092752][ T4560] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1281.098659][ T4560] RIP: 0033:0x459a29 [ 1281.102576][ T4560] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1281.122201][ T4560] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.130687][ T4560] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1281.138689][ T4560] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1281.146688][ T4560] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1281.155114][ T4560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1281.163104][ T4560] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:15:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:05 executing program 3 (fault-call:9 fault-nth:22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1281.342795][ T2346] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1281.351095][ T2346] usb 5-1: config 0 has no interface number 0 [ 1281.357577][ T2346] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1281.368962][ T2346] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1281.369712][ T4579] FAULT_INJECTION: forcing a failure. [ 1281.369712][ T4579] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.392597][ T4579] CPU: 0 PID: 4579 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1281.400444][ T4579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1281.410545][ T4579] Call Trace: [ 1281.413892][ T4579] dump_stack+0x191/0x1f0 [ 1281.418256][ T4579] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1281.424278][ T4579] should_fail+0xa3f/0xa50 [ 1281.428730][ T4579] __should_failslab+0x264/0x280 [ 1281.433699][ T4579] should_failslab+0x29/0x70 [ 1281.438317][ T4579] kmem_cache_alloc+0xd6/0xd10 [ 1281.443124][ T4579] ? mmu_topup_memory_caches+0x109/0x910 [ 1281.448787][ T4579] mmu_topup_memory_caches+0x109/0x910 [ 1281.454364][ T4579] kvm_mmu_load+0x61/0x3700 [ 1281.458901][ T4579] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1281.464581][ T4579] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1281.470508][ T4579] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1281.476268][ T4579] ? stack_trace_save+0x1b0/0x1b0 [ 1281.481405][ T4579] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1281.486292][ T4579] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1281.492225][ T4579] ? kvm_vm_release+0x90/0x90 [ 1281.496955][ T4579] do_vfs_ioctl+0xea8/0x2c50 [ 1281.501606][ T4579] ? security_file_ioctl+0x1bd/0x200 [ 1281.506945][ T4579] __se_sys_ioctl+0x1da/0x270 [ 1281.511651][ T4579] __x64_sys_ioctl+0x4a/0x70 [ 1281.516268][ T4579] do_syscall_64+0xbc/0xf0 [ 1281.520886][ T4579] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1281.526793][ T4579] RIP: 0033:0x459a29 [ 1281.530712][ T4579] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1281.550452][ T4579] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.558902][ T4579] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1281.566911][ T4579] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1281.574936][ T4579] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1281.583186][ T4579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1281.591258][ T4579] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:15:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r2, &(0x7f00000000c0), 0x40000000000018b, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x5, 0x4) fstat(r0, &(0x7f0000000040)) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1281.642681][ T2346] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1281.651854][ T2346] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1281.660261][ T2346] usb 5-1: Manufacturer: syz [ 1281.696828][ T2346] usb 5-1: config 0 descriptor?? 06:15:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1281.746461][ T2346] usb 5-1: BUG? WUSB host has no security descriptors [ 1281.768969][ T2346] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1281.792582][ T2346] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1282.173177][ T2346] hwa-hc 5-1:0.66: error waiting for HC to reset: -71 [ 1282.180081][ T2346] hwa-hc 5-1:0.66: can't setup: -71 [ 1282.185602][ T2346] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1282.193224][ T2346] hwa-hc 5-1:0.66: Cannot add HCD: -71 [ 1282.199173][ T2346] hwa-hc: probe of 5-1:0.66 failed with error -71 [ 1282.210027][ T2346] usb 5-1: USB disconnect, device number 103 06:15:06 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:15:06 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:15:06 executing program 3 (fault-call:9 fault-nth:23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r4, &(0x7f00000000c0), 0x40000000000018b, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x35a8cf7bec6be102, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4411d}, 0x40) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0xfd8b) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "59bf724ef3ea99b26d97b2e580e40a7ec9fe2e7948a1868f91531a931af5dd77f14d0ac10351926d34c56191904ffeb128f033f633fbabc3c8ea4bb8fd40ac4c5350530a93ec0b5506a0dbbb783394693c52436a5b4dc362d3c71dd1be79a8e4c8a93a12d8d26c527a25796fb991b28fc9e55e90f83a0672aaf0517e92c4443e8c50613ae86f8808e3ec7693409f1153833e4909f18418b4f0b49cb1641021aa5ab3327c44fb21407b671ec1b0398cbe0c7c84386d41ed104c05a182e69cd76c24b26098922ea3293ba7d0e8c6e2dff2bcf258fabd16ba25dbc3d5dd9a7bd22741d68f643439ad6fe3c1bfa2c49155f3bac29f7c578821756673e3291abef2f3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r8}}, 0x120) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r8}}, 0xc) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:15:06 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40400, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@dev, @local, 0x0}, &(0x7f00000000c0)=0xc) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r2, 0x36}, 0x10) 06:15:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1282.789706][ T4604] FAULT_INJECTION: forcing a failure. [ 1282.789706][ T4604] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.802765][ T4604] CPU: 0 PID: 4604 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1282.810622][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.820721][ T4604] Call Trace: [ 1282.824448][ T4604] dump_stack+0x191/0x1f0 [ 1282.828852][ T4604] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1282.834805][ T4604] should_fail+0xa3f/0xa50 [ 1282.839282][ T4604] __should_failslab+0x264/0x280 [ 1282.844244][ T4604] should_failslab+0x29/0x70 [ 1282.848863][ T4604] kmem_cache_alloc+0xd6/0xd10 [ 1282.853683][ T4604] ? mmu_topup_memory_caches+0x109/0x910 [ 1282.859356][ T4604] mmu_topup_memory_caches+0x109/0x910 [ 1282.864851][ T4604] kvm_mmu_load+0x61/0x3700 [ 1282.869472][ T4604] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1282.875136][ T4604] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1282.881068][ T4604] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1282.886757][ T4604] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1282.892676][ T4604] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1282.897651][ T4604] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1282.903581][ T4604] ? kvm_vm_release+0x90/0x90 [ 1282.908280][ T4604] do_vfs_ioctl+0xea8/0x2c50 [ 1282.912909][ T4604] ? security_file_ioctl+0x1bd/0x200 [ 1282.918220][ T4604] __se_sys_ioctl+0x1da/0x270 [ 1282.922929][ T4604] __x64_sys_ioctl+0x4a/0x70 [ 1282.927536][ T4604] do_syscall_64+0xbc/0xf0 [ 1282.931982][ T4604] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1282.937888][ T4604] RIP: 0033:0x459a29 [ 1282.941892][ T4604] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1282.961514][ T4604] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.970126][ T4604] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1282.978130][ T4604] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1282.986139][ T4604] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1282.994132][ T4604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1283.002113][ T4604] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:15:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:07 executing program 3 (fault-call:9 fault-nth:24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:15:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x20) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000100)={0x5, "35abc68dffcf563acd52460dd37fb2ccb1ae553a97ca1f2f56f6bf4c67c87ba8", 0x1, 0xffffffff, 0x5, 0x3000000, 0x2}) membarrier(0x10, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000080)=0xffffff81, 0x4) [ 1283.172843][ T2346] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1283.203901][T11523] usb 5-1: new high-speed USB device number 104 using dummy_hcd 06:15:07 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1283.303423][ T4626] FAULT_INJECTION: forcing a failure. [ 1283.303423][ T4626] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.316977][ T4626] CPU: 0 PID: 4626 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1283.324833][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1283.334911][ T4626] Call Trace: [ 1283.338248][ T4626] dump_stack+0x191/0x1f0 [ 1283.342626][ T4626] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1283.348543][ T4626] should_fail+0xa3f/0xa50 [ 1283.352994][ T4626] __should_failslab+0x264/0x280 [ 1283.357957][ T4626] should_failslab+0x29/0x70 [ 1283.362571][ T4626] kmem_cache_alloc+0xd6/0xd10 [ 1283.367442][ T4626] ? mmu_topup_memory_caches+0x109/0x910 [ 1283.373106][ T4626] mmu_topup_memory_caches+0x109/0x910 [ 1283.378603][ T4626] kvm_mmu_load+0x61/0x3700 [ 1283.383140][ T4626] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1283.388905][ T4626] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1283.394931][ T4626] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1283.400626][ T4626] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1283.406517][ T4626] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1283.411412][ T4626] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1283.417330][ T4626] ? kvm_vm_release+0x90/0x90 [ 1283.422040][ T4626] do_vfs_ioctl+0xea8/0x2c50 [ 1283.426673][ T4626] ? security_file_ioctl+0x1bd/0x200 [ 1283.431992][ T4626] __se_sys_ioctl+0x1da/0x270 [ 1283.436710][ T4626] __x64_sys_ioctl+0x4a/0x70 [ 1283.441321][ T4626] do_syscall_64+0xbc/0xf0 [ 1283.445764][ T4626] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1283.451667][ T4626] RIP: 0033:0x459a29 [ 1283.455587][ T4626] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1283.475225][ T4626] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1283.483679][ T4626] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1283.491690][ T4626] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:15:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1283.499682][ T4626] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1283.507668][ T4626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1283.515667][ T4626] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 [ 1283.572670][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1283.693026][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1283.701375][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.711694][ T2346] usb 2-1: config 0 has no interface number 0 [ 1283.717974][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1283.729308][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1283.742496][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1283.754489][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.772779][ C1] net_ratelimit: 22 callbacks suppressed [ 1283.772801][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.784951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1283.791323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.797629][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1283.805256][T11523] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1283.813497][T11523] usb 5-1: config 0 has no interface number 0 [ 1283.813754][ T2346] usb 2-1: config 0 descriptor?? [ 1283.819964][T11523] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1283.836534][T11523] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1283.865765][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1283.879925][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1283.944129][T11523] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1283.953295][T11523] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1283.961395][T11523] usb 5-1: Manufacturer: syz [ 1283.968451][T11523] usb 5-1: config 0 descriptor?? [ 1284.014273][T11523] usb 5-1: BUG? WUSB host has no security descriptors [ 1284.021999][T11523] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1284.030283][T11523] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1284.068515][ T12] usb 2-1: USB disconnect, device number 36 [ 1284.077326][ T12] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 1284.652627][T11523] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1284.659969][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (0000000046815d6f [0000000046815d6f], 8006, f00, 0, 000000009561b52b, 5) UNIMPLEMENTED [ 1284.673307][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (0000000046815d6f [0000000046815d6f], 8006, f00, 0, 000000009561b52b, 5) UNIMPLEMENTED [ 1284.686757][T11523] hwa-hc 5-1:0.66: wusbhc_rh_control (0000000046815d6f [0000000046815d6f], 8006, f00, 0, 000000009561b52b, 5) UNIMPLEMENTED [ 1284.699908][T11523] usb usb41: unable to get BOS descriptor or descriptor too short [ 1284.709445][T11523] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1284.718845][T11523] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1284.727130][T11523] usb usb41: Product: Wireless USB HWA host controller [ 1284.734193][T11523] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1284.740868][T11523] usb usb41: SerialNumber: wusb-hwa [ 1284.749432][T11523] hub 41-0:1.0: USB hub found [ 1284.754808][T11523] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1284.812970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.819271][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.842978][ T2346] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1284.855550][T11355] usb 5-1: USB disconnect, device number 104 [ 1284.863055][T11355] hwa-hc 5-1:0.66: remove, state 1 [ 1284.868302][T11355] usb usb41: USB disconnect, device number 1 [ 1284.878506][T11355] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1285.052732][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.058759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1285.064981][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.070938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1285.082313][ T2346] usb 2-1: Using ep0 maxpacket: 8 [ 1285.202520][ T2346] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1285.210786][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.221211][ T2346] usb 2-1: config 0 has no interface number 0 [ 1285.227421][ T2346] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1285.238729][ T2346] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1285.252026][ T2346] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1285.261329][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.270475][ T2346] usb 2-1: config 0 descriptor?? 06:15:09 executing program 4: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:15:09 executing program 3 (fault-call:9 fault-nth:25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1285.315953][ T2346] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1285.331177][ T2346] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 06:15:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x4, 0x4) sendmmsg(r4, &(0x7f00000000c0), 0x40000000000018b, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100102}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x502, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) r7 = signalfd4(r3, &(0x7f0000000040), 0x8, 0x40000) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000080)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 06:15:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:09 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1285.480531][ T4663] FAULT_INJECTION: forcing a failure. [ 1285.480531][ T4663] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.493885][ T4663] CPU: 0 PID: 4663 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1285.501750][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.511841][ T4663] Call Trace: [ 1285.515209][ T4663] dump_stack+0x191/0x1f0 [ 1285.519617][ T4663] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1285.525570][ T4663] should_fail+0xa3f/0xa50 [ 1285.530084][ T4663] __should_failslab+0x264/0x280 [ 1285.535177][ T4663] should_failslab+0x29/0x70 [ 1285.539830][ T4663] kmem_cache_alloc+0xd6/0xd10 [ 1285.544631][ T4663] ? mmu_topup_memory_caches+0x109/0x910 [ 1285.550301][ T4663] mmu_topup_memory_caches+0x109/0x910 [ 1285.555792][ T4663] kvm_mmu_load+0x61/0x3700 [ 1285.560330][ T4663] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1285.566001][ T4663] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1285.571939][ T4663] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1285.577626][ T4663] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1285.583545][ T4663] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1285.588442][ T4663] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1285.594385][ T4663] ? kvm_vm_release+0x90/0x90 [ 1285.599087][ T4663] do_vfs_ioctl+0xea8/0x2c50 [ 1285.603743][ T4663] ? security_file_ioctl+0x1bd/0x200 [ 1285.609152][ T4663] __se_sys_ioctl+0x1da/0x270 [ 1285.613858][ T4663] __x64_sys_ioctl+0x4a/0x70 [ 1285.618468][ T4663] do_syscall_64+0xbc/0xf0 [ 1285.622927][ T4663] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1285.628930][ T4663] RIP: 0033:0x459a29 [ 1285.632847][ T4663] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1285.653422][ T4663] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.661877][ T4663] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1285.669866][ T4663] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1285.677851][ T4663] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1285.685855][ T4663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1285.693848][ T4663] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:15:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) 06:15:09 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffff7d19, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x7, 0x5000000, 0xc7c9}) read$char_usb(r0, &(0x7f00000000c0)=""/66, 0x42) [ 1285.762424][T11523] usb 2-1: USB disconnect, device number 37 [ 1285.783996][T11523] ldusb 2-1:0.28: LD USB Device #0 now disconnected 06:15:09 executing program 3 (fault-call:9 fault-nth:26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x12) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1500cf2ec2d5664b) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1285.855677][ T2346] usb 5-1: new high-speed USB device number 105 using dummy_hcd 06:15:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0xfd8b) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'caif0\x00'}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f00000004c0)={{0x2, 0x0, @descriptor="c3512bf3dc88ea56"}}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r5}}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000540)) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8}}, 0x35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1286.003480][ T4676] FAULT_INJECTION: forcing a failure. [ 1286.003480][ T4676] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.016530][ T4676] CPU: 0 PID: 4676 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 1286.024389][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.034487][ T4676] Call Trace: [ 1286.037844][ T4676] dump_stack+0x191/0x1f0 [ 1286.042210][ T4676] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1286.048148][ T4676] should_fail+0xa3f/0xa50 [ 1286.052607][ T4676] __should_failslab+0x264/0x280 [ 1286.057586][ T4676] should_failslab+0x29/0x70 [ 1286.062227][ T4676] kmem_cache_alloc+0xd6/0xd10 [ 1286.067019][ T4676] ? mmu_topup_memory_caches+0x109/0x910 [ 1286.072685][ T4676] mmu_topup_memory_caches+0x109/0x910 [ 1286.078172][ T4676] kvm_mmu_load+0x61/0x3700 [ 1286.082712][ T4676] ? kvm_lapic_sync_to_vapic+0xa1f/0xe20 [ 1286.088373][ T4676] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1286.094297][ T4676] kvm_arch_vcpu_ioctl_run+0x89b4/0xd410 [ 1286.100187][ T4676] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 1286.106128][ T4676] kvm_vcpu_ioctl+0x1099/0x1d00 [ 1286.111048][ T4676] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 1286.116975][ T4676] ? kvm_vm_release+0x90/0x90 [ 1286.121673][ T4676] do_vfs_ioctl+0xea8/0x2c50 [ 1286.126302][ T4676] ? security_file_ioctl+0x1bd/0x200 [ 1286.131795][ T4676] __se_sys_ioctl+0x1da/0x270 [ 1286.136523][ T4676] __x64_sys_ioctl+0x4a/0x70 [ 1286.141152][ T4676] do_syscall_64+0xbc/0xf0 [ 1286.145616][ T4676] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1286.151527][ T4676] RIP: 0033:0x459a29 [ 1286.155449][ T4676] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1286.175172][ T4676] RSP: 002b:00007f7689ceec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.183610][ T4676] RAX: ffffffffffffffda RBX: 00007f7689ceec90 RCX: 0000000000459a29 [ 1286.191598][ T4676] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 06:15:10 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e213400000000010000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 06:15:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800]}}]}]}, 0x8c}}, 0x0) [ 1286.199587][ T4676] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1286.207585][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7689cef6d4 [ 1286.215575][ T4676] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 0000000000000006 06:15:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0xffffff6e, 0xfa00, {0x0, &(0x7f0000000000), 0x321, 0x4}}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)=0xfffffffffffffffc) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r6, r2}}, 0x18) [ 1286.396804][ T2346] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1286.405312][ T2346] usb 5-1: config 0 has no interface number 0 [ 1286.411520][ T2346] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1286.422771][ T2346] usb 5-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1286.512455][T11523] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1286.533361][ T2346] usb 5-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15 [ 1286.542712][ T2346] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 1286.550836][ T2346] usb 5-1: Manufacturer: syz [ 1286.557064][ T2346] usb 5-1: config 0 descriptor?? [ 1286.614979][ T2346] usb 5-1: BUG? WUSB host has no security descriptors [ 1286.623037][ T2346] hwa-hc 5-1:0.66: Wireless USB HWA host controller [ 1286.631034][ T2346] hwa-hc 5-1:0.66: new USB bus registered, assigned bus number 41 [ 1286.762441][T11523] usb 2-1: Using ep0 maxpacket: 8 [ 1286.893867][T11523] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1286.902063][T11523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.912416][T11523] usb 2-1: config 0 has no interface number 0 [ 1286.919138][T11523] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 1286.930920][T11523] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1286.943986][T11523] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 1286.953191][T11523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.962758][T11523] usb 2-1: config 0 descriptor?? [ 1287.005509][T11523] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 1287.028785][T11523] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 1287.222826][ T4673] ===================================================== [ 1287.229825][ T4673] BUG: KMSAN: uninit-value in __vfs_read+0x1a9/0xc90 [ 1287.236577][ T4673] CPU: 0 PID: 4673 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 1287.244458][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.254512][ T4673] Call Trace: [ 1287.257798][ T4673] dump_stack+0x191/0x1f0 [ 1287.262249][ T4673] kmsan_report+0x13a/0x2b0 [ 1287.262629][ T2346] hwa-hc 5-1:0.66: Wireless USB Cluster ID set to 0xfe [ 1287.266773][ T4673] __msan_warning+0x73/0xe0 [ 1287.275915][ T2346] hwa-hc 5-1:0.66: wusbhc_rh_control (000000009741119c [000000009741119c], 8006, f00, 0, 00000000208683b8, 5) UNIMPLEMENTED [ 1287.278140][ T4673] ld_usb_read+0x872/0xc40 [ 1287.278284][ T4673] ? init_wait_entry+0x190/0x190 [ 1287.291678][ T2346] hwa-hc 5-1:0.66: wusbhc_rh_control (000000009741119c [000000009741119c], 8006, f00, 0, 00000000208683b8, 5) UNIMPLEMENTED [ 1287.295439][ T4673] ? kmalloc_array+0x110/0x110 [ 1287.295459][ T4673] __vfs_read+0x1a9/0xc90 [ 1287.295487][ T4673] ? rw_verify_area+0x3a5/0x5e0 [ 1287.295511][ T4673] vfs_read+0x359/0x6f0 [ 1287.295538][ T4673] ksys_read+0x265/0x430 [ 1287.295565][ T4673] __se_sys_read+0x92/0xb0 [ 1287.295593][ T4673] __x64_sys_read+0x4a/0x70 [ 1287.295610][ T4673] do_syscall_64+0xbc/0xf0 [ 1287.295648][ T4673] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1287.306707][ T2346] hwa-hc 5-1:0.66: wusbhc_rh_control (000000009741119c [000000009741119c], 8006, f00, 0, 00000000208683b8, 5) UNIMPLEMENTED [ 1287.313758][ T4673] RIP: 0033:0x459a29 [ 1287.313773][ T4673] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1287.313781][ T4673] RSP: 002b:00007f2e093a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1287.313794][ T4673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 1287.313802][ T4673] RDX: 0000000000000042 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1287.313810][ T4673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1287.313818][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e093aa6d4 [ 1287.313826][ T4673] R13: 00000000004c6e7d R14: 00000000004dc390 R15: 00000000ffffffff [ 1287.313847][ T4673] [ 1287.313851][ T4673] Uninit was created at: [ 1287.313870][ T4673] kmsan_save_stack_with_flags+0x3a/0x80 [ 1287.313904][ T4673] kmsan_alloc_page+0x151/0x360 [ 1287.319002][ T2346] usb usb41: unable to get BOS descriptor or descriptor too short [ 1287.323008][ T4673] __alloc_pages_nodemask+0x142d/0x5fa0 [ 1287.323023][ T4673] alloc_pages_current+0x68d/0x9a0 [ 1287.323036][ T4673] kmalloc_order_trace+0x87/0x320 [ 1287.323050][ T4673] __kmalloc+0x2e6/0x430 [ 1287.323064][ T4673] kmalloc_array+0x86/0x110 [ 1287.323076][ T4673] ld_usb_probe+0x650/0x1650 [ 1287.323093][ T4673] usb_probe_interface+0xd19/0x1310 [ 1287.323201][ T4673] really_probe+0x1373/0x1dc0 [ 1287.323234][ T4673] driver_probe_device+0x1ba/0x510 [ 1287.334871][ T2346] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.03 [ 1287.339250][ T4673] __device_attach_driver+0x5b8/0x790 [ 1287.339266][ T4673] bus_for_each_drv+0x28e/0x3b0 [ 1287.339278][ T4673] __device_attach+0x489/0x750 [ 1287.339309][ T4673] device_initial_probe+0x4a/0x60 [ 1287.343934][ T2346] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1287.348215][ T4673] bus_probe_device+0x131/0x390 [ 1287.352737][ T2346] usb usb41: Product: Wireless USB HWA host controller [ 1287.358502][ T4673] device_add+0x25b5/0x2df0 [ 1287.371480][ T2346] usb usb41: Manufacturer: Linux 5.3.0-rc7+ hwa-hcd [ 1287.375204][ T4673] usb_set_configuration+0x309f/0x3710 [ 1287.375219][ T4673] generic_probe+0xe7/0x280 [ 1287.375232][ T4673] usb_probe_device+0x146/0x200 [ 1287.375270][ T4673] really_probe+0x1373/0x1dc0 [ 1287.395159][ T2346] usb usb41: SerialNumber: wusb-hwa [ 1287.403355][ T4673] driver_probe_device+0x1ba/0x510 [ 1287.403369][ T4673] __device_attach_driver+0x5b8/0x790 [ 1287.403383][ T4673] bus_for_each_drv+0x28e/0x3b0 [ 1287.403395][ T4673] __device_attach+0x489/0x750 [ 1287.403425][ T4673] device_initial_probe+0x4a/0x60 [ 1287.417406][ T2346] hub 41-0:1.0: USB hub found [ 1287.419368][ T4673] bus_probe_device+0x131/0x390 [ 1287.428370][ T2346] hub 41-0:1.0: config failed, hub doesn't have any ports! (err -19) [ 1287.435308][ T4673] device_add+0x25b5/0x2df0 [ 1287.435322][ T4673] usb_new_device+0x23e5/0x2fb0 [ 1287.435334][ T4673] hub_event+0x581d/0x72f0 [ 1287.435349][ T4673] process_one_work+0x1572/0x1ef0 [ 1287.435362][ T4673] worker_thread+0x111b/0x2460 [ 1287.435372][ T4673] kthread+0x4b5/0x4f0 [ 1287.435387][ T4673] ret_from_fork+0x35/0x40 [ 1287.435392][ T4673] ===================================================== [ 1287.435396][ T4673] Disabling lock debugging due to kernel taint [ 1287.435405][ T4673] Kernel panic - not syncing: panic_on_warn set ... [ 1287.435421][ T4673] CPU: 0 PID: 4673 Comm: syz-executor.1 Tainted: G B 5.3.0-rc7+ #0 [ 1287.435427][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.435432][ T4673] Call Trace: [ 1287.435455][ T4673] dump_stack+0x191/0x1f0 [ 1287.435559][ T4673] panic+0x3c9/0xc1e [ 1287.435601][ T4673] kmsan_report+0x2a2/0x2b0 [ 1287.477673][ T4661] usb-fuzzer-gadget dummy_udc.4: unregistering UDC driver [USB fuzzer] [ 1287.479051][ T4673] __msan_warning+0x73/0xe0 [ 1287.484582][ T4661] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 1287.488303][ T4673] ld_usb_read+0x872/0xc40 [ 1287.493094][ T4661] dummy_udc dummy_udc.4: disabled ep5in-int [ 1287.497394][ T4673] ? init_wait_entry+0x190/0x190 [ 1287.504426][ T2346] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 1287.507258][ T4673] ? kmalloc_array+0x110/0x110 [ 1287.517327][ T2346] usb 5-1: USB disconnect, device number 105 [ 1287.521545][ T4673] __vfs_read+0x1a9/0xc90 [ 1287.521573][ T4673] ? rw_verify_area+0x3a5/0x5e0 [ 1287.521608][ T4673] vfs_read+0x359/0x6f0 [ 1287.528271][ T2346] hwa-hc 5-1:0.66: remove, state 1 [ 1287.532008][ T4673] ksys_read+0x265/0x430 [ 1287.537163][ T2346] usb usb41: USB disconnect, device number 1 [ 1287.541957][ T4673] __se_sys_read+0x92/0xb0 [ 1287.588749][ T2346] hwa-hc 5-1:0.66: USB bus 41 deregistered [ 1287.592499][ T4673] __x64_sys_read+0x4a/0x70 [ 1287.592518][ T4673] do_syscall_64+0xbc/0xf0 [ 1287.592539][ T4673] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1287.592551][ T4673] RIP: 0033:0x459a29 [ 1287.592565][ T4673] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1287.592574][ T4673] RSP: 002b:00007f2e093a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1287.592589][ T4673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 1287.592597][ T4673] RDX: 0000000000000042 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1287.592606][ T4673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1287.592614][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e093aa6d4 [ 1287.592622][ T4673] R13: 00000000004c6e7d R14: 00000000004dc390 R15: 00000000ffffffff [ 1287.594445][ T4673] Kernel Offset: disabled [ 1287.916122][ T4673] Rebooting in 86400 seconds..