0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x7, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 02:31:56 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x4207, r5) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 310.237513][ T2514] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 310.297475][ T2488] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 310.407567][ T2514] usb 4-1: device descriptor read/8, error -61 02:31:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 310.547475][ T2488] usb 6-1: Using ep0 maxpacket: 8 [ 310.617481][ T2514] usb 4-1: device descriptor read/8, error -71 [ 310.707673][ T2488] usb 6-1: unable to get BOS descriptor or descriptor too short 02:31:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r4, 0x4, 0xa133, 0x4, 0x3, 0x2}, &(0x7f0000000140)=0x14) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r5, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r6, r5, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) [ 310.788082][ T2488] usb 6-1: New USB device found, idVendor=1a86, idProduct=7523, bcdDevice=58.07 [ 310.797151][ T2488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.853800][ T2488] usb 6-1: config 0 descriptor?? [ 310.901088][ T2488] ch341 6-1:0.0: ch341-uart converter detected [ 311.110473][ T2514] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 311.188914][ T2488] usb 6-1: failed to receive control message: -71 [ 311.195476][ T2488] ch341-uart: probe of ttyUSB0 failed with error -71 [ 311.236916][ T2488] usb 6-1: USB disconnect, device number 12 [ 311.265449][ T2488] ch341 6-1:0.0: device disconnected 02:31:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 311.290548][ T2514] usb 4-1: device descriptor read/8, error -61 02:31:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) prctl$PR_GET_SECCOMP(0x15) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="cf025b59", @ANYRES16=r5, @ANYBLOB="0300000000"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x40400d0) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000080)={0x8, "36bdb626e844eb879d40d66f98d9e1c800a3dff76f4185dfd2446cb17a2ce90d", 0x2, 0x1108, 0x10000, 0xfffffffb, 0x4, 0x2, 0x6, 0x5}) [ 311.567482][ T2514] usb 4-1: device descriptor read/8, error -61 02:31:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r4, 0x4, 0xa133, 0x4, 0x3, 0x2}, &(0x7f0000000140)=0x14) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r5, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r6, r5, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) 02:31:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x280800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x0, 0x0, r4, 0x3000006}) [ 311.687932][ T2514] usb usb4-port1: unable to enumerate USB device 02:31:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:31:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x7, 0x4, [], &(0x7f0000000080)=0x3}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:31:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000080)=0x1ff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:31:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) getegid() ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:31:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r5, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r6, r5, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r4, 0x1004000000016) 02:31:59 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x4207, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r5, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r6, r5, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r4, 0x1004000000016) 02:32:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 02:32:00 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x4207, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r4, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r5, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r3, 0x1004000000016) 02:32:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 314.097097][ T2488] usb 4-1: new high-speed USB device number 42 using dummy_hcd 02:32:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 314.387122][ T2488] usb 4-1: device descriptor read/64, error 18 02:32:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) 02:32:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 02:32:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000180)) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$TIOCGLCKTRMIOS(r3, 0x5423, 0xffffffffffffffff) 02:32:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 314.780830][ T2488] usb 4-1: device descriptor read/64, error 18 [ 315.057037][ T2488] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 315.337017][ T2488] usb 4-1: device descriptor read/64, error 18 [ 315.747099][ T2488] usb 4-1: device descriptor read/64, error 18 [ 315.868678][ T2488] usb usb4-port1: attempt power cycle [ 316.578724][ T2488] usb 4-1: new high-speed USB device number 44 using dummy_hcd 02:32:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) 02:32:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025001311d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000064000100b6d14ff99c43e8000000000000bbd49652520512e153ff837151b340d6c7242ab344373ce5810e00000000000000", @ANYRES32=0x0, @ANYBLOB="00eeff000000000000000000"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0xc2) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r4, 0x0, {0x2, 0x1}}, 0x18) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x62) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x28, 0x26, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffff}, {0x4, 0xa}, {0xe, 0xfff6}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x5, 0x7f, 0xff, 0x8, 0x7, 0x81, 0x4, {0x0, @in6={{0xa, 0x4e22, 0x1e73, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x101}}, 0x8, 0x0, 0x0, 0x52ee04ea, 0x2}}, &(0x7f0000000340)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={r5, 0x1, 0x2}, 0x8) r6 = socket$inet(0x2, 0x3, 0xc2) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x1) close(0xffffffffffffffff) 02:32:03 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x4207, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 316.742406][T13967] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 316.746965][ T2488] usb 4-1: device descriptor read/8, error -71 02:32:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) [ 316.976960][ T2488] usb 4-1: device descriptor read/8, error -71 02:32:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025001311d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000064000100b6d14ff99c43e8000000000000bbd49652520512e153ff837151b340d6c7242ab344373ce5810e00000000000000", @ANYRES32=0x0, @ANYBLOB="00eeff000000000000000000"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0xc2) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r4, 0x0, {0x2, 0x1}}, 0x18) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x62) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x28, 0x26, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffff}, {0x4, 0xa}, {0xe, 0xfff6}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x5, 0x7f, 0xff, 0x8, 0x7, 0x81, 0x4, {0x0, @in6={{0xa, 0x4e22, 0x1e73, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x101}}, 0x8, 0x0, 0x0, 0x52ee04ea, 0x2}}, &(0x7f0000000340)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={r5, 0x1, 0x2}, 0x8) r6 = socket$inet(0x2, 0x3, 0xc2) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x1) close(0xffffffffffffffff) 02:32:04 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 317.249511][T13999] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 02:32:04 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) [ 317.486908][ T2488] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 317.656855][ T2488] usb 4-1: device descriptor read/8, error -61 02:32:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) 02:32:04 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r0, 0x1004000000016) 02:32:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000500000000000000000008000008000000000000002011000000000000000000000000000008000000000000000900000000000000d1838d07000000000002000000000000403c000a48294e9c72b58bce0588910f896c2ddaa8da35dc31b4e1ba5042e80f1f3f9db657668cf0902a2116aa1f0156034d7951d64e178d3e094f843c0386f27cea22db457aaa1396abf74755688b96ef1d553f2cd7a232dbc7030e18ac60c42a82f5deeb4412273bcc76e4a76b1b9fc7aa7a7ff9f4f64cffd9f2112ba7097cffdee9c1560000000000000000"]) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x8) [ 317.937707][ T2488] usb 4-1: device descriptor read/8, error -61 [ 318.057009][ T2488] usb usb4-port1: unable to enumerate USB device 02:32:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:06 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x4207, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:06 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) 02:32:06 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) ptrace$setregs(0xf, 0x0, 0xb3e, &(0x7f0000000280)="59bccc3dde5871b0b416f7bdaaba322f2d4983d4561b9a1ad3b4508af5266dc4b8b78b5cd98cddacf83277fb078c0c0abb01bc4e53be9f49bf75538664a0e343") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x1) r3 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYBLOB="108250ebfc4e826829da4d736bce", @ANYBLOB="044080444f7cd8e9649caafbbdd1a6060000009608000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df71702", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000840)='/dev/nvram\x00', 0x20901, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x44) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x8000) 02:32:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) [ 319.959619][T14051] fuseblk: Unknown parameter '0xffffffffffffffff' 02:32:07 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) [ 320.078221][T14051] fuseblk: Unknown parameter '0xffffffffffffffff' 02:32:07 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) ptrace$setregs(0xf, 0x0, 0xb3e, &(0x7f0000000280)="59bccc3dde5871b0b416f7bdaaba322f2d4983d4561b9a1ad3b4508af5266dc4b8b78b5cd98cddacf83277fb078c0c0abb01bc4e53be9f49bf75538664a0e343") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x1) r3 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYBLOB="108250ebfc4e826829da4d736bce", @ANYBLOB="044080444f7cd8e9649caafbbdd1a6060000009608000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df71702", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4ad861c9011b0fa2004920c826f50fa6964f44e0d967e9556863fc5f393f0ed9c7a037f7d081b4663b44a23732d02cdfc35f9f9c32f670e7a9fc3ece95a33601b136976671e3dcbc397beada2fe6c83dd5ff95b3de84fab7a0a80c2fa1a8218984009fd6430ed0f371d399251019285ca3cc9a15e01dcdd5a8660c18536b07ec13cbd2bc4620ab26d5d47fe8dc5e0c5eecb62e2b94e390225c8b1d34c89c073b15726aa4e77f55ecd6c846cfd31e358f741b8b0df5bd0d6760072fbf0977c2e71353e05467c2fb6b803bd1fdbb072a773b1888742a9861e6f1204b75315d5ea64813f417445cf352b7cd4c240703b4742e1b9eb8dacc4a8e151ecf19f7588bfe89995cd7c6ef29998e460b2db2c4b54f3a89a3703829bbe9feaa08fbf88cd0dd374b4780983d80b0"]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000840)='/dev/nvram\x00', 0x20901, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x44) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x8000) 02:32:07 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) [ 320.256606][ T2478] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 320.362979][T14062] fuseblk: Unknown parameter '0xffffffffffffffff' 02:32:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:07 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) ptrace$setregs(0xf, 0x0, 0xb3e, &(0x7f0000000280)="59bccc3dde5871b0b416f7bdaaba322f2d4983d4561b9a1ad3b4508af5266dc4b8b78b5cd98cddacf83277fb078c0c0abb01bc4e53be9f49bf75538664a0e343") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x1) r3 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYBLOB="108250ebfc4e826829da4d736bce", @ANYBLOB="044080444f7cd8e9649caafbbdd1a6060000009608000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df71702", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000840)='/dev/nvram\x00', 0x20901, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x44) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x8000) [ 320.586762][ T2478] usb 4-1: device descriptor read/64, error 18 02:32:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) 02:32:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 320.690656][T14071] fuseblk: Unknown parameter '0xffffffffffffffff' [ 321.034082][ T2478] usb 4-1: device descriptor read/64, error 18 [ 321.326487][ T2478] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 321.626502][ T2478] usb 4-1: device descriptor read/64, error 18 [ 322.036415][ T2478] usb 4-1: device descriptor read/64, error 18 [ 322.156633][ T2478] usb usb4-port1: attempt power cycle 02:32:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:09 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) ptrace$setregs(0xf, 0x0, 0xb3e, &(0x7f0000000280)="59bccc3dde5871b0b416f7bdaaba322f2d4983d4561b9a1ad3b4508af5266dc4b8b78b5cd98cddacf83277fb078c0c0abb01bc4e53be9f49bf75538664a0e343") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x1) r3 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYBLOB="108250ebfc4e826829da4d736bce", @ANYBLOB="044080444f7cd8e9649caafbbdd1a6060000009608000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df71702", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000840)='/dev/nvram\x00', 0x20901, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x44) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x8000) 02:32:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:09 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x4207, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x404000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464af, &(0x7f0000000140)=0xfffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r9}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) [ 322.886380][ T2478] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 322.966742][T14096] fuseblk: Unknown parameter '0xffffffffffffffff' 02:32:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xcd, 0x7, 0x20, 0x81}, {0x0, 0x80, 0xff, 0xffffffff}, {0x2, 0xfd, 0x9, 0xdeb}]}) 02:32:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:10 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) ptrace$setregs(0xf, 0x0, 0xb3e, &(0x7f0000000280)="59bccc3dde5871b0b416f7bdaaba322f2d4983d4561b9a1ad3b4508af5266dc4b8b78b5cd98cddacf83277fb078c0c0abb01bc4e53be9f49bf75538664a0e343") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x1) r3 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYBLOB="108250ebfc4e826829da4d736bce", @ANYBLOB="044080444f7cd8e9649caafbbdd1a6060000009608000000000000", @ANYRES32=0x0, @ANYBLOB="10000200000000082000000000000000bf6ba308525fb82df4d1ae00a29f40e06b000000000000000000000000000000cb96010000808cf51cd8a6b0caae714e399af327eca1a4e438ce01747a7736e2648cd3bcc59a1b37cd350944aa459f1d304fa8b17722732506148b6a44510363745431f26bc2e31a60a275bc6211731f0361878aa0c2930a0e0092d4c02c1fe9c5659f5d672bf342eacd48f6806b463b3a94083644525ad3670c2a888ee1a4fa9bd178b4e2f2b734cb2a8c260efb90130bc6afd43aeee4e5410c904bfaeebd4782454044c095cad8923b8682629a5a67f101a1a2fcd828392f1507dfecad1c2530c84da1c9dc457ed82cbc622bbe9273159cef38d5c5c3c72797d7b4f6b463bf6a0eadd053bd82a4cf6c8ba5536c23c99bd67a59f429027cdaaf18a497760080f7241c3040b51558adb47b2c786d3fe8d48315d12079bd4b28d6ecb69b0dfdc3c6c4fe56db1cd32fcdc10aac13394f9e5097905f5dfb08b69f24225ee86859e1c48fdd8c4439c3f5f6c270d31102feb71a9767c3de68861b96b58a608d21719f1b789f0f1fba2fb4f9240779306ed9310459ffd4c371b7527c0b8b7ed9adaffd1f957a6ed65564e58cc382d03569cf924881641dfa7d367e3688d020a8b64658a1599d203795be8979ecee265946763d878c2ebcdac5b964b90b9964874c1967537a79ebf30dde0040d0acf11dac674cc8ddb2753b216f4fc2c2eda952a78329e16f0369adf495a885ec5abeb580b6d53079bbfa2ef0e8e5035e04afd81a5e75694deec95ccaa92f72af62b7829e94b82737442503667e104c12c6611543f18c2d8e829ab3062d9c009bd7ba7a05a01558fb610db6036e73c0f19e98dbbfcf006b262d9b2ae14a66835d44a2e632cb883f3a2ce238aa938f0fa813bf101837ca43972550ce1482c3ea432683072551c51f377692d4faef78175f024cc75264bc91ccab0bd2f1b1480425f758b9e5ea58616ac98aaf463ad5372ae4d79f508cd8a0dafb336cb5d279869108ac3c39d44b1c983db6ea2b419f9c7dbd000000000000000029f72bcf07e1766264166b207b1235f7661dacb4dd81fbe4ed9080ccb5d5ba33a47435b712746a609ef267c42cdc1260cdd40ce65e9ec34e466d70ed417e7925f400237975fcadbd326605c4b3e44ac48257c4a095a80fe09db3d1703926ef05d2b306fa1f8d68eb6388d7d97abdcc5820facb184791d2f97a1f2b6c20bd09e02f24fd93ff5c328f72ea3f017aefdb836fec2706f32afa19f298446f7ef0e950e316fa326ebb9a8270ae860dd284"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df71702", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000840)='/dev/nvram\x00', 0x20901, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x44) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x8000) 02:32:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000080)={0x3, 0x1, 0x2, 0x6, 0x2b, 0xa4, 0x3}) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 323.275062][T14117] fuseblk: Unknown parameter '0xffffffffffffffff' 02:32:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000200)="b24109169ed84b944c04a8c88fd1b9b7c2a8144cbed3735afde4a78cdf5e492c18f1e2708b2f451c842aed76b496ac88329635545a55ac505b611e390372350165c7a9c10b83f037"}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CAPI_GET_ERRCODE(r7, 0x80024321, &(0x7f00000001c0)) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4500, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x181800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 323.366497][ T2478] usb 4-1: device not accepting address 48, error -71 [ 323.746574][ T2478] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 323.933873][ T2478] usb 4-1: device descriptor read/8, error -61 [ 324.222105][ T2478] usb 4-1: device descriptor read/8, error -61 [ 324.353919][ T2478] usb usb4-port1: unable to enumerate USB device 02:32:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:12 executing program 0: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "cd19959806e300a4394819054c8ae847f52cab5fd1d85607f044"}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r2) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000000c0)=0x1d4b) 02:32:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc801}, 0x400c094) 02:32:12 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x4207, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x8, 0x4) r4 = msgget$private(0x0, 0x5c7) msgctl$MSG_STAT(r4, 0xb, &(0x7f00000000c0)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) 02:32:13 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x5a8ca2db81c590fe, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) flock(r1, 0x2) fcntl$setsig(r4, 0xa, 0x2e) r5 = semget$private(0x0, 0x2, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f00000000c0)={0x3, 0x1}) semop(r5, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000004c0)=[0x2]) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x3]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x4) r8 = pidfd_getfd(r2, r7, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 326.226083][ T5] usb 1-1: new high-speed USB device number 22 using dummy_hcd 02:32:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) [ 326.316147][ T2514] usb 4-1: new high-speed USB device number 50 using dummy_hcd 02:32:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x101501, 0x0) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c001}, 0x400c002) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x80000001, 0x724, 0x1, 0x97f, 0x7, r7}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r8, 0x3f, 0x3ff, 0x2}, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = fcntl$dupfd(r9, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) write$P9_RSTAT(r10, &(0x7f0000000080)={0x50, 0x7d, 0x1, {0x0, 0x49, 0x4, 0xa338, {0x1, 0x2, 0x3}, 0x80180000, 0xaeaa, 0x6, 0x0, 0x9, '/dev/ion\x00', 0x9, '/dev/ion\x00', 0x1, '^', 0x3, '+&)'}}, 0x50) [ 326.476052][ T5] usb 1-1: Using ep0 maxpacket: 16 02:32:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r5, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) 02:32:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x1004000000016) [ 326.566077][ T2514] usb 4-1: Using ep0 maxpacket: 8 [ 326.608709][ T5] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 326.624348][ T5] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 326.664057][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.687943][ T2514] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.706425][ T2514] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.748669][ T2514] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 326.769879][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.783600][ T2514] usb 4-1: config 0 descriptor?? [ 326.876289][ T5] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.889830][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.900250][ T5] usb 1-1: Product: syz [ 326.904900][ T5] usb 1-1: Manufacturer: syz [ 326.911231][ T5] usb 1-1: SerialNumber: syz [ 327.033482][ T8614] usb 4-1: USB disconnect, device number 50 [ 327.416316][ T5] usb 1-1: 0:2 : does not exist [ 327.436360][ T5] usb 1-1: USB disconnect, device number 22 02:32:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 327.865919][ T2514] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 328.105874][ T2514] usb 4-1: Using ep0 maxpacket: 8 [ 328.226169][ T2514] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.236383][ T2514] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.245320][ T2514] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 328.255838][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.268865][ T2514] usb 4-1: config 0 descriptor?? [ 328.511788][ T2514] usb 4-1: USB disconnect, device number 51 02:32:15 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="9d3f0700", @ANYRES32=0x0], &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(0xffffffffffffffff, 0x200002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) 02:32:15 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4], 0x58}}, 0x0) 02:32:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0xfffffffffffffffa, 0x401) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x6, 0x20000800, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x80000, 0x20) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x0, 0x4, 0x7, 0x7, 0x1, 0x0, 0x5c, 0xff, 0x5, 0xb2, 0x81, 0x8, 0x9}, 0xe) r5 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000140)=0x80) r6 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r7, 0x4040aea4, &(0x7f0000000340)={0x101, 0x1, 0x8, 0x4, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x100010010005, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x60001, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000000c0)) 02:32:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 329.415761][ T8614] usb 4-1: new high-speed USB device number 52 using dummy_hcd 02:32:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) fcntl$setlease(r1, 0x400, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000040)="ff", 0x1}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 02:32:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 329.675850][ T8614] usb 4-1: Using ep0 maxpacket: 8 [ 329.806019][ T8614] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.827796][ T8614] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.845502][ T8614] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 329.855550][ T8614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.865915][ T8614] usb 4-1: config 0 descriptor?? 02:32:17 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 02:32:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00004aa000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400204) r5 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={r7, 0x400}, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x20010, r3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup(r8) getsockopt$bt_hci(r9, 0x0, 0x6, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 330.133818][ T8614] usb 4-1: USB disconnect, device number 52 02:32:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x202002) keyctl$revoke(0x3, r3) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="24052dbd7000fe5bdf2514000000060012000200000044008100050001002000000005000100010000000500020080000000050001000a000000050001000900000005000100080000000500010003000000050001002000000008000100010000000c00990002000000020000000a000600ffffffffffff0000060014010002000014001180040004000400050004000500040003000600b500ee010000"], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0x202002) keyctl$revoke(0x3, r4) keyctl$unlink(0x9, r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) 02:32:17 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 02:32:17 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:18 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 331.005835][ T2516] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 331.255814][ T2516] usb 4-1: Using ep0 maxpacket: 8 [ 331.375969][ T2516] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 331.384639][ T2516] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.395418][ T2516] usb 4-1: config 0 has no interface number 0 [ 331.402244][ T2516] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping 02:32:18 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 331.414386][ T2516] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.428838][ T2516] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 331.438512][ T2516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.448853][ T2516] usb 4-1: config 0 descriptor?? [ 331.507830][ T2516] snd-usb-audio: probe of 4-1:0.2 failed with error -2 02:32:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) [ 331.725753][ T2516] usb 4-1: USB disconnect, device number 53 02:32:18 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:20 executing program 0: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000070000198f9d5a8c1cd536cbc5f318662de3de730346431df019f29079bf786728", @ANYRES32=r2], 0x2}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'sit0\x00', r2, 0x29, 0x5, 0x1f, 0x4010, 0x4, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x8, 0x25500000, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000480)={@private1, r3}, 0x14) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) creat(0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) 02:32:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) 02:32:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 02:32:20 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 333.315892][ T2478] usb 4-1: new high-speed USB device number 54 using dummy_hcd 02:32:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup(r1) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10810005, 0x0, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x44e200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x2000000) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 333.585557][ T2478] usb 4-1: Using ep0 maxpacket: 8 02:32:20 executing program 0: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000070000198f9d5a8c1cd536cbc5f318662de3de730346431df019f29079bf786728", @ANYRES32=r2], 0x2}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'sit0\x00', r2, 0x29, 0x5, 0x1f, 0x4010, 0x4, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x8, 0x25500000, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000480)={@private1, r3}, 0x14) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) creat(0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) 02:32:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$dupfd(r2, 0x0, r1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x980000, 0x40, 0x3b6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980902, 0x54f8, [], @p_u32=&(0x7f0000000080)=0x7}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 333.707989][ T2478] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 333.721920][ T2478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.776258][ T2478] usb 4-1: config 0 has no interface number 0 [ 333.827130][ T2478] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 333.889014][ T2478] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 02:32:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) [ 333.941623][ T2478] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 333.969907][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:32:21 executing program 0: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000070000198f9d5a8c1cd536cbc5f318662de3de730346431df019f29079bf786728", @ANYRES32=r2], 0x2}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'sit0\x00', r2, 0x29, 0x5, 0x1f, 0x4010, 0x4, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x8, 0x25500000, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000480)={@private1, r3}, 0x14) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) creat(0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) [ 334.002822][ T2478] usb 4-1: config 0 descriptor?? [ 334.057066][ T2478] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 334.263733][ T8613] usb 4-1: USB disconnect, device number 54 02:32:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48001}, 0x85) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000006000000000c00168008000380040001000600150004"], 0x30}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = fcntl$dupfd(r2, 0x0, r1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x7, @remote, 0x4}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r6}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={r6, 0x2798, 0x30}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="4f49000000000000002a866051000800030000000000"], 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000825bd7000fcdbdf250300000008000200030000000800030006000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 02:32:23 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:23 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 336.375306][ T2516] usb 4-1: new high-speed USB device number 55 using dummy_hcd 02:32:23 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x3, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xce}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socket$inet6(0xa, 0x3, 0xfff) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x0, 0x19, 0x1, r6}) connect$caif(r6, &(0x7f0000000000), 0x18) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x2000000000001, 0x0, 0x1, r4, 0x3000006}) 02:32:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) 02:32:23 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 336.634550][ T2516] usb 4-1: Using ep0 maxpacket: 8 02:32:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) [ 336.756340][ T2516] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 336.764372][ T2516] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 02:32:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) socket$can_bcm(0x1d, 0x2, 0x2) r4 = fcntl$dupfd(r2, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'geneve0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) prctl$PR_GET_NO_NEW_PRIVS(0x27) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x18000, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0xffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffe2, 0x0, 0xffffffffffffffff, 0x3000006}) [ 336.814268][ T2516] usb 4-1: config 0 has no interface number 0 [ 336.824022][ T2516] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 336.852380][ T2516] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.879402][ T2516] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 336.893105][ T2516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.913341][ T2516] usb 4-1: config 0 descriptor?? [ 336.963177][ T2516] snd-usb-audio: probe of 4-1:0.2 failed with error -2 02:32:24 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, r4, 0x3000006}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000004bb9ef5fc571c62fbb95c70b169cda38a14cc5f0e68a0d527c96ec20c88463b28753a65c65c7c0634af265a7b88803f9420717fd6e5e7f31", @ANYRES16=r10, @ANYBLOB="010300000000000000001100000004000180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x64, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x100}, 0x44) [ 337.168417][ T2516] usb 4-1: USB disconnect, device number 55 02:32:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) 02:32:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7) 02:32:26 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:26 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x1dbc81, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_SCSI_ID(r7, 0x2276, &(0x7f0000000200)) r8 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000001c0)=r9) 02:32:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x406, r6) r7 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x6, 0x1, 0x0, 0x0, 0x57, 0x4000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0x3, 0x80}, 0x1100a, 0xfffffffffffffffa, 0x3, 0x2, 0x8, 0xe90, 0x4b93}, 0xffffffffffffffff, 0x8, r4, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r9, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x80, 0x3, "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", 0x0, 0x91, 0x3, 0x8, 0x6, 0xcd, 0x5, 0x1}, r10}}, 0x120) [ 339.485333][ T2478] usb 4-1: new high-speed USB device number 56 using dummy_hcd 02:32:26 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 339.724907][ T2478] usb 4-1: Using ep0 maxpacket: 8 [ 339.845334][ T2478] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.854769][ T2478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.895277][ T2478] usb 4-1: config 0 has no interface number 0 [ 339.915345][ T2478] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 339.940184][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 339.964483][ T2478] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.986070][ T2478] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 02:32:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) [ 339.998381][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.008600][ T2478] usb 4-1: config 0 descriptor?? [ 340.035368][T14525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 340.095277][ T2478] usb 4-1: invalid MIDI in EP 0 [ 340.102223][ T2478] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 340.266989][ T2514] usb 4-1: USB disconnect, device number 56 02:32:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:32:27 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 341.158816][ T2514] usb 4-1: new high-speed USB device number 57 using dummy_hcd 02:32:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 341.407703][ T2514] usb 4-1: Using ep0 maxpacket: 8 [ 341.530740][ T2514] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.542107][ T2514] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.559867][ T2514] usb 4-1: config 0 has no interface number 0 [ 341.570181][ T2514] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 341.589017][ T2514] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 341.603368][ T2514] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.631126][ T2514] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 341.660837][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.699132][ T2514] usb 4-1: config 0 descriptor?? [ 341.725238][T14581] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 341.785094][ T2514] usb 4-1: invalid MIDI in EP 0 [ 341.790821][ T2514] snd-usb-audio: probe of 4-1:0.2 failed with error -12 02:32:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 341.963051][ T2478] usb 4-1: USB disconnect, device number 57 02:32:29 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:29 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000180)={r7, &(0x7f00000000c0)=""/178}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:32:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 342.844726][ T8613] usb 4-1: new high-speed USB device number 58 using dummy_hcd 02:32:30 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$qrtr(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f0000000180)=""/183, 0xb7}], 0x2, 0x0, 0x0, 0x20000300}, 0x38, 0x40012001) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000300)={0xfffffff, 0x61c55482, 0x3, r0, 0x0, &(0x7f00000002c0)={0x990a60, 0x3, [], @value=0x1}}) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 343.084727][ T8613] usb 4-1: Using ep0 maxpacket: 8 02:32:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:32:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_PRIORITY(r5, 0x80045643, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 343.211154][ T8613] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 343.232487][ T8613] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.252735][ T8613] usb 4-1: config 0 has no interface number 0 [ 343.262393][ T8613] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 343.302772][ T8613] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 343.326502][ T8613] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 02:32:30 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 343.355011][ T8613] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 343.375427][ T8613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.397165][ T8613] usb 4-1: config 0 descriptor?? [ 343.433620][T14621] raw-gadget gadget: fail, usb_ep_enable returned -22 02:32:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffde, 0x1, 0xffffffffffffffff, 0x3000006}) [ 343.504834][ T8613] usb 4-1: invalid MIDI in EP 0 [ 343.510463][ T8613] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 343.677542][ T2514] usb 4-1: USB disconnect, device number 58 02:32:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xfffffffffffffff0, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:32:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:32 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:32 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) inotify_init1(0x80000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000080)={0x7fff, 0x100, 0x9}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 345.814576][ T8613] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 346.057398][ T8613] usb 4-1: Using ep0 maxpacket: 8 02:32:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 346.177763][ T8613] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 346.191510][ T8613] usb 4-1: config 0 has no interface number 0 [ 346.213173][ T8613] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 346.249692][ T8613] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 346.280401][ T8613] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 346.311004][ T8613] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 346.348180][ T8613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.376567][ T8613] usb 4-1: config 0 descriptor?? [ 346.394860][T14697] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 346.465342][ T8613] usb 4-1: invalid MIDI in EP 0 [ 346.471015][ T8613] snd-usb-audio: probe of 4-1:0.2 failed with error -12 02:32:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 346.634668][ T5] usb 4-1: USB disconnect, device number 59 02:32:34 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:35 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:35 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd27, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x8f3, 0x0, 0x29f}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000200)={0x6000, 0x1, 0x0, 0x1, 0x9}) fcntl$dupfd(r4, 0x0, r4) r7 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10010005, 0xffffffffffffffff, 0x13cba0dd5e3e3925, 0xffffffffffffffff, 0x3000006}) 02:32:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3d) ptrace$cont(0x1d, r5, 0x0, 0x2) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r5, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r1, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:35 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:32:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x406802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:35 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 348.874341][ T5] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 349.124390][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 349.252011][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 349.260216][ T5] usb 4-1: config 0 has no interface number 0 [ 349.273727][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 349.294289][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 349.304915][ T5] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 349.315559][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 349.324691][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.336436][ T5] usb 4-1: config 0 descriptor?? [ 349.354617][T14766] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 349.420088][ T5] usb 4-1: invalid MIDI in EP 0 [ 349.426323][ T5] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 349.578461][ T5] usb 4-1: USB disconnect, device number 60 02:32:38 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:32:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x4000010010005, 0xffffffffffffffff, 0x1, r7, 0x3000006}) 02:32:38 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:38 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:38 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:38 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000003680)='/dev/ubi_ctrl\x00', 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) prctl$PR_SET_FPEMU(0xa, 0x6) sendfile(r5, r7, 0x0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f00000036c0)={0x3, 0x6, 0xf8, 0x3, 0x2, 0x80000000}) sendmsg$qrtr(r4, &(0x7f0000003640)={&(0x7f0000000080)={0x2a, 0x3, 0x8000}, 0xc, &(0x7f0000003580)=[{&(0x7f00000000c0)="e1dbd113ce04f30c08cc0223da7692d658a9e6dbfb1d78104d19455a15212acf80092249f0bf47d1a2a32e0b5102bf664df63e42f7a7cb1a91905a74fe5faea2171e81c9a4c7192cf39a3265e295111580caeb08cdd31ae08cad17dec5f8d7479b2ee68fc78f227db75bda947b06b1e33c5fa1ee8181b18e6e57a6971ce29c09de3983b4a6b7fe21ab9a316dd96ce8728ed14ec24be44947576745dc5fddb1b3e51627eeaade11b0a6fc2bd2cb110d68c2daabe8283453b0bf74438eb1590d2506ca3de9775f5b2be72fed1b023e73bf32a2c7d3b1cdecdd075c7f6935811531674a0380a5358ef96995ef9c", 0xec}, {&(0x7f00000001c0)="a5c551e836ca188cd826ea970c7bafebef08600c8873ee00d72b8b38f956282c8c16d09ba04381d0f91a8408102bcd148848a224e1341a929f8fd1a10b8896b2a6df1f84af533f17393a41041af5f7b29aa6ccd3e646e08498655dae8b2aefd09861d711ae467713fc1ebfd1f172d676977499f49a68b840bd11cd5a6e8484fcfc21abfa5ccac83d5f08bf50184e11f9db61f5c7", 0x94}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="1d911a6e550a2aab76ed23ed5cc86f17ef85c8485042e1b5dd717c9e63ac1092e9b5ded94341ef5c8b7744a6386daa4105a26e72e7b6209ec3325da9cc9e75a0a7ce8e4b6dbfbc232cab70950be066fb70bb43eea12b829d563a181ba5c9c527cc66824a332e1410f594ec", 0x6b}, {&(0x7f0000001300)="4d2ed7efdbb78a28b9e112706cb65407189cca9ff700330c2a40d09aacb65ba20d105eea93443f0245d69bee2b3364792b44aac205b72b2db737fa0ee8eb6b832f8eac24771ff8abf714fb7755d952f371c5f7b45bc94253b5086a7e74721346a67cd4488819d9d22525064bb8890d0f14e2d06798cb7fa6d2089e7df5151cb4", 0x80}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="cbcf2059ecd860df42ae15ff9221642e3bc5e81f6e2edeb09263e0229b3436fce443d9a53becfb2117b0691e3e3537bbbc91ad34074324e37b6239feeff2eb7f81a51792e7ee639e7a290cbda082", 0x4e}, {&(0x7f0000003400)="10ee9a784e4adaedd3056a2c0a0bce02da86f68ecf631e7b2c66b9286abf8bdd58a3456a35fa4db3c4e2a3f6801cf6b7ff15460fc62b2bf0168361cd91b3e18bd70815244ba889f7b17a26ad65ce31a1a12c3bd8826e2d5a6676110b7229b735ae80f281903466f69194bf8c17e230cf396f3500dd5924e5a24a5df29cc93078e64594522c3a08809f06148e96fd", 0x8e}, {&(0x7f00000034c0)="1711f3ad4805b7cf2afe020b49b28bb369fe902c39b89d2dd19e448828660c893e36b9e04d34df82749f1f8725a1592372ffac41d4ca48caf857a97e298fdab3ae1c1f6953742ae1b8c0bcdd5ed8faf08219b9186caecc456d252f4387f1a764db5b0081844fd2733b894377183d33068175378060391f34d70c7101f3d7b33b509b875e4294ed2c904817063a5c14de8b2cc4962e07ed7f", 0x98}], 0xa, 0x0, 0x0, 0xd0}, 0x38) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:38 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:39 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x464, 0x100, 0x70bd28, 0x25dfdbfe, "228be4be77"}, 0x18}, 0x1, 0x0, 0x0, 0x41800}, 0x4808) [ 351.944064][ T2478] usb 4-1: new high-speed USB device number 61 using dummy_hcd 02:32:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:39 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x3000006}) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) [ 352.203986][ T2478] usb 4-1: Using ep0 maxpacket: 8 02:32:39 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:39 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 352.325046][ T2478] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.333080][ T2478] usb 4-1: config 0 has no interface number 0 [ 352.361727][ T2478] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 352.380888][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 352.402942][ T2478] usb 4-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 352.420442][ T2478] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 352.442254][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.470864][ T2478] usb 4-1: config 0 descriptor?? [ 352.507750][T14824] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 352.564296][ T2478] usb 4-1: invalid MIDI in EP 0 [ 352.569986][ T2478] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 352.728590][ T2478] usb 4-1: USB disconnect, device number 61 02:32:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x12d800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:41 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:41 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$dupfd(r2, 0x0, r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000dc9b1ba1000018000180"], 0x2c}}, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/129, 0x81) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 354.950192][T14922] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.980981][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 02:32:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 355.018869][ T2478] usb 4-1: new high-speed USB device number 62 using dummy_hcd 02:32:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 355.284134][ T2478] usb 4-1: Using ep0 maxpacket: 8 [ 355.403869][ T2478] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 355.411891][ T2478] usb 4-1: config 0 has no interface number 0 [ 355.433414][ T2478] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 355.453768][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 355.480254][ T2478] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 355.494998][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 355.506103][ T2478] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 355.516379][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.529774][ T2478] usb 4-1: config 0 descriptor?? [ 355.554195][T14901] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 355.614760][ T2478] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 355.788463][ T2514] usb 4-1: USB disconnect, device number 62 02:32:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x24002, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000380)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x850) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x3, 0x7, 0x8, 0x0, 0x0, 0x5, 0x5011, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x80000001, 0x1ff}, 0x6, 0xffffffff, 0x8, 0x9, 0xffffffffffffff34, 0x1, 0x800}, 0xffffffffffffffff, 0x4, r3, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4000000000400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000080)={{0x3, 0x0, @descriptor="f2b48f091618c070"}, 0xed, r6, [], "d5eac75035ac6406a88a6cd4b74d2f31d80853983ac2d452f408fcb78d6ed6b845f764ee7a8fa89d4ce90281b6ce07e1ce664482b206c1f0112d25acca3bb41f108fee7fbebebccb30555526ae6afc648d1398749b0b3ecf516e7027567abbd0bcc345738bcbd1e0531ad7828b2d25a1d679defd4d8bdd7bafc221083ed4712bd25b2ad1e31dabeda081309e6e4ffa92d5d6bea9b42d5448f755ba6018640b11cd3b56928c429eb1206c035785da210d8445a50d243449528e5533bcf41a6020e726161c606a6bb5dc960e0e28f043a2ff20775c61249fe67182470108b8a81951327d1c367823d5fbb6fb4228"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:44 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:44 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd4, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xca2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff90d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x221fa064}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x725}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_ITS={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2400c041}, 0x20000000) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3d) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$poke(0x4, r5, &(0x7f0000000080), 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 357.865721][T14959] encrypted_key: insufficient parameters specified [ 357.891704][T14965] encrypted_key: insufficient parameters specified 02:32:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r7, 0x4, 0x6, 0x3, 0xe86, 0x28, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x7800, 0x8707, 0x8, 0xfffffe01}}) sendto$packet(r3, &(0x7f0000000080)="112b0633710e130d9efb1b0cf08d3e596653e912871e8200484e6929c1ab76b7ba4db9efdac216141c3650c05824c2eb5317986f847c9ed06d9f9748190678af2322bc5209bcebe9b6e1762a129f70ed1a0fc6588ca81bf63e734bce5665cd629a98edb71a041220a3e965923cbc3b52ec09", 0x72, 0x1, &(0x7f00000001c0)={0x11, 0x17, r8, 0x1, 0x1, 0x6, @random="fe7d208ff68a"}, 0x14) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = fcntl$dupfd(r9, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 358.133561][ T5] usb 4-1: new high-speed USB device number 63 using dummy_hcd 02:32:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RMKNOD(r5, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x4}}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 358.373510][ T5] usb 4-1: Using ep0 maxpacket: 8 02:32:45 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 358.499227][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.544420][ T5] usb 4-1: config 0 has no interface number 0 [ 358.550559][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 358.590042][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 358.615300][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 358.633367][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 358.652783][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 358.663327][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.676829][ T5] usb 4-1: config 0 descriptor?? 02:32:45 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 358.698119][T14958] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 358.784646][ T5] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 358.946053][ T5] usb 4-1: USB disconnect, device number 63 02:32:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002640)=[{&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/91, 0x5b}, {&(0x7f00000011c0)=""/239, 0xef}, {&(0x7f00000012c0)=""/213, 0xd5}, {&(0x7f00000013c0)=""/181, 0xb5}, {&(0x7f0000001480)=""/151, 0x97}, {&(0x7f0000001540)=""/61, 0x3d}, {&(0x7f0000001580)=""/169, 0xa9}, {&(0x7f0000001640)=""/4096, 0x1000}], 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x38a800000, 0x40) pidfd_getfd(r3, r4, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:46 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:46 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:32:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffd2, 0x0, 0xffffffffffffffff, 0x3000006}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$inet(r5, &(0x7f0000000080)=""/113, 0x71, 0x12001, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 02:32:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x149282, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e23, 0x8, @remote, 0x6}}, 0xbcf, 0xddd9}, &(0x7f0000000200)=0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xe, 0x1, 0xffffffffffffffff, 0x3000006}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400201) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="eed3a83770250071aeacabbca3eaf06adbca43da11c38316ed69fb23e85d0b3b96a0d60ef0604cf3e829fa91560dd546a169ffa6158166d973bd4dae2752248d4f9c6e1070a6e06616495e43ee0b34e0128069501281f0efdf0af00e736f0ffd490999ea15a095753043e21a", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r9, 0x0, r9) write(r9, &(0x7f00000001c0)="50b737c285aff523af61ee11ec92f1a9e2576db265c693ad60718eae0f235ef91bd18d6e7dcbb242e1b26f7ae77c0a57fe721daf4d4b5e47751b11a902639a96441b860712e803aaa16a7d7a1d1239207ab2f91304e28c7b9e5e5fb799461590c6efa048297c3ae338a914cdbeec83e372671f431dd67036c52b3e9699411e0937f746690b1f46f3e24025557fad0b3ff1b1b8832cd205e56676f02b01d189221e71d712eff9abc12141151a976202df1c080f17e3ddaf", 0xb7) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r8}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e23, 0x7, @local, 0x2}}}, &(0x7f0000000140)=0x84) 02:32:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 359.803642][ T5] usb 4-1: new high-speed USB device number 64 using dummy_hcd 02:32:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 360.043469][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 360.163670][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 360.180067][ T5] usb 4-1: config 0 has no interface number 0 [ 360.189804][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 360.201667][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 02:32:47 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0416d9", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000001c0)={r8}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000002c0)={r8, 0xe5, "e5aeb5c93c3bc6d7fe378016a5a90e3f4b183d3ee800acdfdf6ff184136846fb5437ba711ea603e0674fbdc64efca795e5145aed44830092a5bc7bc73dd5dc22d9d8bf7fc0d53623192d9544dbdd12fea02a3e25bfd15ec235c99966070bd11bb53a1db15ef1d684e2d9bc4d2e756f943af77d51cac7a288bbfc9312ba46212150c57485fe6739ce356de336e1ee225eefcafda863ece814df6c4d5520346f0ee497df52ef07aaea286e19b7e32ab4d37c9cc93ffe5fc5362d6119c16063711e9cfb49a4575b24c46c5aa660ecd70e306b38936cfcef5825b1ad6735a3c19f03bb23c2c12f"}, &(0x7f00000003c0)=0xed) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b3dc18e0e246db2f120d28cb3de389cecc37d2a84b1bcc8bf5f10ce8f285dc7a2296f8e8aeaad70a4666a3b6a99156313e932ffe163fbcf06911f2cfbefc632d4beead73cfc151824bf844a79c1ce8e844db7a693fa47ab6d7e928c1c87c5e7a27af6e8c035c3fe05559036ed4329a943bf6070afa154a6"], 0x210) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 360.212234][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 360.243393][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 360.253897][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 360.262951][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.290402][ T5] usb 4-1: config 0 descriptor?? [ 360.313900][T15037] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 360.380139][ T5] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 360.539770][ T2488] usb 4-1: USB disconnect, device number 64 02:32:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) 02:32:48 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:48 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x90040, 0x44}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={r6, 0x9c}, 0x8) fcntl$dupfd(r1, 0x0, r1) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = accept(r0, 0x0, &(0x7f0000000100)) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000500)) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_RESET(r6, 0x5514) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, '\x00$r'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x4, 0x98, {0x98, 0x30, "2fa15104f0b0f08653e29a484ab8bada1244444e8d7bab6e78dfd1eb47f32c944f4a724831fd36e23989604a04ec393da9d7acc540e93ed47acd5bb35358110830102bccf42d8320094508b24bedbafc0d47f9241a0fe0bdf55661b723f1f9805d8ff5ce67a8840bd8b2e0e12379feba948f5970b44f40f7bb78c14453b2dfd69fbd67f570d6254f2838357df000d1a32392ea77fd97"}}, &(0x7f0000000140)={0x0, 0x3, 0x71, @string={0x71, 0x3, "1a54ed6e3d48cb95ee5320e21ecbd013be055a4181d9c80438e9db20923d077a3b0d4260ef0ab84a97fedf9fdbb82e14d7ed9f1aa57116fe698b5f4589eb1d516aab5e46bc7a94f528f9d6e266f73d37324467026d48aefb3bf9ab417bd54c5331c003305d3001d70cfdd46e2ab4da"}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x0, 0x19, 0xa0, "f77fb14324a019c69b4a4bf6f4017ed076842d1752039c87e5e2b0068cebaac454f771b5d54d87dc81bf4f4e94238d7e0d810dff422455241a3d52da21419b845bf915aa66c5e843aee9421f47a78fd43bc28ec5d328d55e902f02e4f8efe9a22216b690554214d9442fd8dec4acaac9fc73574a724c1a1035854ce32d5a23e1d2c1853210949febe01bd02c832101b29caed32b5b6ee3e1dd4c781afd5f2fb7"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000340)={0x20, 0x0, 0xdf, {0xdd, "aca02341515b2eea2b4bd98168fc4a05a80a7e429f2785d0b80ab63f8b3a44190a531b144c10374da345ec3ff42f477542d0c26a91bb8f9c0e99e51305f26a84153a20e24ccda07554b3f5958ef16b5d87afec9881e3e18a17e6e83d5596d4a28a6f2458efde1cf740bd6b3bf7ca4bdd67a604cc5458da06b0ef26d99a613bfbb5aea465754b9242fc1fcad111311c786a06b0ae5147150615a09135756a8b543e350b59efb45264ef1c6221f132ef8200cf12d9381c59d39573688c4542f4d5db5fc08e3c1b83fd1718aaa53a78ff02db04a468763e404793568f92ec"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0xc}}) 02:32:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 361.389236][ T8613] usb 4-1: new high-speed USB device number 65 using dummy_hcd 02:32:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 361.625233][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 361.634273][ T8613] usb 4-1: Using ep0 maxpacket: 8 [ 361.756876][ T8613] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 361.765026][ T8613] usb 4-1: config 0 has no interface number 0 [ 361.771262][ T8613] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 361.788410][ T8613] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 361.799420][ T8613] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 361.809940][ T8613] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 361.819797][ T8613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.829914][ T8613] usb 4-1: config 0 descriptor?? [ 361.858492][T15102] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 361.866075][T15102] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 361.895874][ T5] usb 3-1: device descriptor read/64, error 18 [ 362.094169][ T8613] usb 4-1: USB disconnect, device number 65 [ 362.283269][ T5] usb 3-1: device descriptor read/64, error 18 02:32:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) 02:32:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:49 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:49 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 362.553234][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd 02:32:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:49 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 362.823447][ T5] usb 3-1: device descriptor read/64, error 18 02:32:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{0x0}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 362.933208][ T2478] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 363.173344][ T2478] usb 4-1: Using ep0 maxpacket: 8 [ 363.213759][ T5] usb 3-1: device descriptor read/64, error 18 [ 363.293492][ T2478] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 363.301674][ T2478] usb 4-1: config 0 has no interface number 0 [ 363.308747][ T2478] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 363.319824][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 363.330029][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 363.339981][ T5] usb usb3-port1: attempt power cycle [ 363.345679][ T2478] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 363.354807][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.367034][ T2478] usb 4-1: config 0 descriptor?? [ 363.384639][T15180] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 363.391573][T15180] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 363.629937][ T2488] usb 4-1: USB disconnect, device number 66 [ 364.053154][ T5] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 364.223359][ T5] usb 3-1: device descriptor read/8, error -61 02:32:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x104) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0xfffffffd, 0x40, 0x4, 0x401, 0x4}, 0x30b, [0xc4a4, 0x2, 0x3, 0x3, 0x5, 0x40, 0x9, 0x7, 0x1, 0x5, 0xffffff01, 0x7ff, 0x1, 0x0, 0x7fffffff, 0x6, 0x9, 0x6, 0x7, 0x9, 0x500, 0x5, 0x0, 0x1, 0xa5, 0x80, 0x1, 0x401, 0x4, 0x5be, 0x0, 0x7f, 0x2, 0x7, 0x8, 0x20, 0x20, 0x4, 0xfffffffd, 0x3ff, 0x8000, 0x3ff, 0x64a, 0x9, 0x1, 0x3f, 0xd30, 0x7fffffff, 0x8, 0x99b, 0x865, 0x1f, 0x0, 0x38, 0x8, 0x1, 0x9, 0x8, 0x80, 0x3, 0xfffffffb, 0x4, 0x7, 0x37, 0x7, 0x0, 0x0, 0x4, 0x5, 0x8, 0x406e9542, 0x4, 0x80000000, 0x401, 0xfce2, 0x200, 0x6, 0x7, 0x80000000, 0x7, 0x3, 0x9, 0x7fff, 0xffffffff, 0x4, 0x1, 0x3f, 0x100000, 0x0, 0x0, 0x401, 0x7ff, 0x1ff, 0x2922, 0x1, 0x80000000, 0x3ff, 0x57, 0x4, 0xfff, 0x2, 0x2, 0x6, 0xfffffffb, 0x40, 0x747d, 0x9, 0x20, 0xffffffff, 0x5, 0xdee, 0x1, 0x8, 0x0, 0x7, 0x7, 0x6, 0x5, 0x11, 0x3, 0x20000, 0x2000, 0x1, 0xcd, 0x3, 0x8000, 0x5, 0x4, 0x0, 0xe8, 0x3f, 0x5231, 0x5, 0x5, 0x4c680000, 0x7, 0x3, 0x48, 0xaf, 0x0, 0x6, 0x2, 0x773, 0xfffffff8, 0x1c, 0x8d, 0x0, 0x4ecc, 0x6, 0x7, 0x101, 0x3ff, 0x80, 0x0, 0x4, 0x6, 0x2, 0x81, 0x80, 0x7, 0x3, 0x3, 0x9, 0xfff, 0x7, 0x0, 0x1, 0x80000000, 0x6, 0x6, 0x800, 0xffffffc0, 0x7, 0x2, 0x0, 0x5, 0xe9e, 0xffff0000, 0x76b4, 0x7, 0xffffffe1, 0x9, 0x4, 0x1, 0x4, 0x5d9073e7, 0x1, 0xffff03b9, 0x101, 0x20000000, 0x6, 0x401, 0x75, 0x7fffffff, 0x8, 0x3, 0x5, 0xa3, 0x2, 0x6, 0x20, 0x1, 0x20, 0x6, 0x1, 0x736, 0x3, 0x8, 0x37ef, 0x7, 0x2, 0x9, 0x7fff, 0x5, 0x100, 0x5, 0x101, 0xffff8402, 0x8000, 0x70000, 0x0, 0x401, 0x5, 0x9, 0x1, 0x6, 0x2, 0x80000001, 0x9, 0x1, 0x2, 0x9, 0x3ff, 0x8, 0x3, 0x8001, 0x5, 0x2, 0x10000, 0x6, 0x6c8e, 0xfc, 0x27b, 0x101, 0xedf, 0x5, 0x415, 0x4b9f, 0x5, 0xffffffff, 0x30, 0xe41, 0x6, 0x0, 0x74, 0x3, 0x9, 0x2, 0x5, 0x2, 0x1000, 0x3ff, 0x6, 0x0, 0x40, 0x7ff, 0x5, 0x1, 0x0, 0xa59, 0x80000000, 0x2, 0x1, 0x800, 0x5, 0x0, 0x5, 0x4, 0xfffffffc, 0xfffff079, 0x2dca, 0x6, 0x84, 0x630000, 0xa83a, 0x1, 0x5ac1, 0x7, 0x9, 0x7382, 0x401, 0x3, 0x4, 0x101, 0x2, 0x0, 0x10001, 0x4c, 0x3fc, 0x2, 0x5, 0x2, 0x7, 0x1, 0x2061, 0x80, 0xcb, 0x3f, 0x8d, 0xb6, 0x1000, 0x19, 0xfbb1, 0x2, 0x4, 0x7, 0x2e2, 0x3, 0x7, 0x8, 0x2, 0xffffc258, 0x7f, 0x5, 0x7fff, 0x8, 0x5, 0x7ff, 0x1, 0x20, 0xfff, 0x7fffffff, 0x82, 0x8, 0x80000, 0xea, 0x0, 0xffffffff, 0x2bf3860a, 0xfb, 0x100000, 0x4, 0x6, 0x5, 0x7, 0x8, 0xd5b8, 0x6, 0x7, 0x7fff, 0x8, 0x1ff, 0xffffffff, 0xfff, 0xe380000, 0x1ff, 0x7, 0x1000, 0x0, 0x80, 0x6, 0x2, 0x2, 0x7, 0xec6e, 0x5, 0xd7, 0xdd, 0x10001, 0x2, 0xa51, 0x9, 0x7, 0xe68670e6, 0x2322, 0x0, 0x1ff, 0x1ff, 0x4, 0x9d2, 0x0, 0x442, 0x4, 0x1, 0x2, 0x5, 0x0, 0x58e10b08, 0x2c, 0x8, 0x100, 0x8, 0xcd98, 0x3, 0x1, 0x3, 0xa5b7, 0x5, 0x1, 0x4f, 0x81, 0x2, 0x800, 0x4, 0x41b, 0x0, 0x1, 0xc61, 0x2, 0x7, 0x2, 0x1, 0x44a5, 0x8000000, 0x6, 0xfffffffd, 0x6e10, 0xe42, 0x800, 0x7fff, 0x73b, 0xdf0c, 0x9, 0x100, 0x80000001, 0x924, 0x5, 0x80000001, 0x7ff, 0x9, 0xfffffffe, 0x8, 0x4, 0x2, 0x9c, 0x4, 0x1, 0x400c, 0x3, 0x505, 0x80000001, 0x3, 0x3, 0xd6dd, 0x9, 0x1, 0x400, 0xea, 0x614, 0x3ff, 0x52bc, 0x1ff, 0xfffffffa, 0x2, 0x6ce7d08e, 0x5cc, 0x700, 0x3, 0x8, 0x7, 0x0, 0x9, 0xe19, 0x1, 0xb7, 0x5, 0x7, 0x101, 0x7ff, 0xfffffffb, 0x0, 0x7, 0x3, 0x0, 0xa678, 0x2, 0x2, 0x3, 0x0, 0x0, 0xffffffff, 0x6, 0x4, 0x1, 0xff, 0x4, 0x4, 0x1ff, 0x4, 0x20, 0x0, 0x9, 0x0, 0x3, 0xdcd, 0x4, 0x7, 0x6ab1, 0x63080, 0x5, 0x8eae, 0x2, 0xfffffff9, 0xcfb, 0xec, 0x7, 0xfffff452, 0x8, 0x7, 0xffffffe1, 0x7, 0xdf8d, 0x3, 0x8, 0x5, 0x1, 0xff, 0xfff, 0x9, 0x1, 0x1, 0x377a2cbf, 0x8001, 0x9, 0x6256, 0x8, 0x4, 0x9, 0x8001, 0x9, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x8d, 0xfffffffb, 0x2, 0x4, 0x7, 0x8001, 0x401, 0x4, 0x5, 0x5, 0x9, 0x9, 0x2, 0x3f, 0x72, 0x4d0, 0xc, 0x200, 0x1f, 0xffff, 0x4, 0x5, 0x9, 0x10000, 0x7, 0x42, 0x4, 0x8, 0x1, 0x2, 0x7, 0x6, 0xc08, 0x7, 0x1, 0xfffffff9, 0x2, 0xfffff000, 0x3, 0x8acb, 0x7fffffff, 0x20, 0x4eff, 0x7, 0xffff, 0x9, 0x6, 0x4, 0x400, 0x5, 0x80000000, 0x7fffffff, 0x7, 0x401, 0x1, 0x5, 0x7, 0x6, 0x800, 0xa3f1, 0x8001, 0x0, 0x3, 0x80000001, 0x3, 0x8, 0x1, 0x20000, 0x5, 0xbd58, 0x10001, 0x401, 0x1, 0x8000, 0x81, 0x1, 0x3, 0x6, 0x62, 0x800, 0x6, 0x8, 0x5, 0x1d, 0x8, 0xfffff786, 0xffff8000, 0xffffffff, 0x10000, 0x800, 0x900, 0x10001, 0x391, 0x9, 0x1, 0x8, 0x9, 0x400, 0x3, 0x800, 0xfff, 0x1, 0x0, 0x3, 0x10000, 0x80000001, 0xff, 0xff, 0x1, 0x503, 0x1, 0x2, 0x100, 0x3ff, 0x2, 0x6, 0x0, 0x0, 0x9, 0xbb, 0x4, 0x0, 0x80, 0xffff, 0x2, 0xff, 0x8001, 0xb2, 0x1ff, 0xed, 0x401, 0x8, 0x156, 0x101, 0xf0f, 0x2, 0xfff, 0x10001, 0x400, 0x1, 0x8, 0xc1b5, 0x8, 0x132b, 0x498b, 0x7ff, 0x8, 0x2, 0xfffffff9, 0x3, 0x2, 0x10001, 0x0, 0x7fff, 0x7, 0x9, 0xf51, 0xb56, 0x9, 0xc4a, 0x7, 0x800, 0x7f, 0x6, 0xffffffff, 0x96c, 0x9, 0x5, 0x2, 0x8, 0x3, 0x5, 0x0, 0x1, 0x3, 0x6, 0x4, 0x6, 0xfffff000, 0x7, 0x509, 0xb37a, 0x3, 0x3ff, 0x10000, 0xd5, 0x80, 0x9, 0x79, 0x95a, 0x1ff, 0x2, 0xffff, 0x0, 0x5, 0xfff, 0x2, 0xff, 0x10, 0x7, 0xfff, 0x1000, 0x7f, 0x5, 0x55df, 0x1ff, 0x8, 0x6, 0x8, 0x1, 0x1, 0x1, 0x3, 0x8ef, 0x8, 0xa4d, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1800, 0x3, 0x6, 0x6, 0x4, 0x39d, 0x9c0, 0x48b, 0x6, 0xffffffff, 0xbc, 0x9ac, 0x7, 0x7299, 0x1dbe, 0x8000000, 0x5, 0xffffffff, 0x3ff, 0x2, 0x2, 0x7, 0x4, 0xd3e3, 0x4, 0x3ff, 0x3, 0x2, 0x3, 0x101, 0x3, 0xfffffffd, 0x8, 0x5e57, 0x1ff, 0x8, 0x298, 0x6, 0x8, 0x9, 0x6, 0x88, 0x1000, 0x80000000, 0xd8, 0x326, 0x9, 0x5, 0x3f9e, 0xfffffffb, 0x0, 0xc0b, 0x73b, 0x0, 0x9, 0xffff, 0x9, 0x9, 0x727, 0x1f, 0x3, 0x2, 0xfffffff8, 0x6, 0x5757, 0x1, 0xf0, 0xfffffffe, 0x1, 0xfffffff9, 0x2, 0xe6e2, 0x3, 0x9, 0x9, 0x124c, 0x3, 0x1f, 0x8001, 0x7, 0xab6, 0x3, 0x800, 0x91, 0x8, 0x800, 0xff, 0x8001, 0x6, 0x2, 0x400, 0x7ff, 0x3, 0x8000, 0x0, 0x0, 0x5, 0xc75a, 0x655a165c, 0x8, 0x81, 0x400, 0x5, 0x2, 0x1, 0x8, 0x5, 0x5f4, 0x2, 0x9, 0x6, 0x3ee2, 0x8, 0x0, 0x3, 0x3, 0x9, 0x9, 0xfffffffa, 0x2, 0x9, 0x2, 0xbb6, 0x1, 0x5, 0x2, 0x9, 0xa, 0x3, 0x401, 0xb1, 0x0, 0x2, 0x3, 0x1, 0x6, 0x6, 0x6, 0x80, 0x10001, 0x101, 0xffff8988, 0x163, 0x8001, 0x80000001, 0xab0, 0x400, 0x2, 0x200, 0x0, 0x9, 0xbb5e, 0x80000001, 0x1, 0x9, 0x0, 0x3, 0x1, 0x3c62, 0x80000000, 0x7fff, 0x3, 0x800, 0x6, 0x4, 0x7fff, 0x40, 0x10001, 0x2bab, 0x7, 0x1669, 0x3a92, 0x40, 0x2, 0xaf, 0x469, 0x3b, 0x8, 0x0, 0x1, 0x4, 0x400, 0xfffffffc, 0x4, 0x4, 0x6, 0x800, 0x9, 0x9, 0x1, 0x101, 0x0, 0x5, 0x6, 0x0, 0x80000001, 0xe92, 0x3, 0x9, 0x5, 0xd70, 0x8, 0x3, 0xfff, 0x80, 0x7fff, 0x800, 0x1f, 0xff, 0x268, 0x3, 0x8, 0x1, 0x7, 0x7fff, 0x6, 0x1, 0x4000000, 0x0, 0x1, 0x3f, 0xfffffbff, 0x0, 0x0, 0x5, 0x8001, 0x2, 0x2, 0xf3e, 0x80, 0x10000, 0x7, 0x5, 0x5b, 0x7fff, 0x8, 0x80000000, 0x9, 0x1, 0xffffff39, 0x1f, 0x7, 0x0, 0x0, 0x2, 0x9, 0x7fffffff, 0x3, 0x9, 0x49fa, 0x6, 0x8001, 0x3, 0x6, 0x8, 0x3ff, 0xff, 0xfffffe01, 0x20, 0x8, 0x8f30, 0x6, 0x3, 0xfffffffe, 0x8000, 0x9, 0xffff, 0x8]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:32:51 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{0x0}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x4, 0x0, 0x98}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff], 0x0, 0x0, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 02:32:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) 02:32:51 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0x0, 0x9}, {0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 02:32:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{0x0}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 364.433349][ T5] usb 3-1: device descriptor read/8, error -71 02:32:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x1, 0x1000, 0x9, 0x100, 0x5, 0x800}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 364.513592][T15260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.568506][T15260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="2c00000024008203154f7120af0e9780e38a8344", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000070001006d710000"], 0x2c}}, 0x0) 02:32:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, 0x0) dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={0x0, @xdp={0x2c, 0x4, r7, 0xb}, @llc={0x1a, 0x205, 0x7, 0xfd, 0x0, 0x4, @multicast}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, 0x8001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='macvlan0\x00', 0x9, 0x7, 0x1}) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00n\x00', @ANYRES16=0x0, @ANYBLOB="000130bd7000fddbdf251a000000"], 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20004080) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r10], 0x2}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 364.683246][ T2478] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 364.739693][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.831612][T15275] device bond4 entered promiscuous mode [ 364.844284][T15275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 364.880476][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 02:32:51 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 364.943392][ T2478] usb 4-1: Using ep0 maxpacket: 8 02:32:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCEXCL(r6, 0x540c) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 365.063684][ T2478] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.083050][ T2478] usb 4-1: config 0 has no interface number 0 [ 365.140441][ T2478] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 365.213021][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 365.246172][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 02:32:52 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 365.281263][ T2478] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 365.322408][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.343189][T15326] kvm [15323]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x6 [ 365.364909][ T2478] usb 4-1: config 0 descriptor?? [ 365.392628][T15326] kvm [15323]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000078 data 0xdf [ 365.433680][T15254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 365.447606][T15254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 365.457038][T15326] kvm [15323]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x79 02:32:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, 0x0) dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 365.533422][T15326] kvm [15323]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000004c data 0x6 [ 365.611282][T15326] kvm [15323]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000003b data 0xf6 [ 365.719323][ T5] usb 4-1: USB disconnect, device number 67 02:32:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 02:32:53 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x5}, 0x8) 02:32:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, 0x0) dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:53 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 366.623731][ T2514] usb 4-1: new high-speed USB device number 68 using dummy_hcd 02:32:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup2(r3, r2) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r4], 0x2}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'team0\x00', r4}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r7], 0x2}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r9], 0x2}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2340}, 0xc, &(0x7f0000001cc0)={&(0x7f00000019c0)={0x2f0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x40840}, 0x4001) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) [ 366.892936][ T2514] usb 4-1: Using ep0 maxpacket: 8 [ 367.023252][ T2514] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 367.034728][ T2514] usb 4-1: config 0 has no interface number 0 [ 367.049076][ T2514] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 367.066549][ T2514] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 367.076950][ T2514] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 367.087646][ T2514] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 367.107429][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.148845][ T2514] usb 4-1: config 0 descriptor?? [ 367.183705][T15388] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 367.196627][T15388] raw-gadget gadget: fail, usb_ep_enable returned -22 02:32:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(0xffffffffffffffff, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 367.441552][ T2514] usb 4-1: USB disconnect, device number 68 02:32:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 02:32:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(0xffffffffffffffff, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:55 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 368.342822][ T2478] usb 4-1: new high-speed USB device number 69 using dummy_hcd 02:32:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 368.582825][ T2478] usb 4-1: Using ep0 maxpacket: 8 02:32:55 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 368.703405][ T2478] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 368.718055][ T2478] usb 4-1: config 0 has no interface number 0 [ 368.742901][ T2478] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 368.778358][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 368.812852][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 368.863020][ T2478] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 368.872108][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.924005][ T2478] usb 4-1: config 0 descriptor?? [ 368.943220][T15456] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 368.950208][T15456] raw-gadget gadget: fail, usb_ep_enable returned -22 02:32:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(0xffffffffffffffff, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 369.207858][ T2478] usb 4-1: USB disconnect, device number 69 02:32:56 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 02:32:56 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 370.092789][ T2514] usb 4-1: new high-speed USB device number 70 using dummy_hcd 02:32:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:32:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 370.348808][ T2514] usb 4-1: Using ep0 maxpacket: 8 02:32:57 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 370.472933][ T2514] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 370.481287][ T2514] usb 4-1: config 0 has no interface number 0 [ 370.520539][ T2514] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 370.547545][ T2514] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 370.586412][ T2514] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 370.601964][ T2514] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 370.618312][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.651604][ T2514] usb 4-1: config 0 descriptor?? [ 370.693031][T15519] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 370.700018][T15519] raw-gadget gadget: fail, usb_ep_enable returned -22 02:32:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 370.940218][ T2478] usb 4-1: USB disconnect, device number 70 02:32:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 02:32:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:32:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:32:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 371.932649][ T2514] usb 4-1: new high-speed USB device number 71 using dummy_hcd 02:32:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 372.182716][ T2514] usb 4-1: Using ep0 maxpacket: 8 02:32:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 372.312894][ T2514] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 372.320934][ T2514] usb 4-1: config 0 has no interface number 0 02:32:59 executing program 1: perf_event_open(&(0x7f00000012c0)={0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 372.365531][ T2514] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 372.402609][ T2514] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 372.432871][ T2514] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 372.472556][ T2514] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 372.481637][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.533394][ T2514] usb 4-1: config 0 descriptor?? [ 372.553044][T15585] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 372.560903][T15585] raw-gadget gadget: fail, usb_ep_enable returned -22 02:32:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1004000000016) 02:32:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 372.860869][ T2514] usb 4-1: USB disconnect, device number 71 02:33:00 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x6000000}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000100)={0x5, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fc) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:33:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r7], 0x2}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="6772657461ffff0000000000000000003c4e993b8e3298b9b38de9bd79deded400ec7b67b5c7281c8fb1585706be90cc08c879fee2c1ffffc4", @ANYRES32=r7, @ANYBLOB="8000002000000020000000014b24002c00670000062990787f000001ac1414bb07175a0a010102ac141411ac14140eac1414aaffffffff00"]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000480)={0x1000, 0x240, 0xc80, 0x300, 0x3, 0x0, 0x10, 0x2, {0x6, 0x81}, {0x8000, 0x5}, {0x8, 0x6, 0x1}, {0x5, 0x40, 0x1}, 0x2, 0x2, 0x80000000, 0x400, 0x0, 0x677c, 0x26a, 0x7b05, 0x8, 0x8, 0x7, 0x3, 0x30, 0x1, 0x2, 0xf}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0xa) sendmsg$inet(r8, &(0x7f0000000b00)={&(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000180)="ef6b264af7c74618a8e3159050296a205c44d6b14b3e1da88da7434c058a5e4550cd1fe6f3a7466190261e518611d4ad1c761e629070d5631f", 0x39}, {&(0x7f0000000540)="aa456952c2fcea221cc2df0cf4d8bfc2661dbe2c31ce1c39181cd7b7d7166ec183447ede1176b87fec8c3ffccbb930c14aa3f61d615ddac750f36888e00c8b4840b8fc5c827628d48c62ad968e99259665cb5b2f3185950e36f5fdf7594c6891a4", 0x61}, {&(0x7f00000005c0)="a5c5b88f20caaa02eb14ec", 0xb}, {&(0x7f0000000600)="86da1a1b415ef12df2c4d6991fe446179dcc45c708df587f7f35f54c1a0b157514b146adf60ec171bfe50d8722875f38a79ce97ff66ccfcd3040d3ee422a15e423892205f9e4093e7eb5e5e24a0513e94a5d6c3d031eec75a670950a4ccc3b9caf7a9f6799ad4b7234d0b4e1bef01e532e6dfc2c81458609826ba84df000748edf35b67cb29e2f934220e7655c0415f497454525622a8461368b49fe946e4cdb0b90973c1cc09c10bb980bd3f1b271459046d5ac593b5a7038e85ea53442366de5867fc4d22bf441b3", 0xc9}, {&(0x7f0000000700)="ead19d4613a3021fb8e296abd76e7a06299f19d9c76a5de7190bd5c43d98dae94a7a2c756e78f31497f25521c44aed1deeeb1f8d3375409879b735c2c39945a9df865a266fa47b64af9a43850e3ab57f3942f61528bc35ce0aaafbbc829b8bd9adfe346ab944e5885077e56d7854e7d4f78c09dfa372e3f03975af8fa9b7b62458776984c0bfdc779410f9672d28900acc16de593821578b33a9a3", 0x9b}, {&(0x7f00000007c0)="f9f517629823d3b290c707c537425dbb28be067981af1751527950879e33e881c8c8bb5d9510431b0fceed354ec7f360a9bf017f47bc1481bb5d0ca9db27c5b6f025e12220ac15fafcbd861487e328647c216342dbdc65ed8aab5da47a", 0x5d}, {&(0x7f0000000840)="8fa1f23acd94b235539faac5d23aa24367afec70e271f3301a208248536b0ef7c30667d4e4832b8a66480935ceb4d031719aabb097eba2a046104db00e2dd99c615cde71309e6b45ecf918654475be8e52766b2a2a5043d001562bff8dab0eee4740c87afaf271ab335da2970da8531135b06f13ca8f9aebc97a97866ce264d1a050659b73b1ea49389c805a40599194cca3784040ef5fdbda1dd6863eec2c03c1b0ee132d7c257ee8606a8b2923292da914012dd8add41a5f86d5c837f6286b434a4666b2", 0xc5}], 0x7, &(0x7f00000009c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc3b2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdfe1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x8e, [@private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x38}]}, @noop, @ssrr={0x89, 0xb, 0x48, [@empty, @remote]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8d}}, @ip_retopts={{0x90, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf7, [@private=0xa010102, @remote, @broadcast]}, @noop, @end, @timestamp_addr={0x44, 0x3c, 0x54, 0x1, 0x4, [{@local, 0x2}, {@broadcast, 0x9}, {@rand_addr=0x64010100, 0xffff8001}, {@remote, 0x531e}, {@remote, 0x1}, {@remote, 0x1}, {@broadcast, 0xffffffc0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xd2, [@multicast1]}, @ssrr={0x89, 0x13, 0xd7, [@remote, @loopback, @remote, @empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x22, [@local, @remote, @multicast1]}]}}}], 0x128}, 0x1) 02:33:00 executing program 1: perf_event_open(&(0x7f00000012c0)={0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 02:33:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0x9f0000, 0x3, 0x5, r1, 0x0, &(0x7f0000000100)={0x990a96, 0x1ff, [], @string=&(0x7f0000000040)}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000240)={0xffffffffffffffff}, 0x2, {0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x35a3ed07}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0450b003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000080)={0x1, 0xffffffff, 0x0, 0x0, 0x1}) 02:33:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 373.762578][ T2478] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 373.772612][ T2514] usb 1-1: new high-speed USB device number 23 using dummy_hcd 02:33:00 executing program 1: perf_event_open(&(0x7f00000012c0)={0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 374.008343][ T2478] usb 4-1: Using ep0 maxpacket: 8 [ 374.022637][ T2514] usb 1-1: Using ep0 maxpacket: 16 [ 374.132568][ T2478] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 374.145533][ T2478] usb 4-1: config 0 has no interface number 0 [ 374.160102][ T2514] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 374.160616][ T2478] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 374.182522][ T2514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.207461][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 374.212405][ T2514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.218190][ T2478] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 374.239128][ T2478] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 374.249285][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.258174][ T2514] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 374.261560][ T2478] usb 4-1: config 0 descriptor?? [ 374.312708][T15659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 374.319774][T15659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 374.340262][ T2514] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 374.369545][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.406863][ T2514] usb 1-1: config 0 descriptor?? 02:33:01 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 374.662868][ T2488] usb 4-1: USB disconnect, device number 72 [ 375.030099][ T2514] usbhid 1-1:0.0: can't add hid device: -71 [ 375.052492][ T2514] usbhid: probe of 1-1:0.0 failed with error -71 [ 375.082581][ T2514] usb 1-1: USB disconnect, device number 23 02:33:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1004000000016) 02:33:02 executing program 0 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:02 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400eb05003f004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @empty}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 02:33:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x906c2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x4302, 0x0) getpeername$qrtr(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 375.783461][T15744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:33:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000000c0)=""/119) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000080)={0xb4b, 0x20323159, 0x3, @stepwise={0x101, 0x8, 0x3, 0x4, 0x101, 0x81}}) r7 = fcntl$dupfd(r4, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 375.878109][T15744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:33:02 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0xa, 0x801, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept4$unix(r5, 0x0, &(0x7f0000000040), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000100)="66b99d00004066b81324a1c966ba000000000f3066b9800000c00f326635000100000f30baf80c66b874a2888166efbafc0cb80000ef0f35f466b93f0a000066b80e00000066ba000000000f30660f380ac6660f6e37266466660f3882053e0f572b", 0x62}], 0x1, 0x3, &(0x7f00000001c0)=[@cstype3={0x5, 0x3}], 0x1) [ 376.052635][ T2488] usb 1-1: new high-speed USB device number 24 using dummy_hcd 02:33:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) r4 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r5 = geteuid() fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0f820000", @ANYRES32=r5, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="10000200000000082000000000000000bf6ba308525fb82df4d1ae00a29f40e06b000000000000000000000000000000cb96010000808cf51cd8a6b0caae714e399af327eca1a4e438ce01747a7736e2648cd3bcc59a1b37cd350944aa459f1d304fa8b17722732506148b6a44510363745431f26bc2e31a60a275bc6211731f0361878aa0c2930a0e0092d4c02c1fe9c5659f5d672bf342eacd48f6806b463b3a94083644525ad3670c2a888ee1a4fa9bd178b4e2f2b734cb2a8c260efb90130bc6afd43aeee4e5410c904bfaeebd4782454044c095cad8923b8682629a5a67f101a1a2fcd828392f1507dfecad1c2530c84da1c9dc457ed82cbc622bbe9273159cef38d5c5c3c72797d7b4f6b463bf6a0eadd053bd82a4cf6c8ba5536c23c99bd67a59f429027cdaaf18a497760080f7241c3040b51558adb47b2c786d3fe8d48315d12079bd4b28d6ecb69b0dfdc3c6c4fe56db1cd32fcdc10aac13394f9e5097905f5dfb08b69f24225ee86859e1c48fdd8c4439c3f5f6c270d31102feb71a9767c3de68861b96b58a608d21719f1b789f0f1fba2fb4f9240779306ed9310459ffd4c371b7527c0b8b7ed9adaffd1f957a6ed65564e58cc382d03569cf924881641dfa7d367e3688d020a8b64658a1599d203795be8979ecee265946763d878c2ebcdac5b964b90b9964874c1967537a79ebf30dde0040d0acf11dac674cc8ddb2753b216f4fc2c2eda952a78329e16f0369adf495a885ec5abeb580b6d53079bbfa2ef0e8e5035e04afd81a5e75694deec95ccaa92f72af62b7829e94b82737442503667e104c12c6611543f18c2d8e829ab3062d9c009bd7ba7a05a01558fb610db6036e73c0f19e98dbbfcf006b262d9b2ae14a66835d44a2e632cb883f3a2ce238aa938f0fa813bf101837ca43972550ce1482c3ea432683072551c51f377692d4faef78175f024cc75264bc91ccab0bd2f1b1480425f758b9e5ea58616ac98aaf463ad5372ae4d79f508cd8a0dafb336cb5d279869108ac3c39d44b1c983db6ea2b419f9c7dbd000000000000000029f72bcf07e1766264166b207b1235f7661dacb4dd81fbe4ed9080ccb5d5ba33a47435b712746a609ef267c42cdc1260cdd40ce65e9ec34e466d70ed417e7925f400237975fcadbd326605c4b3e44ac48257c4a095a80fe09db3d1703926ef05d2b306fa1f8d68eb6388d7d97abdcc5820facb184791d2f97a1f2b6c20bd09e02f24fd93ff5c328f72ea3f017aefdb836fec2706f32afa19f298446f7ef0e950e316fa326ebb9a8270ae860dd2843f91fa2129b2a0cc85aa432c94f080b832eb2681c31aa85e63a0e2490d"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f0000000140)=ANY=[@ANYBLOB="07ea062c8887464ace915bed1055210a37f308f9364d00774578b6efca1b11366494ed8468e9628263b28ebff063f2a6147678103e330734110666cfb3", @ANYRESHEX=r3, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df717020475a2987318f5d14b44f6e905f49874900a7725d00c", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,dont_hash,\x00']) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x8, 0x6e31, {}, {r5}, 0x7, 0x24}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000080)={r6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:33:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x1405, 0x800, 0x70bd29, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x6b, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x90}}, 0x8000) [ 376.302784][ T2488] usb 1-1: Using ep0 maxpacket: 8 02:33:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x40000, 0x0) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000080)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 376.453583][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 376.471012][ T2488] usb 1-1: config 0 has no interface number 0 [ 376.478037][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 376.495625][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 376.508509][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 376.545923][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 376.587380][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.625983][ T2488] usb 1-1: config 0 descriptor?? [ 376.673863][T15740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.681334][T15740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.943406][T15740] FAULT_INJECTION: forcing a failure. [ 376.943406][T15740] name failslab, interval 1, probability 0, space 0, times 0 [ 377.009057][T15740] CPU: 1 PID: 15740 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 377.019425][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.029590][T15740] Call Trace: [ 377.032890][T15740] dump_stack+0x18f/0x20d [ 377.037614][T15740] should_fail.cold+0x5/0x14 [ 377.042398][T15740] should_failslab+0x5/0xf [ 377.046843][T15740] kmem_cache_alloc+0x2a9/0x3b0 [ 377.051977][T15740] getname_flags.part.0+0x50/0x4f0 [ 377.057695][T15740] getname+0x8e/0xd0 [ 377.061792][T15740] do_sys_openat2+0xf7/0x3b0 [ 377.066521][T15740] ? build_open_flags+0x650/0x650 [ 377.071787][T15740] ? __mutex_unlock_slowpath+0xe2/0x610 [ 377.077362][T15740] ? wait_for_completion+0x260/0x260 [ 377.082683][T15740] __x64_sys_openat+0x13f/0x1f0 [ 377.087574][T15740] ? __ia32_sys_open+0x1c0/0x1c0 [ 377.092543][T15740] ? ksys_write+0x1a5/0x250 [ 377.098386][T15740] ? lock_is_held_type+0xb0/0xe0 [ 377.103971][T15740] ? do_syscall_64+0x1c/0xe0 [ 377.108840][T15740] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 377.115126][T15740] do_syscall_64+0x60/0xe0 [ 377.119836][T15740] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 377.126322][T15740] RIP: 0033:0x45cba9 [ 377.132395][T15740] Code: Bad RIP value. [ 377.136495][T15740] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.144940][T15740] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 377.153169][T15740] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 377.161137][T15740] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.169178][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 377.177405][T15740] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 377.193552][ T2488] usb 1-1: USB disconnect, device number 24 02:33:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1004000000016) 02:33:05 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x24, r9, 0xf, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000126bd7000ffdbdf2508000004050029000100000008002c00400000000500370001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x4001) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:33:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:33:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x36) 02:33:05 executing program 0 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffff8, 0xa800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3d) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r4, 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x174, 0xf, 0x1, 0x801, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x5}, [@nested={0xc3, 0x2a, 0x0, 0x1, [@generic="c531", @generic="95b799ef7c2c265cef43584f7d6354dabf7579c7295ecc967ab6f5d646c14613dcce6c1df9c5d4af14321e7e0f9479a0ccaccc4887b25fa9a2108887e505d306793741a5dfb74cc97e0915d5e6cdb3dc94d43281a9cbadbd75401180e14339c83c996710ae53f41276fd9552f8e8bf6717ea96205084adce2bec5f2b6d633f0a745b1f246f9cfab836b120780d3e251fd464a00e5b34557d63d8bf95fa31ab1a71038610a3cf5db0d62b7e17bc", @typed={0x7, 0x3d, 0x0, 0x0, @str='^[\x00'}, @typed={0x8, 0x19, 0x0, 0x0, @pid=r4}]}, @nested={0x9c, 0x75, 0x0, 0x1, [@generic="45d4a0510f7c5673265b2f82729e06905c009bf9eb79add02c7e37c30357b3452e9d922beb935a0d4fe10d01b75911d814904907aea501a1ddc52ecfc1c1310029b938bed11849085b7dfb94b5ab2cd06496348563bc7578ae0b3d0c0c45114112214b9b3982820ca5c0742adf9ad02699b17af0e70b95de09f4cc290c6723e7aa378e292782f44d6703c0a82b7c757430a964ef288bd921"]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4048000}, 0x50) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:33:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f00000000c0)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x3, 0x60, 0xfff, 0x5, 0x40, 0xffffffffffffffff, 0x4, [], 0x0, r3, 0x1, 0x4, 0x2}, 0x40) splice(0xffffffffffffffff, &(0x7f0000000100)=0x1903, r4, &(0x7f0000000240)=0xffff, 0x80, 0x4) sched_setscheduler(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) gettid() signalfd4(r0, 0x0, 0x0, 0x41000) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x105042, 0x0) r6 = dup(0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000000)={0x550, 0x800, 0x640, 0x10, 0x10001, 0x20, 0x10, 0x2, {0x4, 0x738}, {0x0, 0x200, 0x1}, {0x81, 0x4d}, {0x4, 0x1ff, 0x1}, 0x3, 0x40, 0x6, 0x7, 0x1, 0x2, 0x3, 0x8000, 0xfffffffc, 0x7, 0x5043, 0x3, 0x2, 0x4, 0x3, 0xc}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 02:33:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 379.072434][ T8613] usb 1-1: new high-speed USB device number 25 using dummy_hcd 02:33:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$6lowpan_enable(r4, &(0x7f0000000080)='1', 0x1) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={r7, 0x7ff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0xdcb, 0xa, 0x2, 0x9000, r8}, &(0x7f00000001c0)=0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r9, 0x0, r9) r10 = dup(r9) write$P9_RLOCK(r10, &(0x7f00000000c0)={0x8, 0x35, 0x1, 0x3}, 0x8) 02:33:06 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r4, 0x100, 0x70bd30, 0x25dfdbfd}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x20004080) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r4, 0xa859ab0556f0e26f, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x521e1641614c0872}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r8, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x81, 0x80000001, 0xfffffffd}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x88a0}, 0x4c041) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r8, 0x800, 0x70bd28, 0x25cfdbfd, {{}, {}, {0x14, 0x19, {0x8000, 0x800, 0x9, 0x8d3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x2c044850) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x207, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03c50000000000006c00128009000100766c616e000000005c0002800600010014000000040003804c0003800c000100ffffffff090000000c0001007f000000020000000c00010000000000070000000c00010000000000030000000c00010009000000fc0200000c00010000000000fabffffd08000500", @ANYRES32=r7, @ANYBLOB="6ef01f5bcd88423dc309166f8626aa04d94ad5329926c1d7133b11631966c1e91bb00e143ec01e01005e4225868154d8f4286f0904fba739ec28a8210e7617552e487f254ec55b4b69b4dc027bf0e570c47abdca5ad441e403b01012d37ebd0ef41f922b9022c748d226f0168741b00c3874791b02eb000f776ad6831159a7664856416b840d161d4a8cb57560ba9cb48e9600"/171], 0x94}}, 0x0) [ 379.315963][ T8613] usb 1-1: Using ep0 maxpacket: 8 [ 379.436309][ T8613] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 379.463903][ T8613] usb 1-1: config 0 has no interface number 0 [ 379.484782][ T8613] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 379.521070][ T8613] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 379.536968][ T8613] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 379.547377][ T8613] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 379.557125][ T8613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.566734][ T8613] usb 1-1: config 0 descriptor?? [ 379.583614][T15834] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 379.591298][T15834] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 379.826843][T15834] FAULT_INJECTION: forcing a failure. [ 379.826843][T15834] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 379.840525][T15834] CPU: 0 PID: 15834 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 379.849450][T15834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.859898][T15834] Call Trace: [ 379.863336][T15834] dump_stack+0x18f/0x20d [ 379.867940][T15834] should_fail.cold+0x5/0x14 [ 379.872542][T15834] __alloc_pages_nodemask+0x1a3/0x930 [ 379.877916][T15834] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 379.883919][T15834] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 379.890697][T15834] ? lock_acquire+0x1f1/0xad0 [ 379.895398][T15834] ? fs_reclaim_acquire+0xf/0x40 [ 379.900443][T15834] ? find_held_lock+0x2d/0x110 [ 379.905233][T15834] cache_grow_begin+0x8c/0xb20 [ 379.910022][T15834] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 379.915510][T15834] cache_alloc_refill+0x27b/0x340 [ 379.920563][T15834] ? lockdep_hardirqs_off+0x66/0xa0 [ 379.926007][T15834] kmem_cache_alloc+0x38e/0x3b0 [ 379.930886][T15834] getname_flags.part.0+0x50/0x4f0 [ 379.938139][T15834] getname+0x8e/0xd0 [ 379.942060][T15834] do_sys_openat2+0xf7/0x3b0 [ 379.946870][T15834] ? build_open_flags+0x650/0x650 [ 379.951987][T15834] ? __mutex_unlock_slowpath+0xe2/0x610 [ 379.957756][T15834] ? wait_for_completion+0x260/0x260 [ 379.963164][T15834] __x64_sys_openat+0x13f/0x1f0 [ 379.968191][T15834] ? __ia32_sys_open+0x1c0/0x1c0 [ 379.973362][T15834] ? ksys_write+0x1a5/0x250 [ 379.977868][T15834] ? lock_is_held_type+0xb0/0xe0 [ 379.982803][T15834] ? do_syscall_64+0x1c/0xe0 [ 379.987609][T15834] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 379.993583][T15834] do_syscall_64+0x60/0xe0 [ 379.997994][T15834] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 380.003878][T15834] RIP: 0033:0x45cba9 [ 380.007941][T15834] Code: Bad RIP value. [ 380.012011][T15834] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.020819][T15834] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 380.030531][T15834] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 380.038499][T15834] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 380.046484][T15834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 380.054690][T15834] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 380.082464][ T2488] usb 1-1: USB disconnect, device number 25 [ 381.022723][ T0] NOHZ: local_softirq_pending 08 02:33:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) 02:33:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(0xffffffffffffffff, r4) r6 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r8}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r8, 0x1, 0x10}, &(0x7f00000000c0)=0xc) r9 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:33:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x60082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8200}, [@IFLA_MASTER={0x8}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:33:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:33:08 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:08 executing program 0 (fault-call:4 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000480)={0xe8200100, 0x0, 0x0, 0x0, {0x3c}, &(0x7f0000000040)=""/68, 0x44, 0x0, 0x0, 0x0, {r1}}, 0x58) 02:33:09 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 382.041200][T15940] IPVS: ftp: loaded support on port[0] = 21 02:33:09 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 382.142977][ T2478] usb 1-1: new high-speed USB device number 26 using dummy_hcd 02:33:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, r5, 0x301, 0x0, 0x0, {0x11}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="11036b01", @ANYRES16=r5, @ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x40000010}, 0x2004c0c1) bind$inet(r3, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) syz_usb_connect(0x0, 0x4de, &(0x7f0000000000)=ANY=[@ANYBLOB="f0662f547e1b1835bf52f3e18c317ecd4bf88b9a5b9ccdf1cae24b6eb3b31f78850ea65c789733952f031f0428966c41166aaafae47dda46d7b2bcbc76a5297ba9cdeb13ca398204282f19b0c9a32c5f803facd11ac22d6f711a979067e1fc3d398c202c42fcb5ee8dde2c8f437ce58011de8b77ba41245fb9463ca1eb4c6c48166ab8fff5976119ffa72e43b49b7ed6a1b6d911b6b31acc723b477bbe87f4c19b17d5d13fb3885ac7ad5333fde672761edd2aa82e7a992abcd0"], 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 02:33:09 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 382.348635][T15970] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 382.391884][ T2478] usb 1-1: Using ep0 maxpacket: 8 02:33:09 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 382.512294][ T2478] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 382.520437][ T2478] usb 1-1: config 0 has no interface number 0 [ 382.553416][ T2478] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 382.586640][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 382.601711][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 382.612543][ T2478] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 382.621614][ T2478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.630977][ T250] tipc: TX() has been purged, node left! [ 382.638371][ T2478] usb 1-1: config 0 descriptor?? 02:33:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) [ 382.663474][T15921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 382.670858][T15921] raw-gadget gadget: fail, usb_ep_enable returned -22 02:33:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000001800)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x8000, 0x5, 0x72c4, r4}, 0x10) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:33:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:33:09 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 382.802152][ T8614] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 382.915633][T15921] FAULT_INJECTION: forcing a failure. [ 382.915633][T15921] name failslab, interval 1, probability 0, space 0, times 0 [ 382.958569][T15921] CPU: 1 PID: 15921 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 382.967277][T15921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.977323][T15921] Call Trace: [ 382.980606][T15921] dump_stack+0x18f/0x20d [ 382.984923][T15921] should_fail.cold+0x5/0x14 [ 382.989613][T15921] should_failslab+0x5/0xf [ 382.994073][T15921] kmem_cache_alloc+0x2a9/0x3b0 [ 382.998930][T15921] __alloc_file+0x21/0x350 [ 383.003339][T15921] alloc_empty_file+0x6d/0x170 [ 383.008115][T15921] path_openat+0xe3/0x2750 [ 383.012529][T15921] ? __lock_acquire+0x16e3/0x56e0 [ 383.017558][T15921] ? path_lookupat+0x830/0x830 [ 383.022333][T15921] ? cache_grow_end+0x46/0x170 [ 383.027096][T15921] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 383.033067][T15921] ? lock_is_held_type+0xb0/0xe0 [ 383.037989][T15921] do_filp_open+0x17e/0x3c0 [ 383.042603][T15921] ? may_open_dev+0xf0/0xf0 [ 383.047086][T15921] ? __alloc_fd+0x28d/0x600 [ 383.051588][T15921] ? lock_downgrade+0x820/0x820 [ 383.056434][T15921] ? do_raw_spin_lock+0x120/0x2b0 [ 383.061438][T15921] ? rwlock_bug.part.0+0x90/0x90 [ 383.066361][T15921] ? _raw_spin_unlock+0x24/0x40 [ 383.071191][T15921] ? __alloc_fd+0x28d/0x600 [ 383.075711][T15921] do_sys_openat2+0x16f/0x3b0 [ 383.080388][T15921] ? build_open_flags+0x650/0x650 [ 383.085408][T15921] ? __mutex_unlock_slowpath+0xe2/0x610 [ 383.090950][T15921] ? wait_for_completion+0x260/0x260 [ 383.096228][T15921] __x64_sys_openat+0x13f/0x1f0 [ 383.101061][T15921] ? __ia32_sys_open+0x1c0/0x1c0 [ 383.105980][T15921] ? ksys_write+0x1a5/0x250 [ 383.110466][T15921] ? lock_is_held_type+0xb0/0xe0 [ 383.115386][T15921] ? do_syscall_64+0x1c/0xe0 [ 383.119973][T15921] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 383.125935][T15921] do_syscall_64+0x60/0xe0 [ 383.130348][T15921] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 383.136220][T15921] RIP: 0033:0x45cba9 [ 383.140186][T15921] Code: Bad RIP value. [ 383.144405][T15921] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.152794][T15921] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 383.160745][T15921] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 383.168694][T15921] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 383.176642][T15921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 383.184593][T15921] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 383.271868][ T8614] usb 4-1: device descriptor read/64, error 18 [ 383.342066][ T2514] usb 1-1: USB disconnect, device number 26 02:33:10 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 383.671865][ T8614] usb 4-1: device descriptor read/64, error 18 02:33:10 executing program 0 (fault-call:4 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 02:33:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(0x0, 0x1004000000016) 02:33:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 383.941832][ T8614] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 384.222033][ T2514] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 384.241865][ T8614] usb 4-1: device descriptor read/64, error 18 [ 384.491753][ T2514] usb 1-1: Using ep0 maxpacket: 8 [ 384.611805][ T2514] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 384.620506][ T2514] usb 1-1: config 0 has no interface number 0 [ 384.641727][ T2514] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 384.661696][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 384.677608][ T8614] usb 4-1: device descriptor read/64, error 18 [ 384.683092][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 384.721742][ T2514] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 384.730927][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.755743][ T2514] usb 1-1: config 0 descriptor?? [ 384.774020][T16046] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 384.781340][T16046] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 384.802022][ T8614] usb usb4-port1: attempt power cycle [ 385.046274][T16046] FAULT_INJECTION: forcing a failure. [ 385.046274][T16046] name failslab, interval 1, probability 0, space 0, times 0 [ 385.066177][T16046] CPU: 0 PID: 16046 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 385.075003][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.085102][T16046] Call Trace: [ 385.088402][T16046] dump_stack+0x18f/0x20d [ 385.092746][T16046] should_fail.cold+0x5/0x14 [ 385.097340][T16046] should_failslab+0x5/0xf [ 385.101765][T16046] kmem_cache_alloc+0x2a9/0x3b0 [ 385.106629][T16046] security_file_alloc+0x34/0x170 [ 385.111750][T16046] __alloc_file+0xd8/0x350 [ 385.116175][T16046] alloc_empty_file+0x6d/0x170 [ 385.120958][T16046] path_openat+0xe3/0x2750 [ 385.125404][T16046] ? __lock_acquire+0x16e3/0x56e0 [ 385.130440][T16046] ? path_lookupat+0x830/0x830 [ 385.135190][T16046] ? cache_grow_end+0x46/0x170 [ 385.139992][T16046] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 385.145973][T16046] ? lock_is_held_type+0xb0/0xe0 [ 385.150902][T16046] do_filp_open+0x17e/0x3c0 [ 385.155394][T16046] ? may_open_dev+0xf0/0xf0 [ 385.159880][T16046] ? __alloc_fd+0x28d/0x600 [ 385.164371][T16046] ? lock_downgrade+0x820/0x820 [ 385.169221][T16046] ? do_raw_spin_lock+0x120/0x2b0 [ 385.174227][T16046] ? rwlock_bug.part.0+0x90/0x90 [ 385.179147][T16046] ? _raw_spin_unlock+0x24/0x40 [ 385.183980][T16046] ? __alloc_fd+0x28d/0x600 [ 385.188470][T16046] do_sys_openat2+0x16f/0x3b0 [ 385.193131][T16046] ? build_open_flags+0x650/0x650 [ 385.198148][T16046] ? __mutex_unlock_slowpath+0xe2/0x610 [ 385.203857][T16046] ? wait_for_completion+0x260/0x260 [ 385.209143][T16046] __x64_sys_openat+0x13f/0x1f0 [ 385.213976][T16046] ? __ia32_sys_open+0x1c0/0x1c0 [ 385.218895][T16046] ? ksys_write+0x1a5/0x250 [ 385.223381][T16046] ? lock_is_held_type+0xb0/0xe0 [ 385.228301][T16046] ? do_syscall_64+0x1c/0xe0 [ 385.232873][T16046] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 385.238834][T16046] do_syscall_64+0x60/0xe0 [ 385.243233][T16046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 385.249102][T16046] RIP: 0033:0x45cba9 [ 385.252971][T16046] Code: Bad RIP value. [ 385.257035][T16046] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 385.265446][T16046] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 385.273400][T16046] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 385.281368][T16046] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 385.289318][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 02:33:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 02:33:12 executing program 2: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000080)) 02:33:12 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 385.297269][T16046] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 02:33:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x0) 02:33:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1ff, 0x0) syz_open_procfs(0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x444400, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000140)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc8c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x705, 0x80, "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"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x28, 0x49, [0xfac0c, 0xfac05, 0x0, 0xfac06, 0x1bde08, 0xfac04, 0xf, 0xfac02, 0xfac05]}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_IE_ASSOC_RESP={0x527, 0x80, "b0454e75f566e6b09bc39c73793399f8ecb2fe18f011c5ae149e86665c3a94255ab80829a9c43f37a2ef3632df12b3088d20acec420a09d8d0a102cb8c41c780f8eedc86c5a85936b61b8c8964fd787d00ee307a45ee2e081a6c6bd599aac98831d78b82f61a9624db90e92fc842a49e1659f5b8407f334222160b2f85ed4491c02420cfa0fc70062d6ff12089a011a8d6bab49a253e7e0d0c6893ded8632efb2e02101401d8e84c5e1b8e163bf318cc0390c0ec6d7e35b200a100f5c46950568bf4a8df84d0359c387c6bf36096ccf9d76d467252b21ba1c9732848851b6a3f251075a322221e3920294122681561594f05885ddc9354f0c46865b61465e10625d6ea8120aea6eb1da29f71f6d417afba94f15f5d9252d363e72753a5929a7e3e08e9f29585ecd3c1caf5a477a5f66cc3cd0ae2288da86a437ea74f6a3d44b3543d30ead1d6e71387bb7dc0c3b77281752881312637c7f8ccd7a634d7089a5c0703d0f80d256e9fa07350f04ac975ca91d4faba2a996882459fd239194952127a0e22d4dc069f0962b6698248c9a5072ba949e25f485bc4661b7587c34bb967b21aa7cc1ac27ebc4fb06e659caffe6460e606bf4cc5a3b0ccda8c10183992f1eb68bc355b31a95f61130df238de29d2b0c05af41e87bbe6dc8b7b196a764004ba719c4745c9efe00f0b0d319a6e5fc7437d5f12b1ccb82aa1c523d3a266967a6040d363ababa4aad76d557f21d90d102d36a11f89a68188917546210135aa84b7063034f779ceeda7836be4d87adf3bc07a50438ab9bbc68fc397631593c3186257318ce825ca7521bea434dfed6e96afab9a69e920c455217f3019494adc23c6c49e76980ce763bb684b20687000860f061cc109d2d4823d26d9ac2bdeeecf8399fea47f69d10a717cd1b24ccd51e03227fb64dfe6df6fab6581f5c310499ef5082f0f8bb87e11e0f3a5da853cc9b955e294edbb48ca9828ba85070f6637303bec69fcd9e3ea7e41b5095452bcd7a84be120fcb58f73cc756d4292df7d6feaf6d08ffaf18f8ee955ceac05ba7c1e17bf6f0bc285c4d7fb48a2e9e594c9698ec9549161eb9919164530db5fc6bb33990b212c40e1e15ea44cd8631ae8712f9805d61526efbe42ba05fd69a6b8cd2e82f1fd7983e6131b9760d0cbf10043b9044c351e7366a8f2dcefd0e5007877ed121eeab50e203c158edd8775b99ac1f4936d9a2dba188f0ce2f8c0f026ee60fa97b7b823fb09ebdf4a4ae3bcf1b302ef3e8ff8f8b246f6a6954d32cb5152224ab19c8e7c263127d3148819cb3cef9081a51e6311cc3bc6f9672a292545ac3691bfc77739554652b04be987277ce21f98d0bd26dba2132ae86a0b78abcfd18530c80436a6939542652f1d14ee239ea5ce52b76eb5fd035499d582dfef8b5b85849b933fb3ef424c53f405cb55705073e3d132673c2585048027acb7078695922dca75d013de278f4ae5f1d240f39859ad1f01c75788718b40c0b85aca9bf81244e0595fcb33adaba41f468017d41df9d2e9f38e45bf4cd5f42aa26d01665f5f0afd82ab48cf401ed294a113a387670ef14d53f14e60bac4e7edfc32069692a7d121c90ebab7609a189d583fe2f15b98e5b19de8ec1b75d7d887cdb5c7946b923eb0b9e03c836b02bd3559e495e1e4153aac09ce1a644cfb9df5d22d4eaa2a5d263151b8cdfbedff1c1be65a436f8f8959578365edd2622db66cb435a790ede2a5a8d7dae7e474e7ad2591e525d7aebf54b46102da25fc664dd7abefc63bf1ef85017ab2d294e3e3c4443a04d5b39ba5237aa3c24e3fa7c15e34e7aaa5daac192d39b3c754f76e4f9da9e132bf17ecccc268b6dfcc"}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac0f, 0xfac07]}]}, 0xc8c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x7, 0x84) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) [ 385.418552][ T2488] usb 1-1: USB disconnect, device number 27 02:33:12 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1ff, 0x0) syz_open_procfs(0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x444400, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000140)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc8c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x705, 0x80, "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"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x28, 0x49, [0xfac0c, 0xfac05, 0x0, 0xfac06, 0x1bde08, 0xfac04, 0xf, 0xfac02, 0xfac05]}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_IE_ASSOC_RESP={0x527, 0x80, "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"}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac0f, 0xfac07]}]}, 0xc8c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x7, 0x84) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 02:33:12 executing program 0 (fault-call:4 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000280)={0x8, "5770f14d8970e7a6f655435a54aaa4034685b4713a865252566a6b4f85a146ea", 0x10, 0xffff, 0x2, 0x1, 0xb92f8870acf22680}) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x8) r7 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="24000000210007041dfffd946f610500020000e8fe0208010001080008000a000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:33:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x0) [ 386.210756][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:33:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 386.291654][ T5] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 386.544568][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 386.664873][ T5] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 386.679749][ T5] usb 1-1: config 0 has no interface number 0 [ 386.700110][ T5] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 386.725530][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 386.751592][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 386.771584][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 386.780667][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:33:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000000c0)={{0xa, 0x6, 0x5, 0x7, '\x00', 0x8001}, 0x3, 0x10000000, 0x1ff, r5, 0x8, 0xffffff52, 'syz0\x00', &(0x7f0000000080)=['@D-@+&$-\'[/&\x00', '+\\[&^-\x00', 'o\x00', ':)&\x00', '$\xbb.\x00', '#]%&$!*%\x00', '![.}+\x00', '\x05)-*#-#\x00'], 0x35, [], [0x8, 0x1, 0x1ff, 0x8000]}) [ 386.856044][ T5] usb 1-1: config 0 descriptor?? [ 386.913344][T16127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 386.920729][T16127] raw-gadget gadget: fail, usb_ep_enable returned -22 02:33:14 executing program 3: getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(0x0, 0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x400000000001, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) close(r2) creat(&(0x7f0000000100)='./bus\x00', 0x5) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./bus\x00', r5}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x200005) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 387.170811][ T29] audit: type=1800 audit(1594607594.191:25): pid=16168 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15685 res=0 [ 387.261386][T16127] FAULT_INJECTION: forcing a failure. [ 387.261386][T16127] name failslab, interval 1, probability 0, space 0, times 0 [ 387.305536][ T29] audit: type=1800 audit(1594607594.331:26): pid=16169 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15686 res=0 [ 387.326058][T16127] CPU: 1 PID: 16127 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 387.334757][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.344818][T16127] Call Trace: [ 387.348117][T16127] dump_stack+0x18f/0x20d [ 387.353417][T16127] should_fail.cold+0x5/0x14 [ 387.358030][T16127] ? tomoyo_realpath_from_path+0xc3/0x620 [ 387.363765][T16127] should_failslab+0x5/0xf [ 387.368193][T16127] __kmalloc+0x27d/0x340 [ 387.372449][T16127] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 387.378012][T16127] tomoyo_realpath_from_path+0xc3/0x620 [ 387.383601][T16127] tomoyo_check_open_permission+0x272/0x380 [ 387.389520][T16127] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 387.395179][T16127] ? lookup_fast+0x6c0/0x6c0 [ 387.399806][T16127] ? lock_downgrade+0x820/0x820 [ 387.404666][T16127] ? do_raw_spin_lock+0x120/0x2b0 [ 387.409704][T16127] tomoyo_file_open+0xa3/0xd0 [ 387.414396][T16127] security_file_open+0x52/0x3f0 [ 387.419357][T16127] do_dentry_open+0x3a0/0x1290 [ 387.424140][T16127] path_openat+0x1bb9/0x2750 [ 387.428750][T16127] ? path_lookupat+0x830/0x830 [ 387.433528][T16127] ? cache_grow_end+0x46/0x170 [ 387.438307][T16127] ? lock_is_held_type+0xb0/0xe0 [ 387.443263][T16127] do_filp_open+0x17e/0x3c0 [ 387.447775][T16127] ? may_open_dev+0xf0/0xf0 [ 387.452291][T16127] ? do_raw_spin_lock+0x120/0x2b0 [ 387.457325][T16127] ? rwlock_bug.part.0+0x90/0x90 [ 387.462274][T16127] ? _raw_spin_unlock+0x24/0x40 [ 387.467139][T16127] ? __alloc_fd+0x28d/0x600 [ 387.471664][T16127] do_sys_openat2+0x16f/0x3b0 [ 387.476360][T16127] ? build_open_flags+0x650/0x650 [ 387.481401][T16127] ? __mutex_unlock_slowpath+0xe2/0x610 [ 387.486962][T16127] ? wait_for_completion+0x260/0x260 [ 387.492256][T16127] __x64_sys_openat+0x13f/0x1f0 [ 387.497117][T16127] ? __ia32_sys_open+0x1c0/0x1c0 [ 387.502059][T16127] ? ksys_write+0x1a5/0x250 [ 387.506760][T16127] ? lock_is_held_type+0xb0/0xe0 [ 387.512143][T16127] ? do_syscall_64+0x1c/0xe0 [ 387.516745][T16127] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 387.522738][T16127] do_syscall_64+0x60/0xe0 [ 387.527167][T16127] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 387.533067][T16127] RIP: 0033:0x45cba9 [ 387.536965][T16127] Code: Bad RIP value. [ 387.541030][T16127] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.549451][T16127] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 387.557432][T16127] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 387.565415][T16127] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 387.573392][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 387.581379][T16127] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 387.783784][T16127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.808442][ T2516] usb 1-1: USB disconnect, device number 28 02:33:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x2, 0x48e, 0x1, 0x4000, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = fcntl$dupfd(r1, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 02:33:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x0) 02:33:15 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:15 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:15 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 02:33:15 executing program 0 (fault-call:4 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:15 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12660000e01fab0882057400916a010203010902120001000000000904000000ffffff00"], 0x0) 02:33:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000180)=0x81) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00fb3d033f47e21554cf912c0f24e03caed12e8fc9a5e117f7e13cbf005a904bac3f4b880a5219e1c02ad520442b4dda0e34eeee812c4fc797dc17ad624cf6de3582a0775ad90c0d84568e75f3fb90973848b9b4fd98607ae4e834d9c9f51fff787dd1ea31853305fa"], 0x3d, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r9}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={r9, 0x40, 0x7ff}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000080)={0x2012}) [ 388.811519][ T2478] usb 1-1: new high-speed USB device number 29 using dummy_hcd 02:33:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 389.032294][ T2516] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 389.051660][ T2478] usb 1-1: Using ep0 maxpacket: 8 [ 389.177085][ T2478] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 389.191479][ T2478] usb 1-1: config 0 has no interface number 0 [ 389.197635][ T2478] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 389.241206][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 389.252633][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 389.263703][ T2478] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 389.274999][ T2478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.299054][ T2478] usb 1-1: config 0 descriptor?? [ 389.301415][ T2516] usb 4-1: device descriptor read/64, error 18 02:33:16 executing program 4 (fault-call:6 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 389.363046][T16205] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 389.370459][T16205] raw-gadget gadget: fail, usb_ep_enable returned -22 02:33:16 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 389.546920][T16239] FAULT_INJECTION: forcing a failure. [ 389.546920][T16239] name failslab, interval 1, probability 0, space 0, times 0 [ 389.602022][T16239] CPU: 0 PID: 16239 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 389.610730][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.620795][T16239] Call Trace: [ 389.624102][T16239] dump_stack+0x18f/0x20d [ 389.628448][T16239] should_fail.cold+0x5/0x14 [ 389.633052][T16239] should_failslab+0x5/0xf [ 389.637485][T16239] kmem_cache_alloc_node_trace+0x27d/0x400 [ 389.643309][T16239] __kmalloc_node+0x38/0x60 [ 389.647818][T16239] kvmalloc_node+0x61/0xf0 [ 389.652229][T16239] seq_read+0x743/0x1070 [ 389.656460][T16239] ? seq_hex_dump+0x440/0x440 [ 389.661117][T16239] proc_reg_read+0x221/0x300 [ 389.665709][T16239] do_iter_read+0x48e/0x650 [ 389.670202][T16239] vfs_readv+0xe5/0x150 [ 389.674340][T16239] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 389.680491][T16239] ? __fdget_pos+0xe9/0x100 [ 389.684979][T16239] ? lock_downgrade+0x820/0x820 [ 389.689818][T16239] ? __fget_files+0x294/0x400 [ 389.694489][T16239] do_readv+0x139/0x300 [ 389.698628][T16239] ? vfs_readv+0x150/0x150 [ 389.703118][T16239] ? lock_is_held_type+0xb0/0xe0 [ 389.708036][T16239] ? do_syscall_64+0x1c/0xe0 [ 389.712629][T16239] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 389.718592][T16239] do_syscall_64+0x60/0xe0 [ 389.722992][T16239] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 389.728865][T16239] RIP: 0033:0x45cba9 [ 389.732744][T16239] Code: Bad RIP value. [ 389.736808][T16239] RSP: 002b:00007fc7fd4b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 389.745210][T16239] RAX: ffffffffffffffda RBX: 00000000004fd040 RCX: 000000000045cba9 [ 389.753163][T16239] RDX: 0000000000000001 RSI: 0000000020000780 RDI: 0000000000000005 [ 389.761127][T16239] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 389.769100][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 389.777062][T16239] R13: 00000000000008cd R14: 00000000004cb8f8 R15: 00007fc7fd4b96d4 [ 389.795454][ T2516] usb 4-1: device descriptor read/64, error 18 02:33:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x2, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 389.806219][T16205] FAULT_INJECTION: forcing a failure. [ 389.806219][T16205] name failslab, interval 1, probability 0, space 0, times 0 [ 389.868113][T16205] CPU: 0 PID: 16205 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 389.876823][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.886887][T16205] Call Trace: [ 389.890303][T16205] dump_stack+0x18f/0x20d [ 389.894663][T16205] should_fail.cold+0x5/0x14 [ 389.899278][T16205] should_failslab+0x5/0xf [ 389.903710][T16205] kmem_cache_alloc_trace+0x240/0x2d0 [ 389.909102][T16205] snd_seq_oss_open+0x50/0xa10 [ 389.913932][T16205] ? lock_downgrade+0x820/0x820 [ 389.918799][T16205] odev_open+0x6c/0x90 [ 389.922887][T16205] ? odev_release+0x70/0x70 [ 389.927404][T16205] soundcore_open+0x445/0x600 [ 389.932098][T16205] ? sound_devnode+0xf0/0xf0 [ 389.936824][T16205] chrdev_open+0x266/0x770 [ 389.941252][T16205] ? cdev_device_add+0x210/0x210 [ 389.946205][T16205] ? security_file_open+0x1f5/0x3f0 [ 389.951424][T16205] do_dentry_open+0x501/0x1290 [ 389.956206][T16205] ? cdev_device_add+0x210/0x210 [ 389.961167][T16205] path_openat+0x1bb9/0x2750 [ 389.965787][T16205] ? path_lookupat+0x830/0x830 [ 389.970568][T16205] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 389.976573][T16205] ? lock_is_held_type+0xb0/0xe0 [ 389.981533][T16205] do_filp_open+0x17e/0x3c0 [ 389.986045][T16205] ? may_open_dev+0xf0/0xf0 [ 389.990565][T16205] ? do_raw_spin_lock+0x120/0x2b0 [ 389.995597][T16205] ? rwlock_bug.part.0+0x90/0x90 [ 390.000552][T16205] ? _raw_spin_unlock+0x24/0x40 [ 390.005418][T16205] ? __alloc_fd+0x28d/0x600 [ 390.009941][T16205] do_sys_openat2+0x16f/0x3b0 [ 390.014636][T16205] ? build_open_flags+0x650/0x650 [ 390.019758][T16205] ? __mutex_unlock_slowpath+0xe2/0x610 [ 390.025329][T16205] ? wait_for_completion+0x260/0x260 [ 390.030629][T16205] __x64_sys_openat+0x13f/0x1f0 [ 390.035489][T16205] ? __ia32_sys_open+0x1c0/0x1c0 [ 390.040432][T16205] ? ksys_write+0x1a5/0x250 [ 390.044945][T16205] ? lock_is_held_type+0xb0/0xe0 [ 390.049893][T16205] ? do_syscall_64+0x1c/0xe0 [ 390.054496][T16205] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 390.060615][T16205] do_syscall_64+0x60/0xe0 [ 390.065047][T16205] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 390.071565][ T2516] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 390.076931][T16205] RIP: 0033:0x45cba9 [ 390.076955][T16205] Code: Bad RIP value. [ 390.076963][T16205] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 390.076978][T16205] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 390.076987][T16205] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 390.076994][T16205] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 390.077002][T16205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 390.077010][T16205] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 02:33:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 390.396693][ T8614] usb 1-1: USB disconnect, device number 29 02:33:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xa}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x4, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 390.691711][ T2516] usb 4-1: device descriptor read/64, error 18 02:33:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x14}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:18 executing program 0 (fault-call:4 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 391.101420][ T2516] usb 4-1: device descriptor read/64, error 18 02:33:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x1a}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 391.221456][ T2516] usb usb4-port1: attempt power cycle [ 391.321676][ T2478] usb 1-1: new high-speed USB device number 30 using dummy_hcd 02:33:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x202002, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000080)={0x8, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, @in={0x2, 0x0, @broadcast}, @ipx={0x4, 0x0, 0x0, "385e827ce4ac"}, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='team_slave_1\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:33:18 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x1b}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 391.591226][ T2478] usb 1-1: Using ep0 maxpacket: 8 [ 391.731561][ T2478] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 391.739941][ T2478] usb 1-1: config 0 has no interface number 0 02:33:18 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 391.787086][ T2478] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 02:33:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x22}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 391.850128][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 391.893123][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 391.934163][ T2478] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 391.985453][ T2478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.046670][ T2478] usb 1-1: config 0 descriptor?? 02:33:19 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x8, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x2a}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 392.092845][T16300] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 392.100208][T16300] raw-gadget gadget: fail, usb_ep_enable returned -22 02:33:19 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 392.387439][T16300] FAULT_INJECTION: forcing a failure. [ 392.387439][T16300] name failslab, interval 1, probability 0, space 0, times 0 02:33:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x32}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 392.474741][T16300] CPU: 0 PID: 16300 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 392.483450][T16300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.493507][T16300] Call Trace: [ 392.496809][T16300] dump_stack+0x18f/0x20d [ 392.501155][T16300] should_fail.cold+0x5/0x14 [ 392.505764][T16300] should_failslab+0x5/0xf [ 392.510194][T16300] kmem_cache_alloc_trace+0x240/0x2d0 [ 392.515585][T16300] snd_seq_oss_open+0x50/0xa10 [ 392.520369][T16300] ? lock_downgrade+0x820/0x820 [ 392.525234][T16300] odev_open+0x6c/0x90 [ 392.529313][T16300] ? odev_release+0x70/0x70 [ 392.533828][T16300] soundcore_open+0x445/0x600 [ 392.538523][T16300] ? sound_devnode+0xf0/0xf0 [ 392.543122][T16300] chrdev_open+0x266/0x770 [ 392.547537][T16300] ? cdev_device_add+0x210/0x210 [ 392.552479][T16300] ? security_file_open+0x1f5/0x3f0 [ 392.557694][T16300] do_dentry_open+0x501/0x1290 [ 392.562470][T16300] ? cdev_device_add+0x210/0x210 [ 392.567422][T16300] path_openat+0x1bb9/0x2750 [ 392.572015][T16300] ? path_lookupat+0x830/0x830 [ 392.576797][T16300] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 392.582787][T16300] ? lock_is_held_type+0xb0/0xe0 [ 392.587734][T16300] do_filp_open+0x17e/0x3c0 [ 392.592247][T16300] ? may_open_dev+0xf0/0xf0 [ 392.596767][T16300] ? do_raw_spin_lock+0x120/0x2b0 [ 392.601806][T16300] ? rwlock_bug.part.0+0x90/0x90 [ 392.606755][T16300] ? _raw_spin_unlock+0x24/0x40 [ 392.611621][T16300] ? __alloc_fd+0x28d/0x600 [ 392.616138][T16300] do_sys_openat2+0x16f/0x3b0 [ 392.620915][T16300] ? build_open_flags+0x650/0x650 [ 392.625949][T16300] ? __mutex_unlock_slowpath+0xe2/0x610 [ 392.631503][T16300] ? wait_for_completion+0x260/0x260 [ 392.636804][T16300] __x64_sys_openat+0x13f/0x1f0 [ 392.641664][T16300] ? __ia32_sys_open+0x1c0/0x1c0 [ 392.646615][T16300] ? ksys_write+0x1a5/0x250 [ 392.651130][T16300] ? lock_is_held_type+0xb0/0xe0 [ 392.656071][T16300] ? do_syscall_64+0x1c/0xe0 [ 392.660676][T16300] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 392.666663][T16300] do_syscall_64+0x60/0xe0 [ 392.671191][T16300] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 392.677084][T16300] RIP: 0033:0x45cba9 [ 392.680970][T16300] Code: Bad RIP value. [ 392.685031][T16300] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 392.693445][T16300] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 392.701420][T16300] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 392.709397][T16300] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 392.717374][T16300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 392.725351][T16300] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 393.290472][ T5] usb 1-1: USB disconnect, device number 30 02:33:20 executing program 0 (fault-call:4 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x3a}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010008506000010000000000000000000", @ANYRES32=r2, @ANYBLOB="18200000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffff03) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x28, 0x12, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 02:33:20 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x300, 0x5, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 393.918163][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 394.059148][T16419] bond1: (slave bridge1): Enslaving as an active interface with an up link 02:33:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x42}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:21 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 394.151126][ T5] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 394.243639][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 394.269800][T16419] bond1: (slave bridge2): Enslaving as an active interface with an up link 02:33:21 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 394.406513][ T5] usb 1-1: Using ep0 maxpacket: 8 02:33:21 executing program 3: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000040)={0x2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a15607081e04483092bc0000000109022400010000710009040000006c2b700039e9490a00e90201"], 0x0) 02:33:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x4a}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 394.551660][ T5] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 394.559687][ T5] usb 1-1: config 0 has no interface number 0 [ 394.599129][ T5] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 394.640950][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 394.666740][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 02:33:21 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8fa5}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r5}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r11 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) [ 394.693085][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 394.715814][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.781630][ T5] usb 1-1: config 0 descriptor?? [ 394.833660][T16405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 394.865783][T16405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 394.911080][ T2478] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 395.126941][T16405] FAULT_INJECTION: forcing a failure. [ 395.126941][T16405] name failslab, interval 1, probability 0, space 0, times 0 [ 395.141878][T16405] CPU: 0 PID: 16405 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 395.150573][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.160635][T16405] Call Trace: [ 395.163937][T16405] dump_stack+0x18f/0x20d [ 395.168285][T16405] should_fail.cold+0x5/0x14 [ 395.172896][T16405] should_failslab+0x5/0xf [ 395.177325][T16405] kmem_cache_alloc_trace+0x240/0x2d0 [ 395.182723][T16405] snd_seq_oss_open+0x50/0xa10 [ 395.187500][T16405] ? lock_downgrade+0x820/0x820 [ 395.192354][T16405] odev_open+0x6c/0x90 [ 395.196412][T16405] ? odev_release+0x70/0x70 [ 395.200897][T16405] soundcore_open+0x445/0x600 [ 395.205649][T16405] ? sound_devnode+0xf0/0xf0 [ 395.210219][T16405] chrdev_open+0x266/0x770 [ 395.214621][T16405] ? cdev_device_add+0x210/0x210 [ 395.219541][T16405] ? security_file_open+0x1f5/0x3f0 [ 395.224727][T16405] do_dentry_open+0x501/0x1290 [ 395.229473][T16405] ? cdev_device_add+0x210/0x210 [ 395.234406][T16405] path_openat+0x1bb9/0x2750 [ 395.239071][T16405] ? path_lookupat+0x830/0x830 [ 395.243845][T16405] ? cache_grow_end+0x46/0x170 [ 395.248621][T16405] ? lock_is_held_type+0xb0/0xe0 [ 395.253553][T16405] do_filp_open+0x17e/0x3c0 [ 395.258121][T16405] ? may_open_dev+0xf0/0xf0 [ 395.262606][T16405] ? do_raw_spin_lock+0x120/0x2b0 [ 395.267612][T16405] ? rwlock_bug.part.0+0x90/0x90 [ 395.272531][T16405] ? _raw_spin_unlock+0x24/0x40 [ 395.277887][T16405] ? __alloc_fd+0x28d/0x600 [ 395.283862][T16405] do_sys_openat2+0x16f/0x3b0 [ 395.288518][T16405] ? build_open_flags+0x650/0x650 [ 395.293519][T16405] ? __mutex_unlock_slowpath+0xe2/0x610 [ 395.299045][T16405] ? wait_for_completion+0x260/0x260 [ 395.304312][T16405] __x64_sys_openat+0x13f/0x1f0 [ 395.309749][T16405] ? __ia32_sys_open+0x1c0/0x1c0 [ 395.314673][T16405] ? ksys_write+0x1a5/0x250 [ 395.323152][T16405] ? lock_is_held_type+0xb0/0xe0 [ 395.328066][T16405] ? do_syscall_64+0x1c/0xe0 [ 395.332636][T16405] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 395.338596][T16405] do_syscall_64+0x60/0xe0 [ 395.343167][T16405] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 395.349036][T16405] RIP: 0033:0x45cba9 [ 395.352904][T16405] Code: Bad RIP value. [ 395.357046][T16405] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 395.365868][T16405] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 395.373818][T16405] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 395.381767][T16405] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 395.390089][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 395.399441][T16405] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 395.461001][ T2478] usb 4-1: Using ep0 maxpacket: 8 [ 395.529557][ T2514] usb 1-1: USB disconnect, device number 31 [ 395.581349][ T2478] usb 4-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 395.592247][ T2478] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice=bc.92 [ 395.608800][ T2478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.623670][ T2478] usb 4-1: config 0 descriptor?? [ 395.662546][ T2478] usb 4-1: unknown interface protocol 0x70, assuming v1 [ 395.669701][ T2478] usb 4-1: cannot find UAC_HEADER [ 395.707218][ T2478] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 395.864117][ T2478] usb 4-1: USB disconnect, device number 79 02:33:23 executing program 0 (fault-call:4 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x50}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000000)=@in6, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/105, 0x69}, {&(0x7f0000001440)=""/101, 0x65}], 0x4, &(0x7f00000014c0)=""/244, 0xf4}, 0x8001}, {{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001640)=""/253, 0xfd}, {&(0x7f0000001740)=""/144, 0x90}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000001800)=""/58, 0x3a}, {&(0x7f0000001840)=""/238, 0xee}, {&(0x7f0000001940)=""/71, 0x47}], 0x6, &(0x7f0000001a40)=""/186, 0xba}, 0x401}, {{&(0x7f0000001b00)=@nl=@proc, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/91, 0x5b}, {&(0x7f0000001c00)=""/33, 0x21}, {&(0x7f0000001c40)=""/83, 0x53}], 0x3, &(0x7f0000001d00)=""/206, 0xce}, 0xffffff81}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)=""/162, 0xa2}, {&(0x7f0000001ec0)=""/159, 0x9f}, {&(0x7f0000001f80)=""/113, 0x71}, {&(0x7f0000002000)=""/163, 0xa3}, {&(0x7f00000020c0)=""/234, 0xea}, {&(0x7f00000021c0)=""/24, 0x18}], 0x6}, 0xc2}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/200, 0xc8}, {0x0}, {&(0x7f0000003540)=""/190, 0xbe}, {&(0x7f0000003600)=""/28, 0x1c}, {&(0x7f0000003640)=""/194, 0xc2}, {0x0}, {0x0}], 0x8, &(0x7f0000004840)=""/170, 0xaa}, 0x9}], 0x5, 0x10042, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="b805000000b94a0000000f01c10f00d4b93c0200000f320f0666b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f"}], 0x15555555555555d2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000002200)={{0x4, @addr=0x31f}, "060e7e73c94687d2b2d99e538ef15fa096886867d7a3a1a88d4abf95bf986374"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:33:23 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:23 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:23 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x54}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 396.391019][ T2478] usb 1-1: new high-speed USB device number 32 using dummy_hcd 02:33:23 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:23 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 396.661549][ T2478] usb 1-1: Using ep0 maxpacket: 8 02:33:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x57}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 396.811717][ T2478] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 396.819741][ T2478] usb 1-1: config 0 has no interface number 0 [ 396.848024][ T2478] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 02:33:23 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 396.912176][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 396.988820][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 397.087764][ T2478] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 397.136496][ T2478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.167199][ T2478] usb 1-1: config 0 descriptor?? [ 397.212420][T16541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 397.219768][T16541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 397.445291][T16541] FAULT_INJECTION: forcing a failure. [ 397.445291][T16541] name failslab, interval 1, probability 0, space 0, times 0 [ 397.502971][T16541] CPU: 0 PID: 16541 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 397.511765][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.521825][T16541] Call Trace: [ 397.525123][T16541] dump_stack+0x18f/0x20d [ 397.529463][T16541] should_fail.cold+0x5/0x14 [ 397.534064][T16541] should_failslab+0x5/0xf [ 397.538485][T16541] kmem_cache_alloc_trace+0x240/0x2d0 [ 397.543859][T16541] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 397.549670][T16541] snd_seq_queue_alloc+0x51/0x4d0 [ 397.554707][T16541] snd_seq_ioctl_create_queue+0xab/0x320 [ 397.560344][T16541] ? alloc_seq_queue+0x190/0x190 [ 397.565292][T16541] snd_seq_kernel_client_ctl+0xeb/0x130 [ 397.570845][T16541] alloc_seq_queue+0xf0/0x190 [ 397.575507][T16541] ? async_call_lookup_ports+0x10/0x10 [ 397.580969][T16541] ? trace_kmalloc+0xfd/0x130 [ 397.585630][T16541] snd_seq_oss_open+0x36a/0xa10 [ 397.590473][T16541] odev_open+0x6c/0x90 [ 397.594520][T16541] ? odev_release+0x70/0x70 [ 397.599438][T16541] soundcore_open+0x445/0x600 [ 397.604096][T16541] ? sound_devnode+0xf0/0xf0 [ 397.608662][T16541] chrdev_open+0x266/0x770 [ 397.613147][T16541] ? cdev_device_add+0x210/0x210 [ 397.618163][T16541] ? security_file_open+0x1f5/0x3f0 [ 397.623364][T16541] do_dentry_open+0x501/0x1290 [ 397.628118][T16541] ? cdev_device_add+0x210/0x210 [ 397.633038][T16541] path_openat+0x1bb9/0x2750 [ 397.637611][T16541] ? path_lookupat+0x830/0x830 [ 397.642354][T16541] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 397.648318][T16541] ? lock_is_held_type+0xb0/0xe0 [ 397.653236][T16541] do_filp_open+0x17e/0x3c0 [ 397.657770][T16541] ? may_open_dev+0xf0/0xf0 [ 397.662270][T16541] ? do_raw_spin_lock+0x120/0x2b0 [ 397.667273][T16541] ? rwlock_bug.part.0+0x90/0x90 [ 397.672205][T16541] ? _raw_spin_unlock+0x24/0x40 [ 397.677032][T16541] ? __alloc_fd+0x28d/0x600 [ 397.681519][T16541] do_sys_openat2+0x16f/0x3b0 [ 397.686172][T16541] ? build_open_flags+0x650/0x650 [ 397.691176][T16541] ? __mutex_unlock_slowpath+0xe2/0x610 [ 397.696699][T16541] ? wait_for_completion+0x260/0x260 [ 397.701966][T16541] __x64_sys_openat+0x13f/0x1f0 [ 397.706826][T16541] ? __ia32_sys_open+0x1c0/0x1c0 [ 397.711737][T16541] ? ksys_write+0x1a5/0x250 [ 397.716222][T16541] ? lock_is_held_type+0xb0/0xe0 [ 397.721138][T16541] ? do_syscall_64+0x1c/0xe0 [ 397.725716][T16541] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 397.731674][T16541] do_syscall_64+0x60/0xe0 [ 397.736069][T16541] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 397.741963][T16541] RIP: 0033:0x45cba9 [ 397.745832][T16541] Code: Bad RIP value. [ 397.749875][T16541] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 397.758262][T16541] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 397.766218][T16541] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 397.774166][T16541] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 397.782118][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 397.790065][T16541] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 397.868613][ T2478] usb 1-1: USB disconnect, device number 32 02:33:25 executing program 0 (fault-call:4 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:25 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x5a}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:25 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000000)=@in6, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/105, 0x69}, {&(0x7f0000001440)=""/101, 0x65}], 0x4, &(0x7f00000014c0)=""/244, 0xf4}, 0x8001}, {{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001640)=""/253, 0xfd}, {&(0x7f0000001740)=""/144, 0x90}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000001800)=""/58, 0x3a}, {&(0x7f0000001840)=""/238, 0xee}, {&(0x7f0000001940)=""/71, 0x47}], 0x6, &(0x7f0000001a40)=""/186, 0xba}, 0x401}, {{&(0x7f0000001b00)=@nl=@proc, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/91, 0x5b}, {&(0x7f0000001c00)=""/33, 0x21}, {&(0x7f0000001c40)=""/83, 0x53}], 0x3, &(0x7f0000001d00)=""/206, 0xce}, 0xffffff81}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)=""/162, 0xa2}, {&(0x7f0000001ec0)=""/159, 0x9f}, {&(0x7f0000001f80)=""/113, 0x71}, {&(0x7f0000002000)=""/163, 0xa3}, {&(0x7f00000020c0)=""/234, 0xea}, {&(0x7f00000021c0)=""/24, 0x18}], 0x6}, 0xc2}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/200, 0xc8}, {0x0}, {&(0x7f0000003540)=""/190, 0xbe}, {&(0x7f0000003600)=""/28, 0x1c}, {&(0x7f0000003640)=""/194, 0xc2}, {0x0}, {0x0}], 0x8, &(0x7f0000004840)=""/170, 0xaa}, 0x9}], 0x5, 0x10042, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="b805000000b94a0000000f01c10f00d4b93c0200000f320f0666b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f"}], 0x15555555555555d2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000002200)={{0x4, @addr=0x31f}, "060e7e73c94687d2b2d99e538ef15fa096886867d7a3a1a88d4abf95bf986374"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:33:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x5d}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:25 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 398.790903][ T2488] usb 1-1: new high-speed USB device number 33 using dummy_hcd 02:33:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x65}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:26 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 399.030859][ T2488] usb 1-1: Using ep0 maxpacket: 8 [ 399.161773][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 399.169971][ T2488] usb 1-1: config 0 has no interface number 0 [ 399.258322][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 02:33:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x71}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 399.350948][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 399.415571][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 399.472777][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 399.497850][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.559127][ T2488] usb 1-1: config 0 descriptor?? [ 399.592632][T16646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 399.600027][T16646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 399.861531][T16646] FAULT_INJECTION: forcing a failure. [ 399.861531][T16646] name failslab, interval 1, probability 0, space 0, times 0 [ 399.887716][T16646] CPU: 0 PID: 16646 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 399.898510][T16646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.908568][T16646] Call Trace: [ 399.911876][T16646] dump_stack+0x18f/0x20d [ 399.916223][T16646] should_fail.cold+0x5/0x14 [ 399.920841][T16646] should_failslab+0x5/0xf [ 399.925272][T16646] kmem_cache_alloc_trace+0x240/0x2d0 [ 399.930656][T16646] ? snd_seq_ioctl_create_port+0x4e4/0x6d0 [ 399.936477][T16646] snd_seq_queue_alloc+0x51/0x4d0 [ 399.941520][T16646] snd_seq_ioctl_create_queue+0xab/0x320 [ 399.947163][T16646] ? alloc_seq_queue+0x190/0x190 [ 399.952202][T16646] snd_seq_kernel_client_ctl+0xeb/0x130 [ 399.957761][T16646] alloc_seq_queue+0xf0/0x190 [ 399.962455][T16646] ? async_call_lookup_ports+0x10/0x10 [ 399.967949][T16646] ? trace_kmalloc+0xfd/0x130 [ 399.973080][T16646] snd_seq_oss_open+0x36a/0xa10 [ 399.977954][T16646] odev_open+0x6c/0x90 [ 399.982029][T16646] ? odev_release+0x70/0x70 [ 399.986534][T16646] soundcore_open+0x445/0x600 [ 399.991252][T16646] ? sound_devnode+0xf0/0xf0 [ 399.996026][T16646] chrdev_open+0x266/0x770 [ 400.000453][T16646] ? cdev_device_add+0x210/0x210 [ 400.005400][T16646] ? security_file_open+0x1f5/0x3f0 [ 400.010611][T16646] do_dentry_open+0x501/0x1290 [ 400.015464][T16646] ? cdev_device_add+0x210/0x210 [ 400.020419][T16646] path_openat+0x1bb9/0x2750 [ 400.025031][T16646] ? path_lookupat+0x830/0x830 [ 400.029798][T16646] ? cache_grow_end+0x46/0x170 [ 400.034583][T16646] ? lock_is_held_type+0xb0/0xe0 [ 400.039526][T16646] do_filp_open+0x17e/0x3c0 [ 400.044034][T16646] ? may_open_dev+0xf0/0xf0 [ 400.048547][T16646] ? do_raw_spin_lock+0x120/0x2b0 [ 400.053577][T16646] ? rwlock_bug.part.0+0x90/0x90 [ 400.058616][T16646] ? _raw_spin_unlock+0x24/0x40 [ 400.063475][T16646] ? __alloc_fd+0x28d/0x600 [ 400.067993][T16646] do_sys_openat2+0x16f/0x3b0 [ 400.072677][T16646] ? build_open_flags+0x650/0x650 [ 400.077710][T16646] ? __mutex_unlock_slowpath+0xe2/0x610 [ 400.083265][T16646] ? wait_for_completion+0x260/0x260 [ 400.088563][T16646] __x64_sys_openat+0x13f/0x1f0 [ 400.093420][T16646] ? __ia32_sys_open+0x1c0/0x1c0 [ 400.098363][T16646] ? ksys_write+0x1a5/0x250 [ 400.102884][T16646] ? lock_is_held_type+0xb0/0xe0 [ 400.107829][T16646] ? do_syscall_64+0x1c/0xe0 [ 400.112426][T16646] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 400.118948][T16646] do_syscall_64+0x60/0xe0 [ 400.123358][T16646] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 400.129239][T16646] RIP: 0033:0x45cba9 [ 400.133115][T16646] Code: Bad RIP value. [ 400.137162][T16646] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 400.145564][T16646] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 400.153522][T16646] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 400.161472][T16646] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 400.169425][T16646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 400.177375][T16646] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 400.219103][ T2479] usb 1-1: USB disconnect, device number 33 02:33:27 executing program 0 (fault-call:4 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:27 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x7a}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000000)=@in6, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/105, 0x69}, {&(0x7f0000001440)=""/101, 0x65}], 0x4, &(0x7f00000014c0)=""/244, 0xf4}, 0x8001}, {{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001640)=""/253, 0xfd}, {&(0x7f0000001740)=""/144, 0x90}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000001800)=""/58, 0x3a}, {&(0x7f0000001840)=""/238, 0xee}, {&(0x7f0000001940)=""/71, 0x47}], 0x6, &(0x7f0000001a40)=""/186, 0xba}, 0x401}, {{&(0x7f0000001b00)=@nl=@proc, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/91, 0x5b}, {&(0x7f0000001c00)=""/33, 0x21}, {&(0x7f0000001c40)=""/83, 0x53}], 0x3, &(0x7f0000001d00)=""/206, 0xce}, 0xffffff81}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)=""/162, 0xa2}, {&(0x7f0000001ec0)=""/159, 0x9f}, {&(0x7f0000001f80)=""/113, 0x71}, {&(0x7f0000002000)=""/163, 0xa3}, {&(0x7f00000020c0)=""/234, 0xea}, {&(0x7f00000021c0)=""/24, 0x18}], 0x6}, 0xc2}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/200, 0xc8}, {0x0}, {&(0x7f0000003540)=""/190, 0xbe}, {&(0x7f0000003600)=""/28, 0x1c}, {&(0x7f0000003640)=""/194, 0xc2}, {0x0}, {0x0}], 0x8, &(0x7f0000004840)=""/170, 0xaa}, 0x9}], 0x5, 0x10042, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="b805000000b94a0000000f01c10f00d4b93c0200000f320f0666b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f"}], 0x15555555555555d2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000002200)={{0x4, @addr=0x31f}, "060e7e73c94687d2b2d99e538ef15fa096886867d7a3a1a88d4abf95bf986374"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:33:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x83}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:28 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 401.061360][ T2479] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 401.306698][ T2479] usb 1-1: Using ep0 maxpacket: 8 02:33:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x89}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:28 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 401.477090][ T2479] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.488888][ T2479] usb 1-1: config 0 has no interface number 0 [ 401.506047][ T2479] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 401.528183][ T2479] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 401.572128][ T2479] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 02:33:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x8e}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 401.618382][ T2479] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 401.650694][ T2479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.721604][ T2479] usb 1-1: config 0 descriptor?? [ 401.772199][T16735] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 401.779568][T16735] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 402.018474][T16735] FAULT_INJECTION: forcing a failure. [ 402.018474][T16735] name failslab, interval 1, probability 0, space 0, times 0 [ 402.097664][T16735] CPU: 0 PID: 16735 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 402.106368][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.116427][T16735] Call Trace: [ 402.119734][T16735] dump_stack+0x18f/0x20d [ 402.124115][T16735] should_fail.cold+0x5/0x14 [ 402.128727][T16735] should_failslab+0x5/0xf [ 402.133151][T16735] kmem_cache_alloc_trace+0x240/0x2d0 [ 402.138531][T16735] snd_seq_timer_new+0x41/0x1b0 [ 402.143389][T16735] snd_seq_queue_alloc+0x17e/0x4d0 [ 402.148627][T16735] snd_seq_ioctl_create_queue+0xab/0x320 [ 402.154353][T16735] ? alloc_seq_queue+0x190/0x190 [ 402.159301][T16735] snd_seq_kernel_client_ctl+0xeb/0x130 [ 402.164860][T16735] alloc_seq_queue+0xf0/0x190 [ 402.169545][T16735] ? async_call_lookup_ports+0x10/0x10 [ 402.175024][T16735] ? trace_kmalloc+0xfd/0x130 [ 402.179719][T16735] snd_seq_oss_open+0x36a/0xa10 [ 402.184596][T16735] odev_open+0x6c/0x90 [ 402.188671][T16735] ? odev_release+0x70/0x70 [ 402.193278][T16735] soundcore_open+0x445/0x600 [ 402.198152][T16735] ? sound_devnode+0xf0/0xf0 [ 402.202744][T16735] chrdev_open+0x266/0x770 [ 402.207256][T16735] ? cdev_device_add+0x210/0x210 [ 402.212198][T16735] ? security_file_open+0x1f5/0x3f0 [ 402.217405][T16735] do_dentry_open+0x501/0x1290 [ 402.222179][T16735] ? cdev_device_add+0x210/0x210 [ 402.227136][T16735] path_openat+0x1bb9/0x2750 [ 402.231743][T16735] ? path_lookupat+0x830/0x830 [ 402.236512][T16735] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 402.242505][T16735] ? lock_is_held_type+0xb0/0xe0 [ 402.247448][T16735] do_filp_open+0x17e/0x3c0 [ 402.252043][T16735] ? may_open_dev+0xf0/0xf0 [ 402.256553][T16735] ? do_raw_spin_lock+0x120/0x2b0 [ 402.261578][T16735] ? rwlock_bug.part.0+0x90/0x90 [ 402.266563][T16735] ? _raw_spin_unlock+0x24/0x40 [ 402.271415][T16735] ? __alloc_fd+0x28d/0x600 [ 402.275923][T16735] do_sys_openat2+0x16f/0x3b0 [ 402.280605][T16735] ? build_open_flags+0x650/0x650 [ 402.285630][T16735] ? __mutex_unlock_slowpath+0xe2/0x610 [ 402.291179][T16735] ? wait_for_completion+0x260/0x260 [ 402.296568][T16735] __x64_sys_openat+0x13f/0x1f0 [ 402.301419][T16735] ? __ia32_sys_open+0x1c0/0x1c0 [ 402.306373][T16735] ? ksys_write+0x1a5/0x250 [ 402.310893][T16735] ? lock_is_held_type+0xb0/0xe0 [ 402.315841][T16735] ? do_syscall_64+0x1c/0xe0 [ 402.320442][T16735] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 402.326437][T16735] do_syscall_64+0x60/0xe0 [ 402.330869][T16735] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 402.336769][T16735] RIP: 0033:0x45cba9 [ 402.340658][T16735] Code: Bad RIP value. [ 402.344819][T16735] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 402.353323][T16735] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 402.361395][T16735] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 402.369392][T16735] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 402.377374][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 402.385341][T16735] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 402.699263][ T2479] usb 1-1: USB disconnect, device number 34 02:33:30 executing program 0 (fault-call:4 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:30 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x93}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) 02:33:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000000)=@in6, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/105, 0x69}, {&(0x7f0000001440)=""/101, 0x65}], 0x4, &(0x7f00000014c0)=""/244, 0xf4}, 0x8001}, {{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001640)=""/253, 0xfd}, {&(0x7f0000001740)=""/144, 0x90}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000001800)=""/58, 0x3a}, {&(0x7f0000001840)=""/238, 0xee}, {&(0x7f0000001940)=""/71, 0x47}], 0x6, &(0x7f0000001a40)=""/186, 0xba}, 0x401}, {{&(0x7f0000001b00)=@nl=@proc, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/91, 0x5b}, {&(0x7f0000001c00)=""/33, 0x21}, {&(0x7f0000001c40)=""/83, 0x53}], 0x3, &(0x7f0000001d00)=""/206, 0xce}, 0xffffff81}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)=""/162, 0xa2}, {&(0x7f0000001ec0)=""/159, 0x9f}, {&(0x7f0000001f80)=""/113, 0x71}, {&(0x7f0000002000)=""/163, 0xa3}, {&(0x7f00000020c0)=""/234, 0xea}, {&(0x7f00000021c0)=""/24, 0x18}], 0x6}, 0xc2}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/200, 0xc8}, {0x0}, {&(0x7f0000003540)=""/190, 0xbe}, {&(0x7f0000003600)=""/28, 0x1c}, {&(0x7f0000003640)=""/194, 0xc2}, {0x0}, {0x0}], 0x8, &(0x7f0000004840)=""/170, 0xaa}, 0x9}], 0x5, 0x10042, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="b805000000b94a0000000f01c10f00d4b93c0200000f320f0666b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f"}], 0x15555555555555d2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000002200)={{0x4, @addr=0x31f}, "060e7e73c94687d2b2d99e538ef15fa096886867d7a3a1a88d4abf95bf986374"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:33:30 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x98}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 403.610621][ T2488] usb 1-1: new high-speed USB device number 35 using dummy_hcd 02:33:30 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x9d}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 403.860520][ T2488] usb 1-1: Using ep0 maxpacket: 8 02:33:30 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 403.980805][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 403.988946][ T2488] usb 1-1: config 0 has no interface number 0 [ 404.024824][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 02:33:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xa6}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 404.088207][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 404.113589][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 404.159804][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 404.169441][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.197791][ T2488] usb 1-1: config 0 descriptor?? [ 404.232172][T16832] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 404.239535][T16832] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 404.482721][T16832] FAULT_INJECTION: forcing a failure. [ 404.482721][T16832] name failslab, interval 1, probability 0, space 0, times 0 [ 404.511067][T16832] CPU: 0 PID: 16832 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 404.519764][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.529833][T16832] Call Trace: [ 404.533142][T16832] dump_stack+0x18f/0x20d [ 404.537482][T16832] should_fail.cold+0x5/0x14 [ 404.542082][T16832] should_failslab+0x5/0xf [ 404.546501][T16832] kmem_cache_alloc_trace+0x240/0x2d0 [ 404.551882][T16832] snd_timer_instance_new+0x44/0x2f0 [ 404.557175][T16832] snd_seq_timer_open+0x1a5/0x530 [ 404.562215][T16832] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 404.567599][T16832] ? mark_held_locks+0x9f/0xe0 [ 404.572371][T16832] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 404.578188][T16832] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 404.584175][T16832] ? trace_hardirqs_on+0x5f/0x220 [ 404.589205][T16832] queue_use+0xe6/0x250 [ 404.593367][T16832] snd_seq_queue_alloc+0x2c6/0x4d0 [ 404.598487][T16832] snd_seq_ioctl_create_queue+0xab/0x320 [ 404.604122][T16832] ? alloc_seq_queue+0x190/0x190 [ 404.609069][T16832] snd_seq_kernel_client_ctl+0xeb/0x130 [ 404.614625][T16832] alloc_seq_queue+0xf0/0x190 [ 404.619307][T16832] ? async_call_lookup_ports+0x10/0x10 [ 404.624783][T16832] ? trace_kmalloc+0xfd/0x130 [ 404.629475][T16832] snd_seq_oss_open+0x36a/0xa10 [ 404.634340][T16832] odev_open+0x6c/0x90 [ 404.638433][T16832] ? odev_release+0x70/0x70 [ 404.642943][T16832] soundcore_open+0x445/0x600 [ 404.647636][T16832] ? sound_devnode+0xf0/0xf0 [ 404.652229][T16832] chrdev_open+0x266/0x770 [ 404.656650][T16832] ? cdev_device_add+0x210/0x210 [ 404.661689][T16832] ? security_file_open+0x1f5/0x3f0 [ 404.666902][T16832] do_dentry_open+0x501/0x1290 [ 404.671681][T16832] ? cdev_device_add+0x210/0x210 [ 404.676628][T16832] path_openat+0x1bb9/0x2750 [ 404.681234][T16832] ? path_lookupat+0x830/0x830 [ 404.686010][T16832] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 404.692007][T16832] ? lock_is_held_type+0xb0/0xe0 [ 404.696952][T16832] do_filp_open+0x17e/0x3c0 [ 404.701468][T16832] ? may_open_dev+0xf0/0xf0 [ 404.705992][T16832] ? do_raw_spin_lock+0x120/0x2b0 [ 404.711030][T16832] ? rwlock_bug.part.0+0x90/0x90 [ 404.715982][T16832] ? _raw_spin_unlock+0x24/0x40 [ 404.720951][T16832] ? __alloc_fd+0x28d/0x600 [ 404.725475][T16832] do_sys_openat2+0x16f/0x3b0 [ 404.730152][T16832] ? build_open_flags+0x650/0x650 [ 404.735178][T16832] ? __mutex_unlock_slowpath+0xe2/0x610 [ 404.740737][T16832] ? wait_for_completion+0x260/0x260 [ 404.746035][T16832] __x64_sys_openat+0x13f/0x1f0 [ 404.750894][T16832] ? __ia32_sys_open+0x1c0/0x1c0 [ 404.755831][T16832] ? ksys_write+0x1a5/0x250 [ 404.760341][T16832] ? lock_is_held_type+0xb0/0xe0 [ 404.765280][T16832] ? do_syscall_64+0x1c/0xe0 [ 404.769862][T16832] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 404.775841][T16832] do_syscall_64+0x60/0xe0 [ 404.780250][T16832] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 404.786136][T16832] RIP: 0033:0x45cba9 [ 404.790014][T16832] Code: Bad RIP value. [ 404.794065][T16832] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.802474][T16832] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 404.810445][T16832] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 404.818414][T16832] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 404.826388][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 404.834361][T16832] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 404.923989][ T2516] usb 1-1: USB disconnect, device number 35 02:33:32 executing program 0 (fault-call:4 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:32 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) 02:33:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xaf}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:32 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:32 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:32 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xb4}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:32 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 405.957073][ T2479] usb 1-1: new high-speed USB device number 36 using dummy_hcd 02:33:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x7ff) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000000)) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000180), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000100)) socket$inet6(0xa, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000200)=""/231, 0xe7}], 0x1, 0x0) 02:33:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xbd}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 406.221180][ T2479] usb 1-1: Using ep0 maxpacket: 8 [ 406.356820][ T2479] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 406.375246][ T2479] usb 1-1: config 0 has no interface number 0 [ 406.404034][ T2479] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 406.436854][ T2479] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 406.454770][ T2479] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 406.472744][ T2479] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 406.486587][ T2479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.513651][ T2479] usb 1-1: config 0 descriptor?? [ 406.562079][T16925] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 406.569481][T16925] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 406.822444][T16925] FAULT_INJECTION: forcing a failure. [ 406.822444][T16925] name failslab, interval 1, probability 0, space 0, times 0 [ 406.842055][T16925] CPU: 0 PID: 16925 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 406.850753][T16925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.860826][T16925] Call Trace: [ 406.864126][T16925] dump_stack+0x18f/0x20d [ 406.868910][T16925] should_fail.cold+0x5/0x14 [ 406.873948][T16925] should_failslab+0x5/0xf [ 406.878364][T16925] kmem_cache_alloc_trace+0x240/0x2d0 [ 406.883720][T16925] snd_seq_timer_new+0x41/0x1b0 [ 406.888547][T16925] snd_seq_queue_alloc+0x17e/0x4d0 [ 406.893653][T16925] snd_seq_ioctl_create_queue+0xab/0x320 [ 406.899269][T16925] ? alloc_seq_queue+0x190/0x190 [ 406.904209][T16925] snd_seq_kernel_client_ctl+0xeb/0x130 [ 406.909738][T16925] alloc_seq_queue+0xf0/0x190 [ 406.914431][T16925] ? async_call_lookup_ports+0x10/0x10 [ 406.919894][T16925] ? trace_kmalloc+0xfd/0x130 [ 406.924561][T16925] snd_seq_oss_open+0x36a/0xa10 [ 406.929396][T16925] odev_open+0x6c/0x90 [ 406.933444][T16925] ? odev_release+0x70/0x70 [ 406.937930][T16925] soundcore_open+0x445/0x600 [ 406.942597][T16925] ? sound_devnode+0xf0/0xf0 [ 406.947212][T16925] chrdev_open+0x266/0x770 [ 406.951610][T16925] ? cdev_device_add+0x210/0x210 [ 406.956533][T16925] ? security_file_open+0x1f5/0x3f0 [ 406.961897][T16925] do_dentry_open+0x501/0x1290 [ 406.966650][T16925] ? cdev_device_add+0x210/0x210 [ 406.971566][T16925] path_openat+0x1bb9/0x2750 [ 406.976151][T16925] ? path_lookupat+0x830/0x830 [ 406.980891][T16925] ? cache_grow_end+0x46/0x170 [ 406.985634][T16925] ? lock_is_held_type+0xb0/0xe0 [ 406.990561][T16925] do_filp_open+0x17e/0x3c0 [ 406.995053][T16925] ? may_open_dev+0xf0/0xf0 [ 406.999534][T16925] ? do_raw_spin_lock+0x120/0x2b0 [ 407.004536][T16925] ? rwlock_bug.part.0+0x90/0x90 [ 407.009453][T16925] ? _raw_spin_unlock+0x24/0x40 [ 407.014280][T16925] ? __alloc_fd+0x28d/0x600 [ 407.018776][T16925] do_sys_openat2+0x16f/0x3b0 [ 407.023429][T16925] ? build_open_flags+0x650/0x650 [ 407.028426][T16925] ? __mutex_unlock_slowpath+0xe2/0x610 [ 407.033949][T16925] ? wait_for_completion+0x260/0x260 [ 407.039917][T16925] __x64_sys_openat+0x13f/0x1f0 [ 407.044742][T16925] ? __ia32_sys_open+0x1c0/0x1c0 [ 407.049739][T16925] ? ksys_write+0x1a5/0x250 [ 407.054226][T16925] ? lock_is_held_type+0xb0/0xe0 [ 407.059137][T16925] ? do_syscall_64+0x1c/0xe0 [ 407.063704][T16925] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 407.069674][T16925] do_syscall_64+0x60/0xe0 [ 407.074096][T16925] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 407.080130][T16925] RIP: 0033:0x45cba9 [ 407.084001][T16925] Code: Bad RIP value. [ 407.088044][T16925] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.096433][T16925] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 407.104390][T16925] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 407.112341][T16925] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 407.120643][T16925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 407.128626][T16925] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 407.151196][ T8614] usb 1-1: USB disconnect, device number 36 02:33:34 executing program 0 (fault-call:4 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000273731b40422c3516b1c6000000010902120001000400000904"], 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000a00)={0x0, 0x24, 0x102, {0x102, 0x3c, "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"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="00030400000204030a08"], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d3097d97"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) syz_usb_ep_read(0xffffffffffffffff, 0x40, 0x31, &(0x7f0000001200)=""/49) r2 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) write$hidraw(r2, &(0x7f0000002d80)="961e782da136c24bc08d302972a62ecfe3cbeead1c954c7742868c42011a331f2e92dc729b41d125c492e95d9516199064d5c77956e7f4086d533f1446cfffce26ec03d6452313cdd5acfede0cb2cfc5b7677939c7f836c19d839d27e54abd54ee564a34f9ddce5aba0e4cfcc8ae4871522b2854d636453bd4b9579fac970fd342f7a2c9fa881d442e2e61bcbcb73c0f2f2e8b6c075face514675ba4aff91d01148ee7a619061990cb32807e7dabb1a73a1dba70f62308537c75ef78178017ae1120d4ed", 0xc4) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x8000, 0x200200) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000080)) 02:33:34 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) 02:33:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc4}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:34 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x20000988}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 407.970315][ T8614] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 407.990471][ T2516] usb 1-1: new high-speed USB device number 37 using dummy_hcd 02:33:35 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0x7ffff000}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:35 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 408.250220][ T2516] usb 1-1: Using ep0 maxpacket: 8 02:33:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 408.370912][ T2516] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 408.386528][ T8614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.388808][ T2516] usb 1-1: config 0 has no interface number 0 [ 408.406816][ T8614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.443044][ T2516] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 408.459781][ T8614] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 408.485791][ T2516] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 408.492795][ T8614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.527733][ T8614] usb 3-1: config 0 descriptor?? [ 408.544074][ T2516] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 408.580194][ T2516] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 408.589284][ T2516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.629696][ T2516] usb 1-1: config 0 descriptor?? [ 408.661702][T17014] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 408.669046][T17014] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 408.934316][T17014] FAULT_INJECTION: forcing a failure. [ 408.934316][T17014] name failslab, interval 1, probability 0, space 0, times 0 [ 408.958439][T17014] CPU: 1 PID: 17014 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 408.967143][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.977203][T17014] Call Trace: [ 408.980501][T17014] dump_stack+0x18f/0x20d [ 408.984843][T17014] should_fail.cold+0x5/0x14 [ 408.989447][T17014] should_failslab+0x5/0xf [ 408.993872][T17014] kmem_cache_alloc_trace+0x240/0x2d0 [ 408.999259][T17014] snd_timer_instance_new+0x44/0x2f0 [ 409.004554][T17014] snd_seq_timer_open+0x1a5/0x530 [ 409.009586][T17014] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 409.014969][T17014] ? mark_held_locks+0x9f/0xe0 [ 409.019736][T17014] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 409.025588][T17014] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 409.031572][T17014] ? trace_hardirqs_on+0x5f/0x220 [ 409.036801][T17014] queue_use+0xe6/0x250 [ 409.040964][T17014] snd_seq_queue_alloc+0x2c6/0x4d0 [ 409.046061][T17014] snd_seq_ioctl_create_queue+0xab/0x320 [ 409.051676][T17014] ? alloc_seq_queue+0x190/0x190 [ 409.056593][T17014] snd_seq_kernel_client_ctl+0xeb/0x130 [ 409.062158][T17014] alloc_seq_queue+0xf0/0x190 [ 409.066813][T17014] ? async_call_lookup_ports+0x10/0x10 [ 409.072256][T17014] ? trace_kmalloc+0xfd/0x130 [ 409.076911][T17014] snd_seq_oss_open+0x36a/0xa10 [ 409.081740][T17014] odev_open+0x6c/0x90 [ 409.085786][T17014] ? odev_release+0x70/0x70 [ 409.090264][T17014] soundcore_open+0x445/0x600 [ 409.094917][T17014] ? sound_devnode+0xf0/0xf0 [ 409.099596][T17014] chrdev_open+0x266/0x770 [ 409.104042][T17014] ? cdev_device_add+0x210/0x210 [ 409.108963][T17014] ? security_file_open+0x1f5/0x3f0 [ 409.114142][T17014] do_dentry_open+0x501/0x1290 [ 409.118881][T17014] ? cdev_device_add+0x210/0x210 [ 409.123807][T17014] path_openat+0x1bb9/0x2750 [ 409.128380][T17014] ? path_lookupat+0x830/0x830 [ 409.133126][T17014] ? cache_grow_end+0x46/0x170 [ 409.137868][T17014] ? lock_is_held_type+0xb0/0xe0 [ 409.142797][T17014] do_filp_open+0x17e/0x3c0 [ 409.147279][T17014] ? may_open_dev+0xf0/0xf0 [ 409.151772][T17014] ? do_raw_spin_lock+0x120/0x2b0 [ 409.157184][T17014] ? rwlock_bug.part.0+0x90/0x90 [ 409.162123][T17014] ? _raw_spin_unlock+0x24/0x40 [ 409.166950][T17014] ? __alloc_fd+0x28d/0x600 [ 409.171613][T17014] do_sys_openat2+0x16f/0x3b0 [ 409.176352][T17014] ? build_open_flags+0x650/0x650 [ 409.181353][T17014] ? __mutex_unlock_slowpath+0xe2/0x610 [ 409.186874][T17014] ? wait_for_completion+0x260/0x260 [ 409.192136][T17014] __x64_sys_openat+0x13f/0x1f0 [ 409.196957][T17014] ? __ia32_sys_open+0x1c0/0x1c0 [ 409.201868][T17014] ? ksys_write+0x1a5/0x250 [ 409.206348][T17014] ? lock_is_held_type+0xb0/0xe0 [ 409.211261][T17014] ? do_syscall_64+0x1c/0xe0 [ 409.215840][T17014] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 409.221798][T17014] do_syscall_64+0x60/0xe0 [ 409.226206][T17014] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 409.232086][T17014] RIP: 0033:0x45cba9 [ 409.235955][T17014] Code: Bad RIP value. [ 409.240008][T17014] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.248394][T17014] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 409.256441][T17014] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 409.264542][T17014] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 409.272505][T17014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 409.280460][T17014] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 409.324369][ T2478] usb 1-1: USB disconnect, device number 37 [ 409.347416][T17078] udc-core: couldn't find an available UDC or it's busy [ 409.363036][T17078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 409.401327][ T8614] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 409.425938][ T8614] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input5 [ 409.546363][ T8614] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 02:33:36 executing program 0 (fault-call:4 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 410.170093][ T2488] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 410.410055][ T2488] usb 1-1: Using ep0 maxpacket: 8 [ 410.530238][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 410.538296][ T2488] usb 1-1: config 0 has no interface number 0 [ 410.548638][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 410.559761][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 410.573874][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 410.583708][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 410.596128][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.607869][ T2488] usb 1-1: config 0 descriptor?? [ 410.641611][T17110] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 410.648792][T17110] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 410.865878][T17110] FAULT_INJECTION: forcing a failure. [ 410.865878][T17110] name failslab, interval 1, probability 0, space 0, times 0 [ 410.894463][T17110] CPU: 0 PID: 17110 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 410.903166][T17110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.913203][T17110] Call Trace: [ 410.916486][T17110] dump_stack+0x18f/0x20d [ 410.920801][T17110] should_fail.cold+0x5/0x14 [ 410.925372][T17110] ? snd_timer_instance_new+0x62/0x2f0 [ 410.930810][T17110] ? snd_timer_instance_new+0x62/0x2f0 [ 410.936249][T17110] should_failslab+0x5/0xf [ 410.940644][T17110] __kmalloc_track_caller+0x27b/0x330 [ 410.946003][T17110] kstrdup+0x36/0x70 [ 410.949877][T17110] snd_timer_instance_new+0x62/0x2f0 [ 410.955145][T17110] snd_seq_timer_open+0x1a5/0x530 [ 410.960169][T17110] ? snd_seq_timer_set_skew+0xc0/0xc0 [ 410.965532][T17110] ? mark_held_locks+0x9f/0xe0 [ 410.970331][T17110] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 410.976117][T17110] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 410.982075][T17110] ? trace_hardirqs_on+0x5f/0x220 [ 410.987184][T17110] queue_use+0xe6/0x250 [ 410.991341][T17110] snd_seq_queue_alloc+0x2c6/0x4d0 [ 410.996439][T17110] snd_seq_ioctl_create_queue+0xab/0x320 [ 411.002053][T17110] ? alloc_seq_queue+0x190/0x190 [ 411.006974][T17110] snd_seq_kernel_client_ctl+0xeb/0x130 [ 411.012505][T17110] alloc_seq_queue+0xf0/0x190 [ 411.017169][T17110] ? async_call_lookup_ports+0x10/0x10 [ 411.022618][T17110] ? trace_kmalloc+0xfd/0x130 [ 411.027288][T17110] snd_seq_oss_open+0x36a/0xa10 [ 411.032116][T17110] odev_open+0x6c/0x90 [ 411.036160][T17110] ? odev_release+0x70/0x70 [ 411.040690][T17110] soundcore_open+0x445/0x600 [ 411.045347][T17110] ? sound_devnode+0xf0/0xf0 [ 411.049915][T17110] chrdev_open+0x266/0x770 [ 411.054315][T17110] ? cdev_device_add+0x210/0x210 [ 411.059319][T17110] ? security_file_open+0x1f5/0x3f0 [ 411.064508][T17110] do_dentry_open+0x501/0x1290 [ 411.069251][T17110] ? cdev_device_add+0x210/0x210 [ 411.074174][T17110] path_openat+0x1bb9/0x2750 [ 411.078776][T17110] ? path_lookupat+0x830/0x830 [ 411.083523][T17110] ? cache_grow_end+0x46/0x170 [ 411.088374][T17110] ? lock_is_held_type+0xb0/0xe0 [ 411.093301][T17110] do_filp_open+0x17e/0x3c0 [ 411.097784][T17110] ? may_open_dev+0xf0/0xf0 [ 411.102300][T17110] ? do_raw_spin_lock+0x120/0x2b0 [ 411.107306][T17110] ? rwlock_bug.part.0+0x90/0x90 [ 411.112225][T17110] ? _raw_spin_unlock+0x24/0x40 [ 411.117147][T17110] ? __alloc_fd+0x28d/0x600 [ 411.121636][T17110] do_sys_openat2+0x16f/0x3b0 [ 411.126292][T17110] ? build_open_flags+0x650/0x650 [ 411.131291][T17110] ? __mutex_unlock_slowpath+0xe2/0x610 [ 411.136816][T17110] ? wait_for_completion+0x260/0x260 [ 411.142092][T17110] __x64_sys_openat+0x13f/0x1f0 [ 411.146922][T17110] ? __ia32_sys_open+0x1c0/0x1c0 [ 411.151835][T17110] ? ksys_write+0x1a5/0x250 [ 411.156317][T17110] ? lock_is_held_type+0xb0/0xe0 [ 411.161233][T17110] ? do_syscall_64+0x1c/0xe0 [ 411.165803][T17110] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 411.171786][T17110] do_syscall_64+0x60/0xe0 [ 411.176192][T17110] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 411.182060][T17110] RIP: 0033:0x45cba9 [ 411.185927][T17110] Code: Bad RIP value. [ 411.189984][T17110] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 411.198387][T17110] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 411.206362][T17110] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 411.214317][T17110] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 411.222263][T17110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 411.230221][T17110] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 411.259447][ T2488] usb 1-1: USB disconnect, device number 38 [ 411.760072][ T2478] usb 3-1: reset high-speed USB device number 8 using dummy_hcd 02:33:39 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:33:39 executing program 0 (fault-call:4 fault-nth:15): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 412.350990][ T2514] usb 3-1: USB disconnect, device number 8 02:33:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:39 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 412.700152][ T2576] usb 1-1: new high-speed USB device number 39 using dummy_hcd 02:33:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:40 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 412.950028][ T2576] usb 1-1: Using ep0 maxpacket: 8 [ 413.070269][ T2576] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 413.088690][ T2576] usb 1-1: config 0 has no interface number 0 02:33:40 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) [ 413.122298][ T2576] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 413.156537][ T2576] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 02:33:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 413.224401][ T2576] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 413.255455][ T2576] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 02:33:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 413.285664][ T2576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.327271][ T2576] usb 1-1: config 0 descriptor?? [ 413.361560][T17178] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 413.372711][T17178] raw-gadget gadget: fail, usb_ep_enable returned -22 02:33:40 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x500) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 413.605633][T17178] FAULT_INJECTION: forcing a failure. [ 413.605633][T17178] name failslab, interval 1, probability 0, space 0, times 0 [ 413.682386][T17178] CPU: 0 PID: 17178 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 413.691095][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.701154][T17178] Call Trace: [ 413.704458][T17178] dump_stack+0x18f/0x20d [ 413.708802][T17178] should_fail.cold+0x5/0x14 [ 413.713403][T17178] should_failslab+0x5/0xf [ 413.717830][T17178] kmem_cache_alloc_trace+0x240/0x2d0 [ 413.723218][T17178] snd_seq_oss_readq_new+0x46/0x2d0 [ 413.728427][T17178] snd_seq_oss_open+0x53a/0xa10 [ 413.733306][T17178] odev_open+0x6c/0x90 [ 413.737381][T17178] ? odev_release+0x70/0x70 [ 413.743152][T17178] soundcore_open+0x445/0x600 [ 413.747855][T17178] ? sound_devnode+0xf0/0xf0 [ 413.752455][T17178] chrdev_open+0x266/0x770 [ 413.756880][T17178] ? cdev_device_add+0x210/0x210 [ 413.761828][T17178] ? security_file_open+0x1f5/0x3f0 [ 413.767038][T17178] do_dentry_open+0x501/0x1290 [ 413.771830][T17178] ? cdev_device_add+0x210/0x210 [ 413.776782][T17178] path_openat+0x1bb9/0x2750 [ 413.781391][T17178] ? path_lookupat+0x830/0x830 [ 413.786952][T17178] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 413.792953][T17178] ? lock_is_held_type+0xb0/0xe0 [ 413.797899][T17178] do_filp_open+0x17e/0x3c0 [ 413.805621][T17178] ? may_open_dev+0xf0/0xf0 [ 413.810142][T17178] ? do_raw_spin_lock+0x120/0x2b0 [ 413.815174][T17178] ? rwlock_bug.part.0+0x90/0x90 [ 413.820297][T17178] ? _raw_spin_unlock+0x24/0x40 [ 413.825145][T17178] ? __alloc_fd+0x28d/0x600 [ 413.829657][T17178] do_sys_openat2+0x16f/0x3b0 [ 413.834339][T17178] ? build_open_flags+0x650/0x650 [ 413.839368][T17178] ? __mutex_unlock_slowpath+0xe2/0x610 [ 413.844931][T17178] ? wait_for_completion+0x260/0x260 [ 413.850229][T17178] __x64_sys_openat+0x13f/0x1f0 [ 413.855082][T17178] ? __ia32_sys_open+0x1c0/0x1c0 [ 413.860031][T17178] ? ksys_write+0x1a5/0x250 [ 413.864540][T17178] ? lock_is_held_type+0xb0/0xe0 [ 413.869482][T17178] ? do_syscall_64+0x1c/0xe0 [ 413.874075][T17178] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 413.880067][T17178] do_syscall_64+0x60/0xe0 [ 413.884578][T17178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 413.890469][T17178] RIP: 0033:0x45cba9 [ 413.894355][T17178] Code: Bad RIP value. [ 413.898423][T17178] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 413.906837][T17178] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 413.914796][T17178] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 413.922764][T17178] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 413.930896][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 413.938844][T17178] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 414.202052][ T2514] usb 1-1: USB disconnect, device number 39 02:33:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf39) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:41 executing program 0 (fault-call:4 fault-nth:16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf3d) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:41 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:33:42 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, &(0x7f0000000080)=0x3d7) 02:33:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf44) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:42 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 415.119956][ T2514] usb 1-1: new high-speed USB device number 40 using dummy_hcd 02:33:42 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf4d) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 415.379944][ T2514] usb 1-1: Using ep0 maxpacket: 8 02:33:42 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 415.505819][ T2514] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 415.518486][ T2514] usb 1-1: config 0 has no interface number 0 [ 415.559149][ T2514] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 415.603757][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 415.646697][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 415.682142][ T2514] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 415.707207][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.747207][ T2514] usb 1-1: config 0 descriptor?? [ 415.781243][T17286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 415.798907][T17286] raw-gadget gadget: fail, usb_ep_enable returned -22 02:33:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:42 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x405, 0xfffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) write(0xffffffffffffffff, &(0x7f0000000380)="ffd1712a2d563ce92f726bb03d5ab2d57dbebafd9d3e6ce91471c0f6f8e54f8e9429a9ed550d6816546794ef1be4b9a27423920851c79cb325f680377c47a91016e910430c3efbf214430aa63874ac4ca827270bc444e85e7a776ffba353d1a68bae18e59fecaad250e6a79d6752686a4333356489b77530c5b75ff99e888de8c491b37f7e611a4dd7c2bc1a02e147a874e88d43390202bfd4674e4ff6e7526bcdc7a1a49667caef9c35ebed6b173f1755b6013eeaefee886c487351d00ba9d4bfbf168566457d899afd6130fd89463f2fa1c1032519de1c17209fb8275e2d593357a4f21f9acf51a17ddda2", 0xec) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) [ 416.048723][T17286] FAULT_INJECTION: forcing a failure. [ 416.048723][T17286] name failslab, interval 1, probability 0, space 0, times 0 [ 416.073461][T17286] CPU: 1 PID: 17286 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 416.082165][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.092225][T17286] Call Trace: [ 416.095528][T17286] dump_stack+0x18f/0x20d [ 416.099873][T17286] should_fail.cold+0x5/0x14 [ 416.104483][T17286] should_failslab+0x5/0xf [ 416.109024][T17286] kmem_cache_alloc_trace+0x240/0x2d0 [ 416.114412][T17286] snd_seq_oss_writeq_new+0x9d/0x310 [ 416.119721][T17286] ? snd_seq_oss_readq_info_read+0x100/0x100 [ 416.125713][T17286] ? lockdep_init_map_waits+0x26a/0x890 [ 416.131272][T17286] ? lockdep_init_map_waits+0x26a/0x890 [ 416.136829][T17286] ? __raw_spin_lock_init+0x34/0x100 [ 416.142130][T17286] snd_seq_oss_open+0x774/0xa10 [ 416.146992][T17286] odev_open+0x6c/0x90 [ 416.151067][T17286] ? odev_release+0x70/0x70 [ 416.155578][T17286] soundcore_open+0x445/0x600 [ 416.160275][T17286] ? sound_devnode+0xf0/0xf0 [ 416.164869][T17286] chrdev_open+0x266/0x770 [ 416.169294][T17286] ? cdev_device_add+0x210/0x210 [ 416.174245][T17286] ? security_file_open+0x1f5/0x3f0 [ 416.179463][T17286] do_dentry_open+0x501/0x1290 [ 416.184232][T17286] ? cdev_device_add+0x210/0x210 [ 416.189180][T17286] path_openat+0x1bb9/0x2750 [ 416.193786][T17286] ? path_lookupat+0x830/0x830 [ 416.198554][T17286] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 416.204548][T17286] ? lock_is_held_type+0xb0/0xe0 [ 416.209495][T17286] do_filp_open+0x17e/0x3c0 [ 416.214004][T17286] ? may_open_dev+0xf0/0xf0 [ 416.218531][T17286] ? do_raw_spin_lock+0x120/0x2b0 [ 416.223560][T17286] ? rwlock_bug.part.0+0x90/0x90 [ 416.228510][T17286] ? _raw_spin_unlock+0x24/0x40 [ 416.233361][T17286] ? __alloc_fd+0x28d/0x600 [ 416.237882][T17286] do_sys_openat2+0x16f/0x3b0 [ 416.242563][T17286] ? build_open_flags+0x650/0x650 [ 416.247595][T17286] ? __mutex_unlock_slowpath+0xe2/0x610 [ 416.254194][T17286] ? wait_for_completion+0x260/0x260 [ 416.259492][T17286] __x64_sys_openat+0x13f/0x1f0 [ 416.264350][T17286] ? __ia32_sys_open+0x1c0/0x1c0 [ 416.269290][T17286] ? ksys_write+0x1a5/0x250 [ 416.273806][T17286] ? lock_is_held_type+0xb0/0xe0 [ 416.278754][T17286] ? do_syscall_64+0x1c/0xe0 [ 416.283361][T17286] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 416.289351][T17286] do_syscall_64+0x60/0xe0 [ 416.293774][T17286] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 416.299665][T17286] RIP: 0033:0x45cba9 [ 416.303549][T17286] Code: Bad RIP value. [ 416.307619][T17286] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.316031][T17286] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 416.324006][T17286] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 416.332075][T17286] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 416.340070][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 416.348049][T17286] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 416.377441][ T2478] usb 1-1: USB disconnect, device number 40 02:33:43 executing program 0 (fault-call:4 fault-nth:17): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf52) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:43 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:33:43 executing program 2 (fault-call:9 fault-nth:0): perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x11b240, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x1, {0x16, 0x0, 0x10, 0x19, 0x0, 0x2, 0x1, 0x98, 0xffffffffffffffff}}) clock_gettime(0x4, &(0x7f0000000280)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) restart_syscall() ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r3+10000000}, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) 02:33:44 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf5b) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:44 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x7, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:44 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x8, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 417.269769][ T5] usb 1-1: new high-speed USB device number 41 using dummy_hcd 02:33:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf64) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 417.420285][T17373] sock: process `syz-executor.5' is using obsolete setsockopt SO_BSDCOMPAT [ 417.559891][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 417.710167][ T5] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 417.721955][ T5] usb 1-1: config 0 has no interface number 0 [ 417.737088][ T5] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 417.749368][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 417.760576][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 417.771467][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 417.781440][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.794637][ T5] usb 1-1: config 0 descriptor?? [ 417.821365][T17372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 417.828707][T17372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 418.075585][T17372] FAULT_INJECTION: forcing a failure. [ 418.075585][T17372] name failslab, interval 1, probability 0, space 0, times 0 [ 418.107425][T17372] CPU: 1 PID: 17372 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 418.118036][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.128094][T17372] Call Trace: [ 418.131399][T17372] dump_stack+0x18f/0x20d [ 418.135741][T17372] should_fail.cold+0x5/0x14 [ 418.140348][T17372] should_failslab+0x5/0xf [ 418.144775][T17372] kmem_cache_alloc_trace+0x240/0x2d0 [ 418.150158][T17372] snd_seq_oss_timer_new+0x40/0x240 [ 418.155363][T17372] snd_seq_oss_open+0x5c2/0xa10 [ 418.160241][T17372] odev_open+0x6c/0x90 [ 418.164324][T17372] ? odev_release+0x70/0x70 [ 418.168841][T17372] soundcore_open+0x445/0x600 [ 418.173517][T17372] ? sound_devnode+0xf0/0xf0 [ 418.178082][T17372] chrdev_open+0x266/0x770 [ 418.182487][T17372] ? cdev_device_add+0x210/0x210 [ 418.187407][T17372] ? security_file_open+0x1f5/0x3f0 [ 418.192582][T17372] do_dentry_open+0x501/0x1290 [ 418.197324][T17372] ? cdev_device_add+0x210/0x210 [ 418.202327][T17372] path_openat+0x1bb9/0x2750 [ 418.206897][T17372] ? path_lookupat+0x830/0x830 [ 418.211636][T17372] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 418.217611][T17372] ? lock_is_held_type+0xb0/0xe0 [ 418.222526][T17372] do_filp_open+0x17e/0x3c0 [ 418.227002][T17372] ? may_open_dev+0xf0/0xf0 [ 418.231485][T17372] ? do_raw_spin_lock+0x120/0x2b0 [ 418.236482][T17372] ? rwlock_bug.part.0+0x90/0x90 [ 418.247151][T17372] ? _raw_spin_unlock+0x24/0x40 [ 418.251982][T17372] ? __alloc_fd+0x28d/0x600 [ 418.256475][T17372] do_sys_openat2+0x16f/0x3b0 [ 418.261128][T17372] ? build_open_flags+0x650/0x650 [ 418.266152][T17372] ? __mutex_unlock_slowpath+0xe2/0x610 [ 418.271671][T17372] ? wait_for_completion+0x260/0x260 [ 418.276931][T17372] __x64_sys_openat+0x13f/0x1f0 [ 418.281763][T17372] ? __ia32_sys_open+0x1c0/0x1c0 [ 418.286671][T17372] ? ksys_write+0x1a5/0x250 [ 418.291149][T17372] ? lock_is_held_type+0xb0/0xe0 [ 418.296059][T17372] ? do_syscall_64+0x1c/0xe0 [ 418.300629][T17372] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 418.306597][T17372] do_syscall_64+0x60/0xe0 [ 418.310993][T17372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.316857][T17372] RIP: 0033:0x45cba9 [ 418.320737][T17372] Code: Bad RIP value. [ 418.324791][T17372] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.333176][T17372] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 418.341122][T17372] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 418.349240][T17372] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 418.357185][T17372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 418.365129][T17372] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 418.386007][T17372] ALSA: seq_oss: can't alloc timer [ 418.400363][ T8614] usb 1-1: USB disconnect, device number 41 02:33:45 executing program 0 (fault-call:4 fault-nth:18): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:45 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x17, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:33:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf69) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0207000702"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a000000000000d74619edc70000000000000000000000000000000000002c85fd17fc7bb9"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="21744d740e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:46 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x18, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf6e) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:46 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x1b, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:46 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x1c, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 419.289667][ T2478] usb 1-1: new high-speed USB device number 42 using dummy_hcd 02:33:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf73) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 419.529505][ T2478] usb 1-1: Using ep0 maxpacket: 8 [ 419.651687][T17480] sock: process `syz-executor.1' is using obsolete setsockopt SO_BSDCOMPAT [ 419.670803][ T2478] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 419.681308][ T2478] usb 1-1: config 0 has no interface number 0 [ 419.697102][ T2478] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 419.753400][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 419.781204][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 419.802357][ T2478] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 419.823322][ T2478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.845451][ T2478] usb 1-1: config 0 descriptor?? [ 419.881215][T17461] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 419.888574][T17461] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 420.127606][T17461] FAULT_INJECTION: forcing a failure. [ 420.127606][T17461] name failslab, interval 1, probability 0, space 0, times 0 [ 420.165243][T17461] CPU: 1 PID: 17461 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 420.173948][T17461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.184010][T17461] Call Trace: [ 420.187307][T17461] dump_stack+0x18f/0x20d [ 420.191653][T17461] should_fail.cold+0x5/0x14 [ 420.196782][T17461] should_failslab+0x5/0xf [ 420.201217][T17461] kmem_cache_alloc_trace+0x240/0x2d0 [ 420.206602][T17461] snd_seq_oss_writeq_new+0x9d/0x310 [ 420.211896][T17461] ? snd_seq_oss_readq_info_read+0x100/0x100 [ 420.217887][T17461] ? lockdep_init_map_waits+0x26a/0x890 [ 420.223618][T17461] ? lockdep_init_map_waits+0x26a/0x890 [ 420.229174][T17461] ? __raw_spin_lock_init+0x34/0x100 [ 420.234471][T17461] snd_seq_oss_open+0x774/0xa10 [ 420.239347][T17461] odev_open+0x6c/0x90 [ 420.243422][T17461] ? odev_release+0x70/0x70 [ 420.248105][T17461] soundcore_open+0x445/0x600 [ 420.252803][T17461] ? sound_devnode+0xf0/0xf0 [ 420.257485][T17461] chrdev_open+0x266/0x770 [ 420.261908][T17461] ? cdev_device_add+0x210/0x210 [ 420.266863][T17461] ? security_file_open+0x1f5/0x3f0 [ 420.272069][T17461] do_dentry_open+0x501/0x1290 [ 420.277486][T17461] ? cdev_device_add+0x210/0x210 [ 420.282438][T17461] path_openat+0x1bb9/0x2750 [ 420.287040][T17461] ? path_lookupat+0x830/0x830 [ 420.292434][T17461] ? cache_grow_end+0x46/0x170 [ 420.297220][T17461] ? lock_is_held_type+0xb0/0xe0 [ 420.302142][T17461] do_filp_open+0x17e/0x3c0 [ 420.306623][T17461] ? may_open_dev+0xf0/0xf0 [ 420.311263][T17461] ? do_raw_spin_lock+0x120/0x2b0 [ 420.316323][T17461] ? rwlock_bug.part.0+0x90/0x90 [ 420.321248][T17461] ? _raw_spin_unlock+0x24/0x40 [ 420.326084][T17461] ? __alloc_fd+0x28d/0x600 [ 420.330573][T17461] do_sys_openat2+0x16f/0x3b0 [ 420.335247][T17461] ? build_open_flags+0x650/0x650 [ 420.340250][T17461] ? __mutex_unlock_slowpath+0xe2/0x610 [ 420.345788][T17461] ? wait_for_completion+0x260/0x260 [ 420.351058][T17461] __x64_sys_openat+0x13f/0x1f0 [ 420.355893][T17461] ? __ia32_sys_open+0x1c0/0x1c0 [ 420.360984][T17461] ? ksys_write+0x1a5/0x250 [ 420.365471][T17461] ? lock_is_held_type+0xb0/0xe0 [ 420.370393][T17461] ? do_syscall_64+0x1c/0xe0 [ 420.375002][T17461] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 420.381336][T17461] do_syscall_64+0x60/0xe0 [ 420.385760][T17461] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.391645][T17461] RIP: 0033:0x45cba9 [ 420.395512][T17461] Code: Bad RIP value. [ 420.399552][T17461] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.407942][T17461] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 420.415899][T17461] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 420.423855][T17461] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 420.431802][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 420.439751][T17461] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 420.461921][ T2516] usb 1-1: USB disconnect, device number 42 [ 420.701622][ T0] NOHZ: local_softirq_pending 08 02:33:48 executing program 0 (fault-call:4 fault-nth:19): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:48 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x2f, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf78) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:48 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000080)={&(0x7f0000001340)={0x2580, 0x26, 0x200, 0x70bd2d, 0x25dfdbfb, {0x1c}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r4}, @generic="4b39aa198cf028a13fca5251053159843cbb6ecbad9e9f667c23f11c92f501b0d45bc6c4c75079308bb70f8b0aff7d68ae0b0e462dcfd71aeeae5813fccea49da741c605664d3f38b9764a9a6540f77b2d17ab408c3203f50fa2c59156e54a0fcbda483a6b029e8b38fcd3529a85b195519b7e774b00c75b0bc8c604cd0e86021eca45d28a05e1406e26973c430411870512db4258208971437314cef1681c01", @generic="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", @nested={0x12e, 0x39, 0x0, 0x1, [@generic="7e38c7c6b349f6d7e5d0b24b014ebfe538df7026713b2e0917a4562d0f099ef32d7f818221d18cf284a7ec096132d9fe6ab3f2dc9c1c19a20e2ebda2819e5471176d65314d9691d078882abde703c3869e031640e4a30978ce431ae1dd5af9f8be17f96e3f3b2669343c30dbb8875a13e5500ea263954ed0124e53599d369b73134942e9e7cb47ef39e515b0cd730096cfe426221d6bfd24ac1c3b3a12f601bde9009b556ce667636b236f971f8a8259d068b14653368493b46ffc0ec4e2f10bb189df576bf837701511566c44ac171a6260da633d25807060ad", @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@multicast1}, @generic="71d3d595304da62cca0070e7f70d64896c6c64e553f9af36b363548c40019e4fe6c053e17c3b1a6bd51d12d6", @typed={0x8, 0x51, 0x0, 0x0, @pid=r0}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @typed={0x4, 0x32}, @nested={0x1181, 0x82, 0x0, 0x1, [@generic="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", @generic="6cb49d2af766ae3a4e04cce9e1a0214e594f390bc8b2c3ef27cf9ad39b34c0fb62a3e355b055e54dcb7bb9199efa30e6513bd3a98f0d2474499fa899f5e562821169869405744bc1f0d5d1c4f3c83ae26aa39d0fc6b4c39ce05698e23831e34f8be0231b93a8c6704faa8d7e66e39ad3db87dd58dff54c91b3c7507238856a66ebf6a8d8ddfddb80907579541f", @generic="af5b942b174e65a0e67a989fb429592657040f40ad25ab920bcdec3a3948931da36f66c9d8c312c22f480a68584bf7ff12344edae38365ab6d9886ab1c0ef2e7e6d6ee2bf378db00f77fd65d47f24f867cd888a79d41085320348aec3c6ab3ca80d83f6fa244bcfff304d4bb6c504868a58a4adbc6fa031c8f5b4755626527e927715e74bab8582bcd28d16c404856bf1a4c6c6512b024bc40ec8f8c9d13c1f51f8ac6fdb23c64e728d4948f544b21446a478eabb3c33bfd23fffd96189a07c13191999a3eb173fc745c2ca814746fd68c162c4feb33019406c072ff5b2d92b7ed236ae7ee9c1472e3fa1b36", @typed={0x4, 0xd}]}, @typed={0x9, 0x65, 0x0, 0x0, @str='+}-\xad\x00'}, @nested={0x10f9, 0x78, 0x0, 0x1, [@typed={0xc, 0x75, 0x0, 0x0, @u64=0x8}, @generic="5b01b02804402a62ad03ca6602908ecfc9128228f1c63fd0f06f762cab9cececb033c14a2933c8f7f58186bd929ee1e5dba3205c17e97df1a21949126ee22131ba06bc5dbdcd77fe257df2e688f8429c03bda8cbef3e7f0f9d8be5d851447bbbd680c4b391f37866bc9704c7c0b6ef4af8ba900039a430df95a21d06b30fe82d0cc85fc6fb8d86ee59bb5f8da8bfc4bfb0ce7912454951277476cebb9001ececc20040450e48", @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@remote}, @typed={0x1004, 0x16, 0x0, 0x0, @binary="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"}, @typed={0x4, 0x75}, @typed={0x4, 0x6a}, @generic="2e9935c01fa8a8239503e212185a75b5c32c2c6bd299448e98fde9d9a29bcb8d9c559d6734", @generic="971b039d62f4cf1da2e7"]}, @typed={0x8, 0x1e, 0x0, 0x0, @pid}]}, 0x2580}, 0x1, 0x0, 0x0, 0x4002}, 0x8000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf7e) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:48 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$can_raw(r2, &(0x7f0000004600)={&(0x7f0000000040), 0x80, &(0x7f0000004540)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/254, 0xfe}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000003340)=""/216, 0xd8}, {&(0x7f0000001200)=""/153, 0x99}, {&(0x7f0000003440)=""/130, 0x82}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/40, 0x28}], 0xa}, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000004780)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004740)={&(0x7f00000046c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd700016dcdf25020000000900030073797a32000000001400020076657468305f746f5f62616ed98b030073797a31000000007c2c348cbbcd20ba00e600000000000000797a3200"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8014) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 421.379462][ T8614] usb 1-1: new high-speed USB device number 43 using dummy_hcd 02:33:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf87) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:48 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0xfffffffffffff24b, 0x52}, &(0x7f0000000080)) sched_setparam(0x0, 0x0) [ 421.668938][ T8614] usb 1-1: Using ep0 maxpacket: 8 02:33:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf90) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 421.815981][ T8614] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.840586][ T8614] usb 1-1: config 0 has no interface number 0 [ 421.882768][ T8614] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 421.915482][ T8614] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 421.950520][ T8614] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 421.976268][ T8614] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 422.001210][ T8614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.014377][ T8614] usb 1-1: config 0 descriptor?? [ 422.041022][T17553] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 422.048414][T17553] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 422.318088][T17553] FAULT_INJECTION: forcing a failure. [ 422.318088][T17553] name failslab, interval 1, probability 0, space 0, times 0 [ 422.346871][T17553] CPU: 0 PID: 17553 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 422.355566][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.365623][T17553] Call Trace: [ 422.368924][T17553] dump_stack+0x18f/0x20d [ 422.373266][T17553] should_fail.cold+0x5/0x14 [ 422.377883][T17553] should_failslab+0x5/0xf [ 422.382309][T17553] kmem_cache_alloc_trace+0x240/0x2d0 [ 422.387695][T17553] snd_seq_oss_timer_new+0x40/0x240 [ 422.392898][T17553] snd_seq_oss_open+0x5c2/0xa10 [ 422.397755][T17553] odev_open+0x6c/0x90 [ 422.401825][T17553] ? odev_release+0x70/0x70 [ 422.406329][T17553] soundcore_open+0x445/0x600 [ 422.411018][T17553] ? sound_devnode+0xf0/0xf0 [ 422.415606][T17553] chrdev_open+0x266/0x770 [ 422.420024][T17553] ? cdev_device_add+0x210/0x210 [ 422.424956][T17553] ? security_file_open+0x1f5/0x3f0 [ 422.430137][T17553] do_dentry_open+0x501/0x1290 [ 422.434876][T17553] ? cdev_device_add+0x210/0x210 [ 422.439801][T17553] path_openat+0x1bb9/0x2750 [ 422.444376][T17553] ? path_lookupat+0x830/0x830 [ 422.449121][T17553] ? cache_grow_end+0x46/0x170 [ 422.453876][T17553] ? lock_is_held_type+0xb0/0xe0 [ 422.458796][T17553] do_filp_open+0x17e/0x3c0 [ 422.463281][T17553] ? may_open_dev+0xf0/0xf0 [ 422.467775][T17553] ? do_raw_spin_lock+0x120/0x2b0 [ 422.472788][T17553] ? rwlock_bug.part.0+0x90/0x90 [ 422.477714][T17553] ? _raw_spin_unlock+0x24/0x40 [ 422.482549][T17553] ? __alloc_fd+0x28d/0x600 [ 422.487030][T17553] do_sys_openat2+0x16f/0x3b0 [ 422.491683][T17553] ? build_open_flags+0x650/0x650 [ 422.496682][T17553] ? __mutex_unlock_slowpath+0xe2/0x610 [ 422.502205][T17553] ? wait_for_completion+0x260/0x260 [ 422.516344][T17553] __x64_sys_openat+0x13f/0x1f0 [ 422.527422][T17553] ? __ia32_sys_open+0x1c0/0x1c0 [ 422.532337][T17553] ? ksys_write+0x1a5/0x250 [ 422.536835][T17553] ? lock_is_held_type+0xb0/0xe0 [ 422.541754][T17553] ? do_syscall_64+0x1c/0xe0 [ 422.546319][T17553] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 422.552369][T17553] do_syscall_64+0x60/0xe0 [ 422.556767][T17553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.562639][T17553] RIP: 0033:0x45cba9 [ 422.566510][T17553] Code: Bad RIP value. [ 422.570550][T17553] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.578950][T17553] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 422.586897][T17553] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 422.594973][T17553] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.602921][T17553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 422.610872][T17553] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 422.622430][T17553] ALSA: seq_oss: can't alloc timer [ 422.631008][ T8614] usb 1-1: USB disconnect, device number 43 02:33:50 executing program 0 (fault-call:4 fault-nth:20): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:50 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20100, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) ptrace$setopts(0x4200, r5, 0x40, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xf9c) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:50 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x6, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfa4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:50 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="ac000000000500000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x1}, &(0x7f00000000c0)=0x8) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 423.509330][ T2488] usb 1-1: new high-speed USB device number 44 using dummy_hcd 02:33:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfa7) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 423.769402][ T2488] usb 1-1: Using ep0 maxpacket: 8 [ 423.899692][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 423.911350][ T2488] usb 1-1: config 0 has no interface number 0 [ 423.926481][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 02:33:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfaa) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) [ 423.952453][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 423.969107][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 424.033027][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 424.049243][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.083211][ T2488] usb 1-1: config 0 descriptor?? [ 424.120799][T17636] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 424.128201][T17636] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 424.373638][T17636] FAULT_INJECTION: forcing a failure. [ 424.373638][T17636] name failslab, interval 1, probability 0, space 0, times 0 [ 424.433769][T17636] CPU: 0 PID: 17636 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 424.442490][T17636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.452529][T17636] Call Trace: [ 424.455812][T17636] dump_stack+0x18f/0x20d [ 424.460128][T17636] should_fail.cold+0x5/0x14 [ 424.464701][T17636] should_failslab+0x5/0xf [ 424.469095][T17636] kmem_cache_alloc_trace+0x240/0x2d0 [ 424.475076][T17636] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 424.481061][T17636] snd_seq_port_connect+0x5d/0x520 [ 424.486151][T17636] ? _raw_read_unlock+0x24/0x40 [ 424.491073][T17636] ? check_subscription_permission.isra.0+0x16a/0x260 [ 424.497817][T17636] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 424.503690][T17636] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 424.509911][T17636] ? mark_held_locks+0x9f/0xe0 [ 424.514660][T17636] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 424.520456][T17636] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 424.526419][T17636] snd_seq_kernel_client_ctl+0xeb/0x130 [ 424.531949][T17636] snd_seq_oss_midi_open+0x582/0x6e0 [ 424.537215][T17636] ? snd_seq_oss_midi_setup+0x50/0x50 [ 424.542608][T17636] ? mark_held_locks+0x9f/0xe0 [ 424.547370][T17636] ? lockdep_hardirqs_on+0x6a/0xe0 [ 424.552468][T17636] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 424.558262][T17636] ? get_mdev+0x75/0x90 [ 424.562402][T17636] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 424.568280][T17636] snd_seq_oss_open+0x87e/0xa10 [ 424.573127][T17636] odev_open+0x6c/0x90 [ 424.577174][T17636] ? odev_release+0x70/0x70 [ 424.581745][T17636] soundcore_open+0x445/0x600 [ 424.586405][T17636] ? sound_devnode+0xf0/0xf0 [ 424.590975][T17636] chrdev_open+0x266/0x770 [ 424.595369][T17636] ? cdev_device_add+0x210/0x210 [ 424.600287][T17636] ? security_file_open+0x1f5/0x3f0 [ 424.605467][T17636] do_dentry_open+0x501/0x1290 [ 424.610224][T17636] ? cdev_device_add+0x210/0x210 [ 424.615144][T17636] path_openat+0x1bb9/0x2750 [ 424.619720][T17636] ? path_lookupat+0x830/0x830 [ 424.624463][T17636] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 424.630427][T17636] ? lock_is_held_type+0xb0/0xe0 [ 424.635349][T17636] do_filp_open+0x17e/0x3c0 [ 424.639846][T17636] ? may_open_dev+0xf0/0xf0 [ 424.644354][T17636] ? do_raw_spin_lock+0x120/0x2b0 [ 424.649366][T17636] ? rwlock_bug.part.0+0x90/0x90 [ 424.654301][T17636] ? _raw_spin_unlock+0x24/0x40 [ 424.659132][T17636] ? __alloc_fd+0x28d/0x600 [ 424.664068][T17636] do_sys_openat2+0x16f/0x3b0 [ 424.668737][T17636] ? build_open_flags+0x650/0x650 [ 424.673754][T17636] ? __mutex_unlock_slowpath+0xe2/0x610 [ 424.679307][T17636] ? wait_for_completion+0x260/0x260 [ 424.685455][T17636] __x64_sys_openat+0x13f/0x1f0 [ 424.690290][T17636] ? __ia32_sys_open+0x1c0/0x1c0 [ 424.695216][T17636] ? ksys_write+0x1a5/0x250 [ 424.699704][T17636] ? lock_is_held_type+0xb0/0xe0 [ 424.704625][T17636] ? do_syscall_64+0x1c/0xe0 [ 424.709195][T17636] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 424.715166][T17636] do_syscall_64+0x60/0xe0 [ 424.719563][T17636] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 424.725434][T17636] RIP: 0033:0x45cba9 [ 424.729301][T17636] Code: Bad RIP value. [ 424.733342][T17636] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 424.741728][T17636] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 424.749679][T17636] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 424.757631][T17636] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 424.765590][T17636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 424.773542][T17636] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 424.939680][ T5] usb 1-1: USB disconnect, device number 44 02:33:52 executing program 0 (fault-call:4 fault-nth:21): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:52 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, r0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfad) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) 02:33:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:52 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="6c6cd9ff0b42a4e95507e31166ac3c7a9275d669ce5ad75284708500465c4ddf49e580893b5fa14f2c4cfc5b6f68835cb7d09ba673880df8cc35f8e92b76ef6b226a78e0d5ae037e2e8588b37a49141d00823f12bb7d4ef4ab4990bb0046211a030260aaafd6d3528faca55c6e8c70a41121c4181e17ef27b01b23400e470e22", 0x80}, {&(0x7f0000000340)="9aa4f4ea88bea607beeb604712572f512cc4ad271926fa51f0b1d736ed791d756ee81a53bea9e813376a7dcbc85495c87739e81e70d2b60bf03d89fe9ef01e255a9e7fd26d15e4169c395a306ea77491c4e76ae9c866e38575cc21281a45d79e617f747e9de25483595dba", 0x6b}, {&(0x7f00000003c0)="421511f12574ef4292aae30b5733d2164f5228632d859ea2365c887a5fd7d379e29b0f3a1745934803ab0b1c12e2144e30935ac2b9bb536a7247db235fc47fc61bf5b39cb926bcd20e663954cd03a909", 0x50}], 0x3, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3b}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc323}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x90}}, {{&(0x7f0000000540)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)="4f645b8a26d3400725579d2cc3a506a0c87bc55f2e2f8ae7a1fbe0d0ff48f30feea7e2fbd4788e5517caac8f287b1f1be422100801ddded21f41f684e418c53b837b74d53b4dae3d0aed39570ee64b266bcb64df3a1e48c42283567f902549a84ef43a8be14ed31cd09a116148a28ddcbe85f26c0ac40a75288d7a37711b66c9fe03ec1145f6a4a100a64f12201c229095f9e828645bad79ba7e94c1fc101fa8cfa35e46ab5358933d8cf12dac55cfdc6242d68394d32aecaf6a406786d05cc5151a07f3fcb96f7526d123d0d36f3598e03489fe6aad7c848620ec2c11f6006b", 0xe0}, {&(0x7f00000006c0)="bc4589ded332048948e6290eaa78a4a6af4485109170ef5cca9b4c82e749d395946c3700cf0f4843e4a277961e", 0x2d}, {&(0x7f0000000700)="caf3aa30f8d8c0fd10b5d19dd3d5c165f1d51d9bad5119dbb67e02c72295765a5c45e9958ed756dc680c766fcb6474de104f22f8e1d480eba55ab86b54e828d7e261acf1c05ece05576efd0dfc428f0c7327484075a48e1efb737bae084f56b326eb29602a4b21c7d60f70bbb4d60f75a34440b183929efb6251c5da10b1113b578f10bff836c91d89fb3f8cf446a1e926b263f99d97e0d83340ce7d348de54098a1dbc1ff08ce51d898951d36bfe8b8a3a5bcee6fc44dccc0dc056e3e1a99", 0xbf}, {&(0x7f00000007c0)="f2cbbfb83be214f6485e772b8a1794559e8092d3d9484f599694a2a14e6ca71b1d5c58b6cd13c35f2cbd57ad23afc3c227995ec2044a1f84569fec5990aeb8f430b7c7ea04fbdf9dc933692c93841398f6533a3454ae36c1daf489a1811f60503ce3c5368ebe60dbd37387b6de0ea3f244e4ae82d49751976f50bd60b284c731d44cc09b7dc3c1ec4c98bab843b3fdb6a2b31617fbfbc9fc759ed67807ee3aa3b230e170845e1d44678b9caf3252", 0xae}, {&(0x7f0000000880)="7e77f4f8b0ef512f8b9fd6e61876812312d0c58922df7a16015d8b25e677a43d4ec9e66f202b704665f8c0aa812344fb271c21ee5f69598a77cc29c87122e774f7929a1a309a7a2572dcbcb155c267b03216fd3e843edb42ce6c4207aab95b5293cc66084e033118d8f47014b37cf002173b10689b4460793f64", 0x7a}, {&(0x7f0000000900)="17fb74b099e5a7fbbf182f081f9a84a64397ec1348c8026cd1f0e01cb5066184ab7263a6dd980ed4cf4ed262149db691efc1157ad95a2081c02dc146e66ece3d65e92e1016c9bfd6a48ae97deb2b5d8d532903d6559ede9e329d19579990f647f1ff32a35c08de616638836ac505770ea6a8e69a8bd7140bb09a99497498ddf9c3583e5f82fb4c3adc200b8920130a8f9771330956", 0x95}, {&(0x7f00000009c0)="bd66c1faef14b4f767997a04e751b02e7c98e66be9866308482395feac98ebc78f297e43a887cc1da86c8571ccaa3fead3e40792c722ddee5d4b479f43b461f03f0a35d949eb31559a031833c5b5f8a0d603b552807e7e5e3aca1a4ac9958491", 0x60}, {&(0x7f0000000a40)="0c1e95593a66e0e99faf1be99bdc13ddadcc4a869836f2bd73b968377f93553666c80852274c00855cd89695c248d65e1f374e7ac6329d3d225f187b22ca17ad498d9fb54ae78d41a84db2a270db57c163e734da7659824687c6e3dc8336d148412b0edb214f7ac261985ae8fe22893d06b02a3faf3b22b6fa8e6103befe2f6cec97598a8ba79cfb20cfe0854bcd8b8f23eaf5b73d49003c049510baad15b0939340fe22ad81dc55e28b2a6522f72cb67e5ba2997c293be63aa0641472", 0xbd}, {&(0x7f0000000b00)="a0242d3961beead6ac15a793b5c404c854bbb07607c15a9d67e150085d2e3a70a341f974658cd7cabf943b6551426e95", 0x30}], 0x9}}], 0x2, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="0f4091132eb9b5758178f8b623136e11fab34735f95e1c432eb9d721bb948fa90307decc44e4a7d1e24ba7496fc23019fe9fada91bd595ca2c51f8d1e14dcc41d0dbd771157c8f0842b1c889f035f8ffbf96426d0076f8c1f874c150ae385b92bea9cc2419996368e0ab93e09b243461ab6bd4c24871b5a8b4b7a94698a7d5cb73f749752237cbeec0fda908de987df35f4fe6b7692a03d02a10a9b8035f9a827c4c7b951b983816ff9aaf99a1aba29da65edc8eda76545874df9de52b1641dc1fbe0adcd3d3947c75b71040ff86bf83b9f8043a1a60f61f6271dc84561f813b014adf91fa12d54a9eda306021", 0xed}, {&(0x7f0000000140)="ff90d374399f3e3f523d3955c4bfea8e10edfd662ee1d6c75d23e5c4e08ae2ca6dc1e0af817f7a8759794d1428476073c3416e1ae7076c9ab400f4d025df95eb03fdde43ee3927dea45e03075ad2a1f0a1f590d067", 0x55}, {&(0x7f00000001c0)="4322b79db216d2f0df2e6aead9202cea0f45d69a6539e60b7d4e9ad93df25810fec023c1e49b11710d95aeb828b1d8d84cacae4cb67bf9499f642dcd03456fa0518f3f4ac1a9c80ed37c40906e07e84b531cc621868290bf037967ce7612b47d61e153f08e901a4fef45f9752f353a0c03ef5faea3270bac35d8d49e1e8359eb60", 0x81}], 0x3) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c80)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000d80)=0xe8) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfb1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 425.799323][ T5] usb 1-1: new high-speed USB device number 45 using dummy_hcd 02:33:53 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) sched_setparam(0x0, 0x0) 02:33:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfb7) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 426.049176][ T5] usb 1-1: Using ep0 maxpacket: 8 02:33:53 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x3}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @loopback, 0x5}}, 0x24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x43) sched_setparam(0x0, 0x0) [ 426.171190][ T5] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 426.184818][ T5] usb 1-1: config 0 has no interface number 0 [ 426.202661][ T5] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 426.237986][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 02:33:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfbf) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 426.295460][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 426.320944][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 426.380804][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.442253][ T5] usb 1-1: config 0 descriptor?? [ 426.490754][T17713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 426.498115][T17713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 426.737496][T17713] FAULT_INJECTION: forcing a failure. [ 426.737496][T17713] name failslab, interval 1, probability 0, space 0, times 0 [ 426.769100][T17713] CPU: 0 PID: 17713 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 426.777893][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.787969][T17713] Call Trace: [ 426.791272][T17713] dump_stack+0x18f/0x20d [ 426.795613][T17713] should_fail.cold+0x5/0x14 [ 426.800219][T17713] should_failslab+0x5/0xf [ 426.804642][T17713] kmem_cache_alloc_trace+0x240/0x2d0 [ 426.810020][T17713] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 426.816014][T17713] snd_seq_port_connect+0x5d/0x520 [ 426.821141][T17713] ? _raw_read_unlock+0x24/0x40 [ 426.826008][T17713] ? check_subscription_permission.isra.0+0x16a/0x260 [ 426.832784][T17713] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 426.838691][T17713] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 426.845294][T17713] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 426.851125][T17713] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 426.858107][T17713] snd_seq_kernel_client_ctl+0xeb/0x130 [ 426.863670][T17713] snd_seq_oss_midi_open+0x466/0x6e0 [ 426.869003][T17713] ? snd_seq_oss_midi_setup+0x50/0x50 [ 426.874397][T17713] ? lock_is_held_type+0xb0/0xe0 [ 426.879354][T17713] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 426.885344][T17713] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 426.890925][T17713] snd_seq_oss_open+0x87e/0xa10 [ 426.895793][T17713] odev_open+0x6c/0x90 [ 426.899871][T17713] ? odev_release+0x70/0x70 [ 426.904381][T17713] soundcore_open+0x445/0x600 [ 426.909073][T17713] ? sound_devnode+0xf0/0xf0 [ 426.914711][T17713] chrdev_open+0x266/0x770 [ 426.919133][T17713] ? cdev_device_add+0x210/0x210 [ 426.924083][T17713] ? security_file_open+0x1f5/0x3f0 [ 426.929291][T17713] do_dentry_open+0x501/0x1290 [ 426.934148][T17713] ? cdev_device_add+0x210/0x210 [ 426.939094][T17713] path_openat+0x1bb9/0x2750 [ 426.943740][T17713] ? path_lookupat+0x830/0x830 [ 426.949289][T17713] ? cache_grow_end+0x46/0x170 [ 426.954072][T17713] ? lock_is_held_type+0xb0/0xe0 [ 426.959018][T17713] do_filp_open+0x17e/0x3c0 [ 426.963528][T17713] ? may_open_dev+0xf0/0xf0 [ 426.968047][T17713] ? do_raw_spin_lock+0x120/0x2b0 [ 426.973070][T17713] ? rwlock_bug.part.0+0x90/0x90 [ 426.978000][T17713] ? _raw_spin_unlock+0x24/0x40 [ 426.982830][T17713] ? __alloc_fd+0x28d/0x600 [ 426.987318][T17713] do_sys_openat2+0x16f/0x3b0 [ 426.991982][T17713] ? build_open_flags+0x650/0x650 [ 426.997361][T17713] ? __mutex_unlock_slowpath+0xe2/0x610 [ 427.002890][T17713] ? wait_for_completion+0x260/0x260 [ 427.008178][T17713] __x64_sys_openat+0x13f/0x1f0 [ 427.013032][T17713] ? __ia32_sys_open+0x1c0/0x1c0 [ 427.017956][T17713] ? ksys_write+0x1a5/0x250 [ 427.022438][T17713] ? lock_is_held_type+0xb0/0xe0 [ 427.027368][T17713] ? do_syscall_64+0x1c/0xe0 [ 427.032414][T17713] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 427.038472][T17713] do_syscall_64+0x60/0xe0 [ 427.042893][T17713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.048783][T17713] RIP: 0033:0x45cba9 [ 427.052656][T17713] Code: Bad RIP value. [ 427.056707][T17713] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 427.065179][T17713] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 427.073157][T17713] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 427.081117][T17713] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 427.089066][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 427.097028][T17713] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 427.138915][ T2514] usb 1-1: USB disconnect, device number 45 02:33:54 executing program 0 (fault-call:4 fault-nth:22): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:54 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000040), 0x20000000, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) 02:33:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfc7) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:54 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfcf) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:55 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x41c1, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x3}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000040)={[{0x4, 0x14e7, 0x6, 0x40, 0x4c, 0x8, 0x6, 0xa9, 0x8, 0x1, 0x4, 0x6, 0x2}, {0xffff3d7b, 0x235, 0x82, 0x7, 0x3, 0x3, 0xb6, 0x0, 0x40, 0x1, 0x81, 0x0, 0x7}, {0xe4d, 0x800, 0xff, 0x4, 0x3, 0x0, 0x2, 0x1f, 0x0, 0x9, 0xff, 0x8, 0x447}]}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f00000000c0)={0x20, 0x2, 0x8, 0x4, 0x8}) sched_setparam(0x0, 0x0) 02:33:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 428.029107][ T2514] usb 1-1: new high-speed USB device number 46 using dummy_hcd 02:33:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfd7) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 428.309495][ T2514] usb 1-1: Using ep0 maxpacket: 8 [ 428.449447][ T2514] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.459212][ T2514] usb 1-1: config 0 has no interface number 0 [ 428.483730][ T2514] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 428.516606][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 428.536005][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 428.547226][ T2514] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 428.557519][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.579398][ T2514] usb 1-1: config 0 descriptor?? [ 428.600603][T17808] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 428.607950][T17808] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 428.855447][T17808] FAULT_INJECTION: forcing a failure. [ 428.855447][T17808] name failslab, interval 1, probability 0, space 0, times 0 [ 428.872939][T17808] CPU: 1 PID: 17808 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 428.881632][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.891690][T17808] Call Trace: [ 428.894996][T17808] dump_stack+0x18f/0x20d [ 428.899343][T17808] should_fail.cold+0x5/0x14 [ 428.903936][T17808] should_failslab+0x5/0xf [ 428.908357][T17808] kmem_cache_alloc_trace+0x240/0x2d0 [ 428.913836][T17808] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 428.919829][T17808] snd_seq_port_connect+0x5d/0x520 [ 428.924988][T17808] ? _raw_read_unlock+0x24/0x40 [ 428.929856][T17808] ? check_subscription_permission.isra.0+0x16a/0x260 [ 428.936629][T17808] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 428.942540][T17808] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 428.949216][T17808] ? mark_held_locks+0x9f/0xe0 [ 428.954178][T17808] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 428.959999][T17808] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 428.965978][T17808] snd_seq_kernel_client_ctl+0xeb/0x130 [ 428.971530][T17808] snd_seq_oss_midi_open+0x582/0x6e0 [ 428.976811][T17808] ? snd_seq_oss_midi_setup+0x50/0x50 [ 428.982175][T17808] ? mark_held_locks+0x9f/0xe0 [ 428.986930][T17808] ? lockdep_hardirqs_on+0x6a/0xe0 [ 428.992038][T17808] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 428.997907][T17808] ? get_mdev+0x75/0x90 [ 429.002058][T17808] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 429.007945][T17808] snd_seq_oss_open+0x87e/0xa10 [ 429.012805][T17808] odev_open+0x6c/0x90 [ 429.016867][T17808] ? odev_release+0x70/0x70 [ 429.021419][T17808] soundcore_open+0x445/0x600 [ 429.026154][T17808] ? sound_devnode+0xf0/0xf0 [ 429.030736][T17808] chrdev_open+0x266/0x770 [ 429.035143][T17808] ? cdev_device_add+0x210/0x210 [ 429.040073][T17808] ? security_file_open+0x1f5/0x3f0 [ 429.045264][T17808] do_dentry_open+0x501/0x1290 [ 429.050011][T17808] ? cdev_device_add+0x210/0x210 [ 429.054930][T17808] path_openat+0x1bb9/0x2750 [ 429.059534][T17808] ? path_lookupat+0x830/0x830 [ 429.064318][T17808] ? cache_grow_end+0x46/0x170 [ 429.069081][T17808] ? lock_is_held_type+0xb0/0xe0 [ 429.074075][T17808] do_filp_open+0x17e/0x3c0 [ 429.078565][T17808] ? may_open_dev+0xf0/0xf0 [ 429.083070][T17808] ? do_raw_spin_lock+0x120/0x2b0 [ 429.088145][T17808] ? rwlock_bug.part.0+0x90/0x90 [ 429.093132][T17808] ? _raw_spin_unlock+0x24/0x40 [ 429.097959][T17808] ? __alloc_fd+0x28d/0x600 [ 429.102456][T17808] do_sys_openat2+0x16f/0x3b0 [ 429.107176][T17808] ? build_open_flags+0x650/0x650 [ 429.112185][T17808] ? __mutex_unlock_slowpath+0xe2/0x610 [ 429.117713][T17808] ? wait_for_completion+0x260/0x260 [ 429.122991][T17808] __x64_sys_openat+0x13f/0x1f0 [ 429.127845][T17808] ? __ia32_sys_open+0x1c0/0x1c0 [ 429.132769][T17808] ? ksys_write+0x1a5/0x250 [ 429.137261][T17808] ? lock_is_held_type+0xb0/0xe0 [ 429.142187][T17808] ? do_syscall_64+0x1c/0xe0 [ 429.146803][T17808] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 429.152763][T17808] do_syscall_64+0x60/0xe0 [ 429.157158][T17808] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 429.163038][T17808] RIP: 0033:0x45cba9 [ 429.166937][T17808] Code: Bad RIP value. [ 429.171000][T17808] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.179564][T17808] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 429.187528][T17808] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 429.195481][T17808] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 429.203436][T17808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 429.211397][T17808] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 429.249416][ T2478] usb 1-1: USB disconnect, device number 46 02:33:56 executing program 0 (fault-call:4 fault-nth:23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:56 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:33:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:33:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfdf) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:56 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) prctl$PR_SET_SECUREBITS(0x1c, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) clock_getres(0x3, &(0x7f0000000080)) sched_setparam(0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x100, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2e6}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3c89416f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x24004040) 02:33:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:56 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:33:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfe7) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:57 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:33:57 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x4}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fba20501677d16c074247e98ccabb9060c8648cc6222cfa29dbf3f1a73ed66b1e84fa07feaa4dbe4173923db94e866346e058067fc94947de075cff9c0b2b38d1bc3a9b64be4b5e036c4747c21ee514e77094f631855fe6a141899be59acb91cbc8abf4f0e61a1e56f0bc74267e1d38271b7854ecc4441a0d531d6012806ee10fcf332045740d9ce8c15af6955d9e5a94896a8c1c950996e3c2b50d58f0abffd39"], 0xa2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:33:57 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001700)={r2, 0x49b279d5}, &(0x7f0000001740)=0x8) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) process_vm_readv(r0, &(0x7f0000001200)=[{&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001680)=[{&(0x7f0000001240)=""/10, 0xa}, {&(0x7f0000001280)=""/32, 0x20}, {&(0x7f0000001340)=""/27, 0x1b}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/110, 0x6e}, {&(0x7f0000001500)=""/6, 0x6}, {&(0x7f0000001540)=""/251, 0xfb}, {&(0x7f0000001640)=""/30, 0x1e}], 0x8, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setparam(0x0, 0x0) 02:33:57 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 430.198870][ T2514] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 430.438926][ T2514] usb 1-1: Using ep0 maxpacket: 8 [ 430.558939][ T2514] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 430.567201][ T2514] usb 1-1: config 0 has no interface number 0 [ 430.575211][ T2514] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 430.586599][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 430.597252][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 430.622438][ T2514] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 430.633912][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.645672][ T2514] usb 1-1: config 0 descriptor?? [ 430.670476][T17892] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 430.677845][T17892] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 430.918017][T17892] FAULT_INJECTION: forcing a failure. [ 430.918017][T17892] name failslab, interval 1, probability 0, space 0, times 0 [ 430.936578][T17892] CPU: 0 PID: 17892 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 430.945292][T17892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.955364][T17892] Call Trace: [ 430.958669][T17892] dump_stack+0x18f/0x20d [ 430.963022][T17892] should_fail.cold+0x5/0x14 [ 430.967627][T17892] should_failslab+0x5/0xf [ 430.972069][T17892] kmem_cache_alloc_trace+0x240/0x2d0 [ 430.977453][T17892] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 430.983447][T17892] snd_seq_port_connect+0x5d/0x520 [ 430.988570][T17892] ? _raw_read_unlock+0x24/0x40 [ 430.993471][T17892] ? check_subscription_permission.isra.0+0x16a/0x260 [ 431.000350][T17892] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 431.006787][T17892] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 431.013044][T17892] ? mark_held_locks+0x9f/0xe0 [ 431.017828][T17892] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 431.023648][T17892] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 431.029636][T17892] snd_seq_kernel_client_ctl+0xeb/0x130 [ 431.035238][T17892] snd_seq_oss_midi_open+0x582/0x6e0 [ 431.040598][T17892] ? snd_seq_oss_midi_setup+0x50/0x50 [ 431.045956][T17892] ? mark_held_locks+0x9f/0xe0 [ 431.050753][T17892] ? lockdep_hardirqs_on+0x6a/0xe0 [ 431.056026][T17892] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 431.061827][T17892] ? get_mdev+0x75/0x90 [ 431.065977][T17892] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 431.071868][T17892] snd_seq_oss_open+0x87e/0xa10 [ 431.076701][T17892] odev_open+0x6c/0x90 [ 431.080756][T17892] ? odev_release+0x70/0x70 [ 431.085363][T17892] soundcore_open+0x445/0x600 [ 431.090031][T17892] ? sound_devnode+0xf0/0xf0 [ 431.094779][T17892] chrdev_open+0x266/0x770 [ 431.099212][T17892] ? cdev_device_add+0x210/0x210 [ 431.104148][T17892] ? security_file_open+0x1f5/0x3f0 [ 431.109331][T17892] do_dentry_open+0x501/0x1290 [ 431.114075][T17892] ? cdev_device_add+0x210/0x210 [ 431.119055][T17892] path_openat+0x1bb9/0x2750 [ 431.123720][T17892] ? path_lookupat+0x830/0x830 [ 431.128465][T17892] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 431.134438][T17892] ? lock_is_held_type+0xb0/0xe0 [ 431.139581][T17892] do_filp_open+0x17e/0x3c0 [ 431.144076][T17892] ? may_open_dev+0xf0/0xf0 [ 431.148570][T17892] ? do_raw_spin_lock+0x120/0x2b0 [ 431.153599][T17892] ? rwlock_bug.part.0+0x90/0x90 [ 431.158530][T17892] ? _raw_spin_unlock+0x24/0x40 [ 431.163363][T17892] ? __alloc_fd+0x28d/0x600 [ 431.167849][T17892] do_sys_openat2+0x16f/0x3b0 [ 431.172516][T17892] ? build_open_flags+0x650/0x650 [ 431.177531][T17892] ? __mutex_unlock_slowpath+0xe2/0x610 [ 431.183059][T17892] ? wait_for_completion+0x260/0x260 [ 431.188327][T17892] __x64_sys_openat+0x13f/0x1f0 [ 431.193166][T17892] ? __ia32_sys_open+0x1c0/0x1c0 [ 431.198085][T17892] ? ksys_write+0x1a5/0x250 [ 431.202571][T17892] ? lock_is_held_type+0xb0/0xe0 [ 431.207488][T17892] ? do_syscall_64+0x1c/0xe0 [ 431.212067][T17892] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 431.218987][T17892] do_syscall_64+0x60/0xe0 [ 431.223387][T17892] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 431.229257][T17892] RIP: 0033:0x45cba9 [ 431.233129][T17892] Code: Bad RIP value. [ 431.237169][T17892] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.245561][T17892] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 431.253521][T17892] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 431.261472][T17892] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 431.269423][T17892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 431.277473][T17892] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 431.301668][ T2478] usb 1-1: USB disconnect, device number 47 02:33:58 executing program 0 (fault-call:4 fault-nth:24): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:33:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xfed) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:58 executing program 2: perf_event_open(&(0x7f00000012c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffffa) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:33:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1a, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:59 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000000020000030000000000000002000000000000000000000000000000f8ffffffffffffffff0700000000000004000000000000003a4c000000000000ffff00000000000001000000000000000095de555416f42f3b00e0ffffff0f000700000000000000"]) clone3(0x0, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000140)={[0x1, 0x1, 0x7, 0x8, 0x2, 0x9, 0x2, 0x40, 0x3, 0x6, 0x8, 0x18000, 0xb65, 0x7ff, 0x1, 0x7f, 0x5, 0x1ff, 0x1, 0x0, 0x973, 0x200, 0x3, 0x6, 0x0, 0x3, 0x8, 0xdcf0, 0x3, 0xfb, 0x80, 0x81, 0x0, 0x5, 0x100, 0xfffff327, 0x752, 0x3f, 0x659c, 0xfffffff7, 0x8001, 0x800, 0x2, 0x4, 0x20640000, 0x8, 0x200, 0x2, 0x3, 0x8c, 0x2, 0x1, 0x4, 0xfffffff7, 0x5, 0x6, 0x1, 0x10000, 0x9, 0x9, 0x2, 0x2, 0x4, 0x902, 0x1, 0x83, 0x401, 0xf85c, 0xfffffff9, 0x1ff, 0x6, 0x7, 0xfffffff8, 0x6, 0x97, 0x5f, 0x1ff, 0x8c6, 0x1ff, 0x2, 0x708, 0x80000001, 0x8, 0x3f3, 0x10000, 0x8, 0x7, 0x5, 0x8, 0x3ff, 0x4, 0x7, 0x429, 0x2, 0x3, 0x100, 0x7f, 0x1, 0x3ff, 0xefab, 0x7ff, 0x10000, 0x3, 0x1, 0x10000, 0x10000, 0x6884c154, 0x1, 0x14, 0x1, 0xd30e, 0x2, 0x20, 0x9, 0x5fcf, 0x8, 0x5, 0x85, 0x1f, 0x10000, 0x1f, 0x4, 0x764a86ee, 0x4, 0xfffffe01, 0x8, 0x3, 0x5, 0x7ff, 0x3, 0x7, 0x0, 0x87, 0x2, 0x7, 0x69, 0x4, 0x400, 0xfff, 0x81, 0x32, 0x0, 0xad8, 0x4, 0x6, 0x2, 0x1000, 0x9, 0x9, 0x80000000, 0xfff, 0x63c9, 0x0, 0x5, 0x5, 0xfffffffd, 0x4, 0x40, 0x40, 0xff, 0x5, 0x7ff, 0x0, 0xfffffe00, 0x2, 0x9, 0x7ff, 0x2, 0x3f, 0x7, 0x0, 0x6, 0x9, 0x1, 0x9, 0xdbdb, 0x401, 0x0, 0x7, 0x1, 0x9, 0xffffffff, 0x4, 0x1, 0x6, 0x0, 0x1000, 0x94, 0x61, 0x1000, 0x7ff8, 0xa751, 0x9, 0x8, 0x7, 0x8949, 0x7fffffff, 0x3, 0x66f6cd2c, 0x1000, 0x7, 0xfffff4e1, 0x9, 0x9, 0x200, 0x7, 0x9, 0x7, 0x1, 0x1ff, 0x1, 0x8, 0xc6d, 0x200, 0x1ff, 0x2dbf, 0x77, 0x4611b07a, 0x8d, 0xffff, 0x6, 0x6, 0x2, 0x3, 0x2, 0x693, 0x1, 0x0, 0x7fffffff, 0x101, 0x2, 0x7fff, 0x101, 0x8, 0x1, 0x4, 0x9, 0x8000, 0x2, 0xffffffff, 0x90, 0x4, 0x0, 0xffffffff, 0x8, 0x800, 0x4, 0x10000, 0x7f, 0x5, 0x6, 0x980e, 0x100, 0x8, 0x4, 0xff, 0x248, 0x10000, 0x8, 0x3f, 0x101, 0x0, 0x5, 0x6, 0x1, 0x79, 0x401, 0x8, 0x35, 0x1, 0x80000001, 0xc2b5, 0x7fffffff, 0x10001, 0x8, 0x23, 0x4, 0x5, 0x20, 0x8000, 0x1, 0x7, 0x2, 0x672, 0x0, 0x7ff, 0xffffffe0, 0x5a6f, 0x0, 0xfffffffc, 0x87e1, 0x1ce, 0x1, 0x8, 0x4e62, 0x9, 0x4, 0x1, 0x3, 0x2, 0x40, 0x1, 0x0, 0x0, 0x3, 0x1, 0xf4, 0x101, 0x4, 0x4, 0x80, 0x594dfb77, 0x0, 0x4, 0x10001, 0x58, 0x4, 0x4, 0x5, 0x8, 0x92ad, 0x6, 0x5, 0x8001, 0x5, 0x947c, 0x7f, 0xfffffffd, 0x6, 0xc90, 0x9, 0x4a3b7714, 0x5, 0x200, 0x1, 0x3, 0xffffffff, 0x10001, 0x5, 0x8, 0x2, 0x3, 0x81, 0x7, 0x2, 0x9, 0x7fff, 0xd602, 0xffffffc0, 0xc5, 0x5, 0x2, 0x2, 0x8, 0x7, 0x0, 0x1000, 0x3, 0x3, 0x81, 0xeb, 0x100, 0x2, 0x6, 0x80000000, 0x7fffffff, 0x7, 0x6, 0x4, 0x8000, 0x80000000, 0x3, 0x9, 0xd045d55, 0x8, 0x7, 0xffff, 0x7fffffff, 0x7fff, 0x5, 0x7, 0x3, 0xfffffffa, 0xc5ec, 0x1, 0x5, 0x4, 0x7fffffff, 0x0, 0x8000, 0x100, 0xfffff800, 0x101, 0x3, 0xd60, 0x4, 0x5, 0x7, 0x20, 0x100, 0x3, 0x1ff, 0x4, 0x7f, 0x80000001, 0x3ff, 0xffffffe0, 0x81, 0x7fffffff, 0x5, 0x8, 0x81, 0x7419, 0x3, 0x4, 0x85, 0x2c23, 0xffff8001, 0xba5, 0x20, 0x9, 0xb2, 0x3dd4, 0x0, 0x3, 0x6fd8, 0x0, 0x3, 0x8001, 0xa88d, 0xc0, 0x5, 0x6, 0x1, 0x80000000, 0xffff, 0xfffffff7, 0x8, 0x800, 0x8, 0x1000, 0x7fff, 0xfffffffc, 0x4, 0x8, 0x3, 0x1, 0x78, 0x1f, 0x6, 0x8001, 0x7, 0x9, 0xfffffffb, 0x71e5b310, 0x1f, 0x2, 0x5a7a, 0xfffffffe, 0x8001, 0x9, 0x6, 0x1000, 0x9, 0x9, 0x1, 0x4, 0x400, 0x8, 0x2, 0x10000, 0x4, 0xbd8845d, 0x1, 0x1, 0x9, 0x800, 0x8, 0x8ff, 0xea9, 0x3, 0x6, 0xd41, 0x5, 0x0, 0x20, 0x6, 0xfbc9, 0x6, 0xfffffffc, 0x8, 0x6, 0x2, 0x4, 0x1, 0x45, 0x2, 0x3ff, 0x7, 0xf519, 0xffff, 0x1000, 0x6, 0x80, 0xa2, 0x2d8, 0xf0c, 0x8, 0x0, 0x4, 0x5, 0x8, 0x7, 0x2, 0x401, 0x0, 0x200, 0xfffffffa, 0x0, 0x81, 0x3, 0xfff, 0x8, 0xfffffffa, 0x3, 0x6, 0xaf, 0x2, 0x6, 0x4, 0xc53c, 0x7, 0xd9, 0xcfc, 0x2, 0x2ed, 0x0, 0x100, 0xffffffff, 0x5, 0x7, 0x40, 0xffff, 0x4276e4a8, 0xffff, 0x94c9, 0x7, 0x7, 0x8, 0x81, 0x6, 0x0, 0x3, 0x6, 0xa2a0, 0x4, 0x9, 0x0, 0x10000, 0x7f, 0x125, 0x693, 0x800, 0xb6, 0x200, 0x5, 0x80000000, 0x3ff, 0xffff, 0x4adbb693, 0x0, 0x3ff, 0x10001, 0x3ff, 0x8, 0xffffffff, 0x0, 0xff, 0x6, 0x7, 0xa16, 0xffff, 0x17, 0x0, 0x3, 0xfffffffd, 0x9, 0xffffffff, 0xdcd, 0x3, 0xfffffff7, 0x3, 0x3f, 0x5, 0x3ff, 0x9, 0xf0, 0x91, 0x7fff, 0x8001, 0xff, 0x1, 0x3973, 0x4, 0x4, 0x2, 0x2, 0x800, 0x7, 0x80000000, 0xfff, 0x3, 0x80, 0x4, 0xba9, 0x4, 0xffff, 0xffffffff, 0x8, 0x9, 0x6, 0xffff3182, 0x3, 0x200, 0x8000, 0xfff, 0xc1fa, 0x7, 0x1, 0x7ba8, 0x1f, 0x8, 0x0, 0x800, 0x9, 0x101, 0x8, 0x400, 0x28000, 0x6, 0x96, 0x2, 0x0, 0x5, 0x80000001, 0x8, 0xffffffff, 0x9, 0x7fffffff, 0xdc52, 0x1, 0x400, 0x3, 0xca2, 0xfffffff7, 0x80, 0x1574, 0x200, 0x10001, 0x400, 0x25, 0x0, 0x5d592858, 0x4, 0x0, 0xa6cf, 0x9d5, 0x1fe, 0x1, 0x0, 0x1, 0x101, 0x401, 0x3, 0x32, 0x2bc, 0x800, 0x7, 0x3, 0x93cde5fa, 0x2, 0x20, 0x9, 0x80, 0xff, 0x8, 0x1, 0x8, 0x9, 0x6e, 0x3, 0x6, 0x40, 0x95e5, 0x4, 0x0, 0x100, 0x9, 0xff, 0x0, 0x7fff, 0x7c, 0x5, 0x5, 0xb33, 0x8, 0x1523, 0x3, 0x8001, 0x9, 0x9, 0x1, 0x5, 0xfff, 0x1d20f908, 0x1, 0x1, 0x8, 0x292802a, 0x8, 0x5c7, 0x8e90, 0x8, 0x3, 0x80000001, 0x251ea546, 0x0, 0xffffffff, 0x3f, 0x401, 0x80000000, 0x0, 0x5, 0x1, 0x2a, 0x3ff, 0x2, 0x6, 0x6, 0xce2, 0x72, 0xff, 0x1, 0x6b, 0x0, 0x2, 0x8, 0x6, 0x5, 0x4, 0x3, 0x4, 0x174a, 0x101, 0x4, 0x0, 0x6, 0x1, 0x2c0ddb52, 0x4, 0x1, 0x6, 0x7f, 0xfffffffa, 0x81, 0xfffffff9, 0x1, 0x4, 0x3, 0x2, 0x2, 0x7fff, 0x7ff, 0x2, 0xb32, 0x7, 0x9, 0x7, 0x1, 0x401, 0x4, 0xffffffff, 0x1, 0x6, 0x7fffffff, 0x8, 0x2f1, 0x3, 0x8001, 0x38f2, 0x6227, 0x1, 0x0, 0xd08, 0x0, 0x5, 0xe19e, 0xb7c, 0x9, 0x6, 0xc90, 0x2, 0x5b, 0x3, 0x101, 0x4, 0x4, 0x8, 0x101, 0x200, 0x8000, 0x4, 0x60, 0x80, 0x6, 0x0, 0x1a0, 0x4, 0x0, 0x6b, 0x6, 0x5, 0x58c4, 0x39f, 0x2bbc, 0x3a, 0x5c, 0x4, 0xffffffff, 0x4, 0x86, 0x537, 0xf254, 0x7, 0x6, 0x101, 0x0, 0x80, 0xfffff4bd, 0x4e, 0x7, 0x10000, 0xfa89, 0x0, 0x10001, 0x0, 0xffffffff, 0x0, 0x1, 0xae43, 0xffff, 0x2, 0x6, 0x101, 0x18, 0x7, 0x2, 0x2, 0x1, 0xffffffff, 0x40, 0x9, 0x0, 0x1, 0x4, 0xe8, 0x4, 0xe5, 0x3, 0x4, 0x4, 0x3, 0x9, 0x4, 0x1, 0x9, 0x8000, 0x3, 0xffffff7f, 0x2, 0x1000, 0x8, 0x4, 0x9, 0x0, 0x400, 0x7, 0x7, 0x1, 0x7, 0x6, 0x74f4a81a, 0xffff, 0xba, 0x7, 0x9, 0x6554d97d, 0x400, 0x6, 0x7b6, 0x4, 0x3, 0x8486, 0x1200000, 0x7, 0x7, 0x9, 0x4, 0x6000, 0x2, 0x589, 0xffffffff, 0xff, 0x4, 0x101, 0x101, 0x9, 0x1000, 0xb943, 0x401, 0x7fff, 0x8, 0x5, 0x2, 0x1, 0x3e, 0x8, 0x80000000, 0x3b, 0x3, 0x9e7, 0x3f, 0x3, 0x6, 0x1f, 0x4, 0x2b, 0x100, 0x4, 0x3, 0x876, 0x81, 0x1, 0x1, 0xffffffff, 0x0, 0x9, 0xe93, 0x5a, 0x6, 0x6, 0x7fff, 0x6, 0x100, 0x9, 0x6, 0xeea, 0x1f, 0x1989f44e, 0x9, 0x1ff, 0x6, 0x7, 0x0, 0x2fe, 0xccd, 0x11832fa5, 0x7, 0x40, 0x5, 0x80000000, 0x5, 0x4, 0x5, 0x8000, 0x0, 0x9d4, 0x8, 0x7, 0x81, 0x0, 0x5a, 0x200, 0xff, 0x8, 0x10001, 0xcda, 0x4, 0x8cbc, 0x7, 0xd25d, 0x3d, 0x3d, 0x45, 0x0, 0x4480, 0x800, 0xd62, 0x8c4, 0xffffff7f, 0x3, 0xffff, 0x8, 0x7, 0x50, 0x1, 0x6, 0x4, 0x38e60074, 0xffff8000, 0x1, 0xf9, 0x1ff, 0x3f, 0x100000, 0x2, 0x9, 0x1aa2, 0x2, 0x9337, 0xed00, 0x100, 0x80000001, 0x4651]}) sched_setparam(0x0, 0x0) 02:33:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:33:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xff7) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:33:59 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x2, &(0x7f00000000c0)={0x19, 0x1, 0x80}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0xfffc, 0xe204, 0x2, 0x4010, 0x1b, "38d6772aaa027d2b"}) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:33:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 432.228835][ T2478] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 432.508736][ T2478] usb 1-1: Using ep0 maxpacket: 8 [ 432.632953][ T2478] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 432.643174][ T2478] usb 1-1: config 0 has no interface number 0 [ 432.653479][ T2478] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 432.693547][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 432.715948][ T2478] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 432.733169][ T2478] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 432.743012][ T2478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.756295][ T2478] usb 1-1: config 0 descriptor?? [ 432.780402][T17976] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 432.787755][T17976] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 433.019238][T17976] FAULT_INJECTION: forcing a failure. [ 433.019238][T17976] name failslab, interval 1, probability 0, space 0, times 0 [ 433.044172][T17976] CPU: 1 PID: 17976 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 433.052883][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.062950][T17976] Call Trace: [ 433.066260][T17976] dump_stack+0x18f/0x20d [ 433.070607][T17976] should_fail.cold+0x5/0x14 [ 433.075213][T17976] should_failslab+0x5/0xf [ 433.079642][T17976] kmem_cache_alloc_trace+0x240/0x2d0 [ 433.085026][T17976] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 433.091026][T17976] snd_seq_port_connect+0x5d/0x520 [ 433.096157][T17976] ? _raw_read_unlock+0x24/0x40 [ 433.101028][T17976] ? check_subscription_permission.isra.0+0x16a/0x260 [ 433.108220][T17976] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 433.114211][T17976] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 433.120441][T17976] ? mark_held_locks+0x9f/0xe0 [ 433.125198][T17976] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 433.130997][T17976] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 433.136975][T17976] snd_seq_kernel_client_ctl+0xeb/0x130 [ 433.142514][T17976] snd_seq_oss_midi_open+0x582/0x6e0 [ 433.147786][T17976] ? snd_seq_oss_midi_setup+0x50/0x50 [ 433.153139][T17976] ? mark_held_locks+0x9f/0xe0 [ 433.157887][T17976] ? lockdep_hardirqs_on+0x6a/0xe0 [ 433.162978][T17976] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 433.168762][T17976] ? get_mdev+0x75/0x90 [ 433.172900][T17976] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 433.178779][T17976] snd_seq_oss_open+0x87e/0xa10 [ 433.183612][T17976] odev_open+0x6c/0x90 [ 433.187664][T17976] ? odev_release+0x70/0x70 [ 433.192217][T17976] soundcore_open+0x445/0x600 [ 433.196885][T17976] ? sound_devnode+0xf0/0xf0 [ 433.201462][T17976] chrdev_open+0x266/0x770 [ 433.205858][T17976] ? cdev_device_add+0x210/0x210 [ 433.210779][T17976] ? security_file_open+0x1f5/0x3f0 [ 433.215963][T17976] do_dentry_open+0x501/0x1290 [ 433.220707][T17976] ? cdev_device_add+0x210/0x210 [ 433.225630][T17976] path_openat+0x1bb9/0x2750 [ 433.230206][T17976] ? path_lookupat+0x830/0x830 [ 433.234950][T17976] ? cache_grow_end+0x46/0x170 [ 433.239701][T17976] ? lock_is_held_type+0xb0/0xe0 [ 433.244619][T17976] do_filp_open+0x17e/0x3c0 [ 433.249104][T17976] ? may_open_dev+0xf0/0xf0 [ 433.253588][T17976] ? do_raw_spin_lock+0x120/0x2b0 [ 433.258596][T17976] ? rwlock_bug.part.0+0x90/0x90 [ 433.263530][T17976] ? _raw_spin_unlock+0x24/0x40 [ 433.268376][T17976] ? __alloc_fd+0x28d/0x600 [ 433.272861][T17976] do_sys_openat2+0x16f/0x3b0 [ 433.277519][T17976] ? build_open_flags+0x650/0x650 [ 433.282609][T17976] ? __mutex_unlock_slowpath+0xe2/0x610 [ 433.288135][T17976] ? wait_for_completion+0x260/0x260 [ 433.293418][T17976] __x64_sys_openat+0x13f/0x1f0 [ 433.298247][T17976] ? __ia32_sys_open+0x1c0/0x1c0 [ 433.303168][T17976] ? ksys_write+0x1a5/0x250 [ 433.307652][T17976] ? lock_is_held_type+0xb0/0xe0 [ 433.312594][T17976] ? do_syscall_64+0x1c/0xe0 [ 433.317176][T17976] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 433.323137][T17976] do_syscall_64+0x60/0xe0 [ 433.327532][T17976] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 433.333401][T17976] RIP: 0033:0x45cba9 [ 433.337267][T17976] Code: Bad RIP value. [ 433.341317][T17976] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 433.349703][T17976] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 433.357671][T17976] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 433.365637][T17976] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 433.373605][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 433.381570][T17976] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 433.409123][ T2478] usb 1-1: USB disconnect, device number 48 02:34:01 executing program 0 (fault-call:4 fault-nth:25): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0xffffff1f) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:01 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="00a1244a1507bcc1a73cc09ba0af75c48a92109c3b96a6137ab98483b1f813c2c29eb6b5ed05b218f38221dd065fcfdcc3b775839742fd745fbfa779fd620621a2b4724d9994d08e8e2d64df3a23be9d3d110b1411f57db3cd26e98cd6f86c67e405ab481f383f3e4a83cc19fc12e8b722b63660bf807b7cf7a36d5000d5894bad05219cb86fba09c2c493557336b9961ebce12d7813785c", 0x98}], 0x1) sched_setparam(0x0, 0x0) 02:34:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:34:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x50, 0x453, 0x4, 0x70bd27, 0x25dfdbff, "4a06bb7dd668f12d13b568a46a948ded4f38afb432d212a2a5a60c84e1066bb4661ff7d6265a55af6c125f6377778cdbc4e8e7c90d46a494233370701c7725", ["", "", "", "", "", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r6, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r8) dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) socket$can_bcm(0x1d, 0x2, 0x2) 02:34:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 434.408633][ T2514] usb 1-1: new high-speed USB device number 49 using dummy_hcd 02:34:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = dup3(0xffffffffffffffff, r5, 0x80000) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000040a030000000000000000000300000708000a40000000030c00024000000000000000040900010073797a3000000000090000de73797a3100000000b653bd98224c4f3014ab3f684076a82f8255175c60fef90173ebb47b075e83970aeaa2b06a467feaca431b7e3f4e5157bc82"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x400c010) dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 434.658641][ T2514] usb 1-1: Using ep0 maxpacket: 8 [ 434.793476][ T2514] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 434.815611][ T2514] usb 1-1: config 0 has no interface number 0 [ 434.841614][ T2514] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 434.881033][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 434.915913][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 434.967657][ T2514] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 434.998673][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.026881][ T2514] usb 1-1: config 0 descriptor?? [ 435.065883][T18063] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 435.073588][T18063] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 435.301010][T18063] FAULT_INJECTION: forcing a failure. [ 435.301010][T18063] name failslab, interval 1, probability 0, space 0, times 0 [ 435.315090][T18063] CPU: 0 PID: 18063 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 435.323783][T18063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.333844][T18063] Call Trace: [ 435.337147][T18063] dump_stack+0x18f/0x20d [ 435.341495][T18063] should_fail.cold+0x5/0x14 [ 435.346145][T18063] should_failslab+0x5/0xf [ 435.350580][T18063] kmem_cache_alloc_trace+0x240/0x2d0 [ 435.355971][T18063] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 435.361966][T18063] snd_seq_port_connect+0x5d/0x520 [ 435.367092][T18063] ? _raw_read_unlock+0x24/0x40 [ 435.371962][T18063] ? check_subscription_permission.isra.0+0x16a/0x260 [ 435.378741][T18063] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 435.384659][T18063] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 435.391025][T18063] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 435.397061][T18063] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 435.403039][T18063] snd_seq_kernel_client_ctl+0xeb/0x130 [ 435.408576][T18063] snd_seq_oss_midi_open+0x466/0x6e0 [ 435.413907][T18063] ? snd_seq_oss_midi_setup+0x50/0x50 [ 435.419263][T18063] ? mark_held_locks+0x9f/0xe0 [ 435.424015][T18063] ? lockdep_hardirqs_on+0x6a/0xe0 [ 435.429221][T18063] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 435.435016][T18063] ? get_mdev+0x75/0x90 [ 435.439216][T18063] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 435.445097][T18063] snd_seq_oss_open+0x87e/0xa10 [ 435.449932][T18063] odev_open+0x6c/0x90 [ 435.453985][T18063] ? odev_release+0x70/0x70 [ 435.458691][T18063] soundcore_open+0x445/0x600 [ 435.463357][T18063] ? sound_devnode+0xf0/0xf0 [ 435.467928][T18063] chrdev_open+0x266/0x770 [ 435.472329][T18063] ? cdev_device_add+0x210/0x210 [ 435.477255][T18063] ? security_file_open+0x1f5/0x3f0 [ 435.482496][T18063] do_dentry_open+0x501/0x1290 [ 435.487244][T18063] ? cdev_device_add+0x210/0x210 [ 435.492171][T18063] path_openat+0x1bb9/0x2750 [ 435.496853][T18063] ? path_lookupat+0x830/0x830 [ 435.501597][T18063] ? cache_grow_end+0x46/0x170 [ 435.506351][T18063] ? lock_is_held_type+0xb0/0xe0 [ 435.511341][T18063] do_filp_open+0x17e/0x3c0 [ 435.515839][T18063] ? may_open_dev+0xf0/0xf0 [ 435.520332][T18063] ? do_raw_spin_lock+0x120/0x2b0 [ 435.525385][T18063] ? rwlock_bug.part.0+0x90/0x90 [ 435.530310][T18063] ? _raw_spin_unlock+0x24/0x40 [ 435.535140][T18063] ? __alloc_fd+0x28d/0x600 [ 435.539628][T18063] do_sys_openat2+0x16f/0x3b0 [ 435.544287][T18063] ? build_open_flags+0x650/0x650 [ 435.549514][T18063] ? __mutex_unlock_slowpath+0xe2/0x610 [ 435.555111][T18063] ? wait_for_completion+0x260/0x260 [ 435.560554][T18063] __x64_sys_openat+0x13f/0x1f0 [ 435.565391][T18063] ? __ia32_sys_open+0x1c0/0x1c0 [ 435.570306][T18063] ? ksys_write+0x1a5/0x250 [ 435.574801][T18063] ? lock_is_held_type+0xb0/0xe0 [ 435.579721][T18063] ? do_syscall_64+0x1c/0xe0 [ 435.584292][T18063] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 435.590269][T18063] do_syscall_64+0x60/0xe0 [ 435.594668][T18063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 435.600541][T18063] RIP: 0033:0x45cba9 [ 435.604446][T18063] Code: Bad RIP value. [ 435.608492][T18063] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 435.617233][T18063] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 435.625185][T18063] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 435.633141][T18063] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 435.641099][T18063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 435.649049][T18063] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 435.668045][ T8614] usb 1-1: USB disconnect, device number 49 02:34:03 executing program 0 (fault-call:4 fault-nth:26): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:03 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0xffffffffffffff0e, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x0) getpid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x20, r0, 0x6, 0x0) sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x1, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sched_setparam(0x0, 0x0) 02:34:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400431df0", @ANYRES32=r5], 0x2}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vlan0\x00', r5}) epoll_create(0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r7 = dup3(r6, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x2}, 0xfd}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="7935eb8251bd595f2932897159ead26b4edcb1d911d5b045e833f862d2d3625ff4705f176a7efaf8ade4b351871d05e05a8b2fd9d63fab5820b66d5b1431ec83d864847d53e21b0c0c1e63af327d2ec8479a13da1395ba9901a7fffcf15a5e6af30ded91ff6b372f35c9593b1f66ecbc5d00c0aadeb3b61d05bd57da7c62e9cff830d0488fe61271b8c9f22c3b1875155743d0f45afabdd5fe87479cd61179dcf673a09120df3f6d604102c43ea7a16003041e924a4460ee", 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) tkill(r2, 0x1004000000016) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x567d, 0x0, 0x1ff, 0x7ff, 0x4, 0x9}}, 0x50) 02:34:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:34:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:03 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x80000000, &(0x7f0000000080)="5635fd9619ec387272864bfdf2c95510b74d1cc99cdbcf79b30021434c") perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x0, 0xffffffffffffffbc, 0x0, 0x6, 0x0, 0x1, 0x8}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:03 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000100)=""/171) r8 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 436.578754][ T2514] usb 1-1: new high-speed USB device number 50 using dummy_hcd 02:34:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 436.818601][ T2514] usb 1-1: Using ep0 maxpacket: 8 [ 436.938843][ T2514] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 436.959674][ T2514] usb 1-1: config 0 has no interface number 0 [ 436.995158][ T2514] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 437.066779][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 437.092019][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 437.121249][ T2514] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 437.156378][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.185381][ T2514] usb 1-1: config 0 descriptor?? [ 437.230085][T18140] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 437.237468][T18140] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 437.487648][T18140] FAULT_INJECTION: forcing a failure. [ 437.487648][T18140] name failslab, interval 1, probability 0, space 0, times 0 [ 437.507065][T18140] CPU: 1 PID: 18140 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 437.515766][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.525826][T18140] Call Trace: [ 437.529133][T18140] dump_stack+0x18f/0x20d [ 437.533473][T18140] should_fail.cold+0x5/0x14 [ 437.538071][T18140] should_failslab+0x5/0xf [ 437.542518][T18140] kmem_cache_alloc_trace+0x240/0x2d0 [ 437.547897][T18140] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 437.553890][T18140] snd_seq_port_connect+0x5d/0x520 [ 437.559009][T18140] ? _raw_read_unlock+0x24/0x40 [ 437.563871][T18140] ? check_subscription_permission.isra.0+0x16a/0x260 [ 437.570993][T18140] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 437.576989][T18140] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 437.583679][T18140] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 437.589491][T18140] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 437.595458][T18140] snd_seq_kernel_client_ctl+0xeb/0x130 [ 437.600984][T18140] snd_seq_oss_midi_open+0x466/0x6e0 [ 437.606270][T18140] ? snd_seq_oss_midi_setup+0x50/0x50 [ 437.611667][T18140] ? mark_held_locks+0x9f/0xe0 [ 437.616501][T18140] ? lockdep_hardirqs_on+0x6a/0xe0 [ 437.621589][T18140] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 437.627371][T18140] ? get_mdev+0x75/0x90 [ 437.631506][T18140] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 437.637379][T18140] snd_seq_oss_open+0x87e/0xa10 [ 437.642263][T18140] odev_open+0x6c/0x90 [ 437.646305][T18140] ? odev_release+0x70/0x70 [ 437.650844][T18140] soundcore_open+0x445/0x600 [ 437.655499][T18140] ? sound_devnode+0xf0/0xf0 [ 437.660065][T18140] chrdev_open+0x266/0x770 [ 437.664510][T18140] ? cdev_device_add+0x210/0x210 [ 437.669586][T18140] ? security_file_open+0x1f5/0x3f0 [ 437.674760][T18140] do_dentry_open+0x501/0x1290 [ 437.679502][T18140] ? cdev_device_add+0x210/0x210 [ 437.684505][T18140] path_openat+0x1bb9/0x2750 [ 437.689130][T18140] ? path_lookupat+0x830/0x830 [ 437.693876][T18140] ? cache_grow_end+0x46/0x170 [ 437.698624][T18140] ? lock_is_held_type+0xb0/0xe0 [ 437.703538][T18140] do_filp_open+0x17e/0x3c0 [ 437.708017][T18140] ? may_open_dev+0xf0/0xf0 [ 437.712516][T18140] ? do_raw_spin_lock+0x120/0x2b0 [ 437.717540][T18140] ? rwlock_bug.part.0+0x90/0x90 [ 437.722476][T18140] ? _raw_spin_unlock+0x24/0x40 [ 437.727312][T18140] ? __alloc_fd+0x28d/0x600 [ 437.731800][T18140] do_sys_openat2+0x16f/0x3b0 [ 437.736463][T18140] ? build_open_flags+0x650/0x650 [ 437.741465][T18140] ? __mutex_unlock_slowpath+0xe2/0x610 [ 437.746989][T18140] ? wait_for_completion+0x260/0x260 [ 437.752297][T18140] __x64_sys_openat+0x13f/0x1f0 [ 437.757124][T18140] ? __ia32_sys_open+0x1c0/0x1c0 [ 437.762039][T18140] ? ksys_write+0x1a5/0x250 [ 437.766539][T18140] ? lock_is_held_type+0xb0/0xe0 [ 437.771520][T18140] ? do_syscall_64+0x1c/0xe0 [ 437.776096][T18140] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 437.782070][T18140] do_syscall_64+0x60/0xe0 [ 437.786581][T18140] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.792457][T18140] RIP: 0033:0x45cba9 [ 437.796324][T18140] Code: Bad RIP value. [ 437.800366][T18140] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 437.809271][T18140] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 437.817217][T18140] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 437.825163][T18140] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 437.833116][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 437.841062][T18140] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 437.874518][ T8614] usb 1-1: USB disconnect, device number 50 02:34:05 executing program 0 (fault-call:4 fault-nth:27): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1a7a, 0x20a000) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000065391e9c9f971ae1eadd5eec38085bc285a1ad254c01e97e835a5d3f016f392ddcd2d92cbe780114d271920187d4a9014164a2a8ac42ac1b95982c2ef35d6b1"], 0xf8}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xac}}, 0x840) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r6, &(0x7f0000000780)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000380)={0x2, 0xe, 0x0, r8}) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r9, r6, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:05 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) sync() r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x80400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0xa072, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000043000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0xffffffdc) sched_setparam(0x0, 0x0) 02:34:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:34:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r7, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r8, r7, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x80000001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r4, 0x1004000000016) 02:34:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:05 executing program 2: perf_event_open(&(0x7f00000012c0)={0x3, 0x70, 0x4, 0x0, 0x0, 0x8, 0x0, 0x40000000000041c1, 0x61412, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40002}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000000c0)={0x8000000, 0x4, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$revoke(0x3, 0x0) keyctl$negate(0xd, 0x0, 0x6, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:05 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4184, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$char_usb(r1, &(0x7f0000000040)=""/179, 0xb3) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x5, 0x100010) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='ceph\x00', 0x0) sched_setparam(0x0, 0x0) 02:34:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 438.824230][ T2514] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 439.068376][ T2514] usb 1-1: Using ep0 maxpacket: 8 [ 439.188652][ T2514] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.196683][ T2514] usb 1-1: config 0 has no interface number 0 [ 439.236367][ T2514] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 439.258412][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 439.278486][ T2514] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 439.308370][ T2514] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 439.317439][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.339056][ T2514] usb 1-1: config 0 descriptor?? [ 439.359999][T18219] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 439.367372][T18219] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 439.609589][T18219] FAULT_INJECTION: forcing a failure. [ 439.609589][T18219] name failslab, interval 1, probability 0, space 0, times 0 [ 439.623126][T18219] CPU: 1 PID: 18219 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 439.631811][T18219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.642476][T18219] Call Trace: [ 439.645776][T18219] dump_stack+0x18f/0x20d [ 439.650119][T18219] should_fail.cold+0x5/0x14 [ 439.654723][T18219] should_failslab+0x5/0xf [ 439.659176][T18219] kmem_cache_alloc_trace+0x240/0x2d0 [ 439.664555][T18219] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 439.670543][T18219] snd_seq_port_connect+0x5d/0x520 [ 439.675662][T18219] ? _raw_read_unlock+0x24/0x40 [ 439.680528][T18219] ? check_subscription_permission.isra.0+0x16a/0x260 [ 439.687302][T18219] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 439.693218][T18219] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 439.699473][T18219] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 439.705296][T18219] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 439.711294][T18219] snd_seq_kernel_client_ctl+0xeb/0x130 [ 439.716854][T18219] snd_seq_oss_midi_open+0x466/0x6e0 [ 439.722157][T18219] ? snd_seq_oss_midi_setup+0x50/0x50 [ 439.727542][T18219] ? mark_held_locks+0x9f/0xe0 [ 439.732325][T18219] ? lockdep_hardirqs_on+0x6a/0xe0 [ 439.737436][T18219] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 439.743411][T18219] ? get_mdev+0x75/0x90 [ 439.747551][T18219] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 439.753450][T18219] snd_seq_oss_open+0x87e/0xa10 [ 439.758308][T18219] odev_open+0x6c/0x90 [ 439.762362][T18219] ? odev_release+0x70/0x70 [ 439.766845][T18219] soundcore_open+0x445/0x600 [ 439.771514][T18219] ? sound_devnode+0xf0/0xf0 [ 439.776094][T18219] chrdev_open+0x266/0x770 [ 439.780512][T18219] ? cdev_device_add+0x210/0x210 [ 439.785427][T18219] ? security_file_open+0x1f5/0x3f0 [ 439.790618][T18219] do_dentry_open+0x501/0x1290 [ 439.795470][T18219] ? cdev_device_add+0x210/0x210 [ 439.800387][T18219] path_openat+0x1bb9/0x2750 [ 439.804961][T18219] ? path_lookupat+0x830/0x830 [ 439.809721][T18219] ? cache_grow_end+0x46/0x170 [ 439.814581][T18219] ? lock_is_held_type+0xb0/0xe0 [ 439.819501][T18219] do_filp_open+0x17e/0x3c0 [ 439.824002][T18219] ? may_open_dev+0xf0/0xf0 [ 439.828587][T18219] ? do_raw_spin_lock+0x120/0x2b0 [ 439.833599][T18219] ? rwlock_bug.part.0+0x90/0x90 [ 439.838531][T18219] ? _raw_spin_unlock+0x24/0x40 [ 439.843372][T18219] ? __alloc_fd+0x28d/0x600 [ 439.847855][T18219] do_sys_openat2+0x16f/0x3b0 [ 439.852523][T18219] ? build_open_flags+0x650/0x650 [ 439.857534][T18219] ? __mutex_unlock_slowpath+0xe2/0x610 [ 439.863061][T18219] ? wait_for_completion+0x260/0x260 [ 439.868339][T18219] __x64_sys_openat+0x13f/0x1f0 [ 439.873183][T18219] ? __ia32_sys_open+0x1c0/0x1c0 [ 439.878197][T18219] ? ksys_write+0x1a5/0x250 [ 439.882697][T18219] ? lock_is_held_type+0xb0/0xe0 [ 439.887618][T18219] ? do_syscall_64+0x1c/0xe0 [ 439.894019][T18219] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 439.899997][T18219] do_syscall_64+0x60/0xe0 [ 439.904418][T18219] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 439.910319][T18219] RIP: 0033:0x45cba9 [ 439.914197][T18219] Code: Bad RIP value. [ 439.918251][T18219] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 439.926714][T18219] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 439.934670][T18219] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 439.942622][T18219] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 439.950670][T18219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 439.958630][T18219] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 440.020977][ T2514] usb 1-1: USB disconnect, device number 51 02:34:07 executing program 0 (fault-call:4 fault-nth:28): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$packet(r4, 0x0, &(0x7f0000000080), 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r9, 0x0, r9) dup3(0xffffffffffffffff, r5, 0x80000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:07 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4c214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x0, 0x0, 0xe, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x10, 0x4) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_setparam(r5, 0x0) 02:34:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:34:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:07 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='tunl0\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/82, 0x52) sched_setparam(0x0, 0x0) 02:34:07 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x41bf, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd709, 0x0, @perf_config_ext={0x9, 0x2}, 0x200, 0x0, 0xffff, 0xe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 440.951245][ T8614] usb 1-1: new high-speed USB device number 52 using dummy_hcd 02:34:08 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xe800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c5}, 0x18) sched_setparam(0x0, 0x0) 02:34:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 441.198206][ T8614] usb 1-1: Using ep0 maxpacket: 8 [ 441.328457][ T8614] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 441.336485][ T8614] usb 1-1: config 0 has no interface number 0 [ 441.355600][ T8614] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 441.367059][ T8614] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 441.408917][ T8614] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 441.447635][ T8614] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 441.468378][ T8614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.477924][ T8614] usb 1-1: config 0 descriptor?? [ 441.509808][T18305] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 441.517208][T18305] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 441.756508][T18305] FAULT_INJECTION: forcing a failure. [ 441.756508][T18305] name failslab, interval 1, probability 0, space 0, times 0 [ 441.775022][T18305] CPU: 0 PID: 18305 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 441.783848][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.793914][T18305] Call Trace: [ 441.797227][T18305] dump_stack+0x18f/0x20d [ 441.801579][T18305] should_fail.cold+0x5/0x14 [ 441.806186][T18305] should_failslab+0x5/0xf [ 441.810614][T18305] kmem_cache_alloc_trace+0x240/0x2d0 [ 441.815996][T18305] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 441.821999][T18305] snd_seq_port_connect+0x5d/0x520 [ 441.827123][T18305] ? _raw_read_unlock+0x24/0x40 [ 441.831989][T18305] ? check_subscription_permission.isra.0+0x16a/0x260 [ 441.838760][T18305] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 441.844667][T18305] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 441.850917][T18305] ? mark_held_locks+0x9f/0xe0 [ 441.855694][T18305] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 441.861508][T18305] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 441.867510][T18305] snd_seq_kernel_client_ctl+0xeb/0x130 [ 441.873079][T18305] snd_seq_oss_midi_open+0x582/0x6e0 [ 441.878552][T18305] ? snd_seq_oss_midi_setup+0x50/0x50 [ 441.883917][T18305] ? mark_held_locks+0x9f/0xe0 [ 441.888673][T18305] ? lockdep_hardirqs_on+0x6a/0xe0 [ 441.893774][T18305] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 441.900176][T18305] ? get_mdev+0x75/0x90 [ 441.904501][T18305] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 441.910394][T18305] snd_seq_oss_open+0x87e/0xa10 [ 441.915318][T18305] odev_open+0x6c/0x90 [ 441.919416][T18305] ? odev_release+0x70/0x70 [ 441.923902][T18305] soundcore_open+0x445/0x600 [ 441.928654][T18305] ? sound_devnode+0xf0/0xf0 [ 441.933231][T18305] chrdev_open+0x266/0x770 [ 441.937636][T18305] ? cdev_device_add+0x210/0x210 [ 441.942557][T18305] ? security_file_open+0x1f5/0x3f0 [ 441.947755][T18305] do_dentry_open+0x501/0x1290 [ 441.952509][T18305] ? cdev_device_add+0x210/0x210 [ 441.957444][T18305] path_openat+0x1bb9/0x2750 [ 441.962125][T18305] ? path_lookupat+0x830/0x830 [ 441.966882][T18305] ? cache_grow_end+0x46/0x170 [ 441.971655][T18305] ? lock_is_held_type+0xb0/0xe0 [ 441.976585][T18305] do_filp_open+0x17e/0x3c0 [ 441.981179][T18305] ? may_open_dev+0xf0/0xf0 [ 441.985681][T18305] ? do_raw_spin_lock+0x120/0x2b0 [ 441.990714][T18305] ? rwlock_bug.part.0+0x90/0x90 [ 441.995643][T18305] ? _raw_spin_unlock+0x24/0x40 [ 442.000477][T18305] ? __alloc_fd+0x28d/0x600 [ 442.004968][T18305] do_sys_openat2+0x16f/0x3b0 [ 442.009645][T18305] ? build_open_flags+0x650/0x650 [ 442.014666][T18305] ? __mutex_unlock_slowpath+0xe2/0x610 [ 442.020201][T18305] ? wait_for_completion+0x260/0x260 [ 442.025541][T18305] __x64_sys_openat+0x13f/0x1f0 [ 442.030385][T18305] ? __ia32_sys_open+0x1c0/0x1c0 [ 442.035325][T18305] ? ksys_write+0x1a5/0x250 [ 442.039812][T18305] ? lock_is_held_type+0xb0/0xe0 [ 442.044729][T18305] ? do_syscall_64+0x1c/0xe0 [ 442.049302][T18305] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 442.055277][T18305] do_syscall_64+0x60/0xe0 [ 442.059702][T18305] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 442.067246][T18305] RIP: 0033:0x45cba9 [ 442.071945][T18305] Code: Bad RIP value. [ 442.075993][T18305] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 442.084436][T18305] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 442.092389][T18305] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 442.100347][T18305] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 442.108300][T18305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 442.116257][T18305] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 442.171285][ T2514] usb 1-1: USB disconnect, device number 52 02:34:09 executing program 0 (fault-call:4 fault-nth:29): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:09 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x40, 0x4, 0x57, @ipv4={[], [], @private=0xa010100}, @private1={0xfc, 0x1, [], 0x1}, 0x8, 0xf821, 0x8}}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4008801}, 0x24040051) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x33) sched_setparam(0x0, 0x0) 02:34:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x15, 0x2}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x8001, 0xa7e, 0x8, 0x1200, 0x3, 0x8}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDDELIO(r6, 0x4b35, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:09 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r4], 0x2}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:10 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x53, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) mmap$snddsp_control(&(0x7f0000fec000/0x2000)=nil, 0x1000, 0x4, 0x2010, r2, 0x83000000) [ 443.078164][ T5] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 443.328418][ T5] usb 1-1: Using ep0 maxpacket: 8 02:34:10 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x800000000, 0x4c28a4ee}, 0x408, 0x0, 0x9, 0xe, 0x100000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x6, 0x81, 0xff, 0x2b, 0x0, 0x3ff, 0x2100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000007, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x600, 0x2000001f, 0x7f, 0x3, 0xb87f, 0x4, 0x2}, r5, 0xa, r2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 443.448521][ T5] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 443.484121][ T5] usb 1-1: config 0 has no interface number 0 [ 443.513347][ T5] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 443.556170][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 02:34:10 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x479, 0xff0000}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 443.615270][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 02:34:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 443.687104][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 443.718321][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.761004][ T5] usb 1-1: config 0 descriptor?? 02:34:10 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x92400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1ff}, 0x242, 0x3, 0x0, 0x9, 0xfffffffffffffffe, 0x1dfb}, 0x0, 0x6, 0xffffffffffffffff, 0x8) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_setscheduler(r0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000040)={0x4, {0x9, 0x74, 0x856e, 0x7}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 443.789693][T18388] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 443.797118][T18388] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 444.076770][T18388] FAULT_INJECTION: forcing a failure. [ 444.076770][T18388] name failslab, interval 1, probability 0, space 0, times 0 [ 444.109355][T18388] CPU: 0 PID: 18388 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 444.118406][T18388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.128464][T18388] Call Trace: [ 444.131767][T18388] dump_stack+0x18f/0x20d [ 444.136196][T18388] should_fail.cold+0x5/0x14 [ 444.140813][T18388] should_failslab+0x5/0xf [ 444.145239][T18388] kmem_cache_alloc_trace+0x240/0x2d0 [ 444.150656][T18388] open_substream+0xe9/0x880 [ 444.165340][T18388] rawmidi_open_priv+0x591/0x6f0 [ 444.170388][T18388] snd_rawmidi_kernel_open+0x1b5/0x270 [ 444.175891][T18388] midisynth_use+0xee/0x250 [ 444.180413][T18388] ? midisynth_unsubscribe+0x70/0x70 [ 444.185711][T18388] ? down_write+0xdb/0x150 [ 444.190228][T18388] ? down_write_killable+0x170/0x170 [ 444.195529][T18388] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 444.201521][T18388] ? trace_hardirqs_on+0x5f/0x220 [ 444.206563][T18388] ? midisynth_unsubscribe+0x70/0x70 [ 444.211859][T18388] check_and_subscribe_port+0x89a/0xb80 [ 444.217429][T18388] snd_seq_port_connect+0x382/0x520 [ 444.222651][T18388] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 444.228559][T18388] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 444.234813][T18388] ? mark_held_locks+0x9f/0xe0 [ 444.239591][T18388] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 444.245415][T18388] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 444.251413][T18388] snd_seq_kernel_client_ctl+0xeb/0x130 [ 444.256972][T18388] snd_seq_oss_midi_open+0x582/0x6e0 [ 444.262271][T18388] ? snd_seq_oss_midi_setup+0x50/0x50 [ 444.267661][T18388] ? mark_held_locks+0x9f/0xe0 [ 444.272449][T18388] ? lockdep_hardirqs_on+0x6a/0xe0 [ 444.278006][T18388] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 444.283821][T18388] ? get_mdev+0x75/0x90 [ 444.287989][T18388] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 444.293894][T18388] snd_seq_oss_open+0x87e/0xa10 [ 444.298756][T18388] odev_open+0x6c/0x90 [ 444.302823][T18388] ? odev_release+0x70/0x70 [ 444.307334][T18388] soundcore_open+0x445/0x600 [ 444.312006][T18388] ? sound_devnode+0xf0/0xf0 [ 444.316674][T18388] chrdev_open+0x266/0x770 [ 444.321095][T18388] ? cdev_device_add+0x210/0x210 [ 444.326041][T18388] ? security_file_open+0x1f5/0x3f0 [ 444.331252][T18388] do_dentry_open+0x501/0x1290 [ 444.336025][T18388] ? cdev_device_add+0x210/0x210 [ 444.341063][T18388] path_openat+0x1bb9/0x2750 [ 444.345670][T18388] ? path_lookupat+0x830/0x830 [ 444.350440][T18388] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 444.356438][T18388] ? lock_is_held_type+0xb0/0xe0 [ 444.361399][T18388] do_filp_open+0x17e/0x3c0 [ 444.365910][T18388] ? may_open_dev+0xf0/0xf0 [ 444.370429][T18388] ? do_raw_spin_lock+0x120/0x2b0 [ 444.375458][T18388] ? rwlock_bug.part.0+0x90/0x90 [ 444.380408][T18388] ? _raw_spin_unlock+0x24/0x40 [ 444.385261][T18388] ? __alloc_fd+0x28d/0x600 [ 444.389779][T18388] do_sys_openat2+0x16f/0x3b0 [ 444.394559][T18388] ? build_open_flags+0x650/0x650 [ 444.399593][T18388] ? __mutex_unlock_slowpath+0xe2/0x610 [ 444.405149][T18388] ? wait_for_completion+0x260/0x260 [ 444.410445][T18388] __x64_sys_openat+0x13f/0x1f0 [ 444.415306][T18388] ? __ia32_sys_open+0x1c0/0x1c0 [ 444.420244][T18388] ? ksys_write+0x1a5/0x250 [ 444.424754][T18388] ? lock_is_held_type+0xb0/0xe0 [ 444.429698][T18388] ? do_syscall_64+0x1c/0xe0 [ 444.434300][T18388] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 444.440294][T18388] do_syscall_64+0x60/0xe0 [ 444.444716][T18388] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.450610][T18388] RIP: 0033:0x45cba9 [ 444.454495][T18388] Code: Bad RIP value. [ 444.458562][T18388] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 444.467151][T18388] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 444.475129][T18388] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 444.483109][T18388] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 444.491253][T18388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 444.499213][T18388] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 444.545209][ T2488] usb 1-1: USB disconnect, device number 53 02:34:12 executing program 0 (fault-call:4 fault-nth:30): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:12 executing program 2: perf_event_open(&(0x7f00000012c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) ptrace$getsig(0x4202, r0, 0x1, &(0x7f0000000040)) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 445.479063][ T2488] usb 1-1: new high-speed USB device number 54 using dummy_hcd 02:34:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x2}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:12 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x81, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "126b69763509"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x200, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x5, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x5, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x3, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x5, 0x40}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x4, 0x0, 0x0, 0x40, 0x2}, 0xba, &(0x7f0000000100)={0x5, 0xf, 0xba, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x6, 0xc8}, @generic={0x9a, 0x10, 0x1, "6a1dfa76b592faf35f0bb4b444be281b0d71e7ce150fb643cc88641fcab978bcaea016ef2ff394b3e8f672bacbf3407e2f9b3413b1691a0c4738da50d62b40ffae4c88be0639def3fb5ba3419c1a3190476552bccc0859c0c14cf472ba67b4a59ab52d172cd33dc83359863bc708668b8a169c6b19b72a243bc52f79a8613ca1f33e5037e1732641de37cffaf517118fcdef930d33f997"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "369697d2f9a6a95762ab8a4c6af78933"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41e}}, {0xf0, &(0x7f00000002c0)=@string={0xf0, 0x3, "0323443b144ea52be44da558c08839946603659f39bb1b99501c415e8c2553c3f7291caa82dcc0aa3bfe01e7e10bd2a31182654843aeb8560c79110db065301559c78db67e89eba8a3fa097aad5c1da6d8cadeb0b7ce125216ff4210846cc586efa66a1c6a31f9e9fdd6c9f70f908bfca7b400848d51e7f3c4b92eb8369cb986779393f18e9355996694ef2e9ae65095ad70c4a7fdfda606f083b1c523b2ba0498ff7251542b9f5b0108999f2270ca38475fb8fac3d62aea7abfb09e6344eda1e2ba24d0bfa09e98a57a0f18d6c9e35bf3e46518df5bfd846902489ae705e33fb16682bf630f37a3df1501c6cf75"}}, {0x58, &(0x7f00000003c0)=@string={0x58, 0x3, "c968806ad96e9abf79699557d0bbd747bb3369f56a7eba8f85edf71b9cd378b6be073339ceefc1652205d01a6e828ac425bd7bebbca3e28ead651ce53610d35e8809d34c6227e45d0cb060b7a7c30563257e9e868a3c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc1a}}]}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 445.745624][ T2488] usb 1-1: Using ep0 maxpacket: 8 [ 445.892980][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 445.904567][ T2488] usb 1-1: config 0 has no interface number 0 [ 445.926257][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 445.955724][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 445.992649][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 02:34:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3d) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r4, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000200)='net/rfcomm\x00') dup3(r5, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 446.014527][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 446.042523][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:34:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 446.072722][ T2488] usb 1-1: config 0 descriptor?? [ 446.109412][T18475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 446.116774][T18475] raw-gadget gadget: fail, usb_ep_enable returned -22 02:34:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000080)={0x2, 0x7ff, 0x7, 0x40e8}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) [ 446.384255][T18475] FAULT_INJECTION: forcing a failure. [ 446.384255][T18475] name failslab, interval 1, probability 0, space 0, times 0 [ 446.438746][T18475] CPU: 1 PID: 18475 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 446.447448][T18475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.457514][T18475] Call Trace: [ 446.460817][T18475] dump_stack+0x18f/0x20d [ 446.465158][T18475] should_fail.cold+0x5/0x14 [ 446.469756][T18475] should_failslab+0x5/0xf [ 446.474180][T18475] kmem_cache_alloc_trace+0x240/0x2d0 [ 446.479562][T18475] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 446.485553][T18475] snd_seq_port_connect+0x5d/0x520 [ 446.490674][T18475] ? _raw_read_unlock+0x24/0x40 [ 446.495542][T18475] ? check_subscription_permission.isra.0+0x16a/0x260 [ 446.502315][T18475] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 446.508221][T18475] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 446.514469][T18475] ? mark_held_locks+0x9f/0xe0 [ 446.519243][T18475] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 446.525211][T18475] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 446.531240][T18475] snd_seq_kernel_client_ctl+0xeb/0x130 [ 446.536795][T18475] snd_seq_oss_midi_open+0x582/0x6e0 [ 446.542095][T18475] ? snd_seq_oss_midi_setup+0x50/0x50 [ 446.547468][T18475] ? mark_held_locks+0x9f/0xe0 [ 446.552250][T18475] ? lockdep_hardirqs_on+0x6a/0xe0 [ 446.557366][T18475] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 446.563176][T18475] ? get_mdev+0x75/0x90 [ 446.567345][T18475] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 446.573249][T18475] snd_seq_oss_open+0x87e/0xa10 [ 446.578370][T18475] odev_open+0x6c/0x90 [ 446.582456][T18475] ? odev_release+0x70/0x70 [ 446.586967][T18475] soundcore_open+0x445/0x600 [ 446.591655][T18475] ? sound_devnode+0xf0/0xf0 [ 446.596246][T18475] chrdev_open+0x266/0x770 [ 446.600666][T18475] ? cdev_device_add+0x210/0x210 [ 446.605612][T18475] ? security_file_open+0x1f5/0x3f0 [ 446.610819][T18475] do_dentry_open+0x501/0x1290 [ 446.615586][T18475] ? cdev_device_add+0x210/0x210 [ 446.620553][T18475] path_openat+0x1bb9/0x2750 [ 446.630018][T18475] ? path_lookupat+0x830/0x830 [ 446.634786][T18475] ? cache_grow_end+0x46/0x170 [ 446.639563][T18475] ? lock_is_held_type+0xb0/0xe0 [ 446.644508][T18475] do_filp_open+0x17e/0x3c0 [ 446.649018][T18475] ? may_open_dev+0xf0/0xf0 [ 446.653533][T18475] ? do_raw_spin_lock+0x120/0x2b0 [ 446.658563][T18475] ? rwlock_bug.part.0+0x90/0x90 [ 446.663510][T18475] ? _raw_spin_unlock+0x24/0x40 [ 446.668459][T18475] ? __alloc_fd+0x28d/0x600 [ 446.672966][T18475] do_sys_openat2+0x16f/0x3b0 [ 446.677621][T18475] ? build_open_flags+0x650/0x650 [ 446.682626][T18475] ? __mutex_unlock_slowpath+0xe2/0x610 [ 446.688180][T18475] ? wait_for_completion+0x260/0x260 [ 446.693455][T18475] __x64_sys_openat+0x13f/0x1f0 [ 446.698293][T18475] ? __ia32_sys_open+0x1c0/0x1c0 [ 446.703215][T18475] ? ksys_write+0x1a5/0x250 [ 446.707697][T18475] ? lock_is_held_type+0xb0/0xe0 [ 446.712613][T18475] ? do_syscall_64+0x1c/0xe0 [ 446.717183][T18475] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 446.723164][T18475] do_syscall_64+0x60/0xe0 [ 446.727570][T18475] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 446.733440][T18475] RIP: 0033:0x45cba9 02:34:13 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 446.737367][T18475] Code: Bad RIP value. [ 446.741409][T18475] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.749938][T18475] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 446.757896][T18475] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 446.765854][T18475] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 446.773805][T18475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 446.781758][T18475] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 446.853616][ T2516] usb 1-1: USB disconnect, device number 54 02:34:14 executing program 0 (fault-call:4 fault-nth:31): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:14 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0xc000) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x410200, 0x0, 0x14}, 0x18) dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) r5 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r6 = geteuid() fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0f820000", @ANYRES32=r6, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df717020475a2987318f5d14b44f6e905f49874900a7725d00c", @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,dont_hash,\x00']) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}}}, 0x78) lchown(&(0x7f0000000100)='./file0\x00', r6, r8) 02:34:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:14 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="880300000a0a010200000000000000000000000a5c3810400000000000000005a1000d40cc7a5c89d4313c710400000085b993f7de9bdbcf73c75beb74a51cf5b0ee32c838fb8aabd392bc5367ca82292d028b15e5d2601bda2108600be058cf7d3b0844a239a3961163bebcdf451ae7b7b161fbc31f38263e56017873e6eecfc3242d53c12444170d15de39753fddcd2ff683d39b10f0c8adf9745616b01086c45ebd6b7393090514a841f7d8a48f089e904ec181cd4c5973aec69c596b6a9b4300000030001180070001006374000024000280080002400000001108000140000000150800044000000017080002400000000094020980200002801c0001800800014000000000080001400000000008000140fffffffbb40002801400018008000140800000000800014000000004140001800800014000000004080001400000050114000180080001408000000108000140000000093c00018008000140ffffc00008000140000001ff08000140000000010800014000000003080001400000bfde080001400000800108000140000008000c00018008000140000000072c0001800800014000000066080001400000000308000140000000d308000140000002000800014000000003880002803c00018008000140000007ff080001400000000308000140000000030800014000000005080001400000010108000140000007dd08000140000000090c000180080001400000003f3c0001800800014000008001080001400000b382080001400000000308000140fffffffb08000140000000060800014000000007080001400001000018000280140001800800014000008000080001400000000508000140000000090800014000000004380002803400018008000140000000070800014000000100080001407fffffff08000140fffffff8080001400000040082ff0140000000097c0002802400018008000140206dee74080001400000080008000140e7ff00810800014000000003540001800800014000000008080001400000000408000140000000470800014000000ca90800014000000000080001400000756c0800014000000002080001400000000608000140000008000800014000000002500002804c0001800800014000000080080001400000005c08000140000000070800014000000800080001400000000908000140000000030800014000000002080001400000000908000140ffffffa80800014000000009"], 0x388}}, 0x40) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r4, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r6 = dup3(r5, r4, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket(0x11, 0x800000003, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002ef9180346431df019f29079bf786728", @ANYRES32=r11], 0x2}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r11, 0x29, 0x4, 0x6, 0x1, 0x0, @mcast2, @local, 0x40, 0x8000, 0x10000, 0x7f}}) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000840)={@remote, r12}, 0x14) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r7, r8+10000000}}, 0x0) tkill(r2, 0x1004000000016) 02:34:14 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 447.727862][ T2516] usb 1-1: new high-speed USB device number 55 using dummy_hcd 02:34:14 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 447.978020][ T2516] usb 1-1: Using ep0 maxpacket: 8 [ 448.107927][ T2516] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 448.115965][ T2516] usb 1-1: config 0 has no interface number 0 [ 448.136807][ T2516] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 448.149593][ T2516] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 448.162336][ T2516] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 448.173341][ T2516] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 448.183340][ T2516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.197545][ T2516] usb 1-1: config 0 descriptor?? [ 448.255091][T18569] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 448.276175][T18569] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 448.502449][T18569] FAULT_INJECTION: forcing a failure. [ 448.502449][T18569] name failslab, interval 1, probability 0, space 0, times 0 [ 448.521827][T18569] CPU: 1 PID: 18569 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 448.530532][T18569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.541034][T18569] Call Trace: [ 448.544336][T18569] dump_stack+0x18f/0x20d [ 448.548684][T18569] should_fail.cold+0x5/0x14 [ 448.553286][T18569] should_failslab+0x5/0xf [ 448.558146][T18569] kmem_cache_alloc_node_trace+0x27d/0x400 [ 448.563986][T18569] __kmalloc_node+0x38/0x60 [ 448.568501][T18569] kvmalloc_node+0x61/0xf0 [ 448.573012][T18569] open_substream+0x33d/0x880 [ 448.577703][T18569] rawmidi_open_priv+0x591/0x6f0 [ 448.582657][T18569] snd_rawmidi_kernel_open+0x1b5/0x270 [ 448.588135][T18569] midisynth_use+0xee/0x250 [ 448.592652][T18569] ? midisynth_unsubscribe+0x70/0x70 [ 448.597941][T18569] ? down_write+0xdb/0x150 [ 448.602336][T18569] ? down_write_killable+0x170/0x170 [ 448.607600][T18569] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 448.613560][T18569] ? trace_hardirqs_on+0x5f/0x220 [ 448.618592][T18569] ? midisynth_unsubscribe+0x70/0x70 [ 448.623885][T18569] check_and_subscribe_port+0x89a/0xb80 [ 448.629700][T18569] snd_seq_port_connect+0x382/0x520 [ 448.635372][T18569] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 448.641253][T18569] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 448.647476][T18569] ? mark_held_locks+0x9f/0xe0 [ 448.652222][T18569] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 448.658020][T18569] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 448.663977][T18569] snd_seq_kernel_client_ctl+0xeb/0x130 [ 448.669501][T18569] snd_seq_oss_midi_open+0x582/0x6e0 [ 448.674763][T18569] ? snd_seq_oss_midi_setup+0x50/0x50 [ 448.680124][T18569] ? mark_held_locks+0x9f/0xe0 [ 448.684869][T18569] ? lockdep_hardirqs_on+0x6a/0xe0 [ 448.689973][T18569] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 448.695754][T18569] ? get_mdev+0x75/0x90 [ 448.699908][T18569] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 448.705884][T18569] snd_seq_oss_open+0x87e/0xa10 [ 448.710720][T18569] odev_open+0x6c/0x90 [ 448.714765][T18569] ? odev_release+0x70/0x70 [ 448.719243][T18569] soundcore_open+0x445/0x600 [ 448.723901][T18569] ? sound_devnode+0xf0/0xf0 [ 448.728586][T18569] chrdev_open+0x266/0x770 [ 448.732975][T18569] ? cdev_device_add+0x210/0x210 [ 448.737894][T18569] ? security_file_open+0x1f5/0x3f0 [ 448.743068][T18569] do_dentry_open+0x501/0x1290 [ 448.747814][T18569] ? cdev_device_add+0x210/0x210 [ 448.752745][T18569] path_openat+0x1bb9/0x2750 [ 448.757314][T18569] ? path_lookupat+0x830/0x830 [ 448.762052][T18569] ? cache_grow_end+0x46/0x170 [ 448.766812][T18569] ? lock_is_held_type+0xb0/0xe0 [ 448.771729][T18569] do_filp_open+0x17e/0x3c0 [ 448.776219][T18569] ? may_open_dev+0xf0/0xf0 [ 448.780901][T18569] ? do_raw_spin_lock+0x120/0x2b0 [ 448.785902][T18569] ? rwlock_bug.part.0+0x90/0x90 [ 448.790820][T18569] ? _raw_spin_unlock+0x24/0x40 [ 448.795733][T18569] ? __alloc_fd+0x28d/0x600 [ 448.800215][T18569] do_sys_openat2+0x16f/0x3b0 [ 448.804868][T18569] ? build_open_flags+0x650/0x650 [ 448.809895][T18569] ? __mutex_unlock_slowpath+0xe2/0x610 [ 448.815431][T18569] ? wait_for_completion+0x260/0x260 [ 448.820697][T18569] __x64_sys_openat+0x13f/0x1f0 [ 448.825522][T18569] ? __ia32_sys_open+0x1c0/0x1c0 [ 448.830447][T18569] ? ksys_write+0x1a5/0x250 [ 448.834926][T18569] ? lock_is_held_type+0xb0/0xe0 [ 448.839841][T18569] ? do_syscall_64+0x1c/0xe0 [ 448.844423][T18569] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 448.851088][T18569] do_syscall_64+0x60/0xe0 [ 448.855479][T18569] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 448.861366][T18569] RIP: 0033:0x45cba9 [ 448.865228][T18569] Code: Bad RIP value. [ 448.869278][T18569] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 448.877751][T18569] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 448.885714][T18569] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 448.893669][T18569] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 448.901632][T18569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 448.909581][T18569] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 448.968214][ T2488] usb 1-1: USB disconnect, device number 55 02:34:16 executing program 0 (fault-call:4 fault-nth:32): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:16 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r4, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7142}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7f, @ipv4={[], [], @broadcast}, 0x1b8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @mcast2, 0xffffff7f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0xff01, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20048000}, 0x100) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:16 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:34:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:16 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:34:16 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:16 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x41) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_CREATE(r4, &(0x7f0000000140)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/207, 0xcf, 0x2, 0x6, 0xfffffe8e, 0x9c6, 0x7fff}}, 0x120) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:16 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 449.907841][ T2488] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 450.170580][ T2488] usb 1-1: Using ep0 maxpacket: 8 [ 450.308078][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 450.316544][ T2488] usb 1-1: config 0 has no interface number 0 [ 450.323912][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 450.336979][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 450.347532][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 450.358485][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 450.367529][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.380421][ T2488] usb 1-1: config 0 descriptor?? [ 450.399381][T18651] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 450.406751][T18651] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 450.650605][T18651] FAULT_INJECTION: forcing a failure. [ 450.650605][T18651] name failslab, interval 1, probability 0, space 0, times 0 [ 450.687765][T18651] CPU: 0 PID: 18651 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 450.696471][T18651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.706541][T18651] Call Trace: [ 450.709853][T18651] dump_stack+0x18f/0x20d [ 450.714201][T18651] should_fail.cold+0x5/0x14 [ 450.718982][T18651] should_failslab+0x5/0xf [ 450.723424][T18651] kmem_cache_alloc_node_trace+0x27d/0x400 [ 450.729334][T18651] __kmalloc_node+0x38/0x60 [ 450.733857][T18651] kvmalloc_node+0x61/0xf0 [ 450.738444][T18651] open_substream+0x33d/0x880 [ 450.743366][T18651] rawmidi_open_priv+0x591/0x6f0 [ 450.748301][T18651] snd_rawmidi_kernel_open+0x1b5/0x270 [ 450.753767][T18651] midisynth_use+0xee/0x250 [ 450.758287][T18651] ? midisynth_unsubscribe+0x70/0x70 [ 450.763589][T18651] ? down_write+0xdb/0x150 [ 450.767992][T18651] ? down_write_killable+0x170/0x170 [ 450.773378][T18651] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 450.779341][T18651] ? trace_hardirqs_on+0x5f/0x220 [ 450.784352][T18651] ? midisynth_unsubscribe+0x70/0x70 [ 450.789626][T18651] check_and_subscribe_port+0x89a/0xb80 [ 450.795159][T18651] snd_seq_port_connect+0x382/0x520 [ 450.800341][T18651] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 450.806418][T18651] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 450.812758][T18651] ? mark_held_locks+0x9f/0xe0 [ 450.817509][T18651] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 450.823316][T18651] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 450.830323][T18651] snd_seq_kernel_client_ctl+0xeb/0x130 [ 450.835853][T18651] snd_seq_oss_midi_open+0x582/0x6e0 [ 450.841123][T18651] ? snd_seq_oss_midi_setup+0x50/0x50 [ 450.846483][T18651] ? mark_held_locks+0x9f/0xe0 [ 450.851236][T18651] ? lockdep_hardirqs_on+0x6a/0xe0 [ 450.856329][T18651] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 450.862204][T18651] ? get_mdev+0x75/0x90 [ 450.866344][T18651] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 450.872229][T18651] snd_seq_oss_open+0x87e/0xa10 [ 450.878802][T18651] odev_open+0x6c/0x90 [ 450.882847][T18651] ? odev_release+0x70/0x70 [ 450.887329][T18651] soundcore_open+0x445/0x600 [ 450.892011][T18651] ? sound_devnode+0xf0/0xf0 [ 450.896595][T18651] chrdev_open+0x266/0x770 [ 450.901004][T18651] ? cdev_device_add+0x210/0x210 [ 450.905948][T18651] ? security_file_open+0x1f5/0x3f0 [ 450.911163][T18651] do_dentry_open+0x501/0x1290 [ 450.916273][T18651] ? cdev_device_add+0x210/0x210 [ 450.921207][T18651] path_openat+0x1bb9/0x2750 [ 450.925792][T18651] ? path_lookupat+0x830/0x830 [ 450.930732][T18651] ? cache_grow_end+0x46/0x170 [ 450.935488][T18651] ? lock_is_held_type+0xb0/0xe0 [ 450.940409][T18651] do_filp_open+0x17e/0x3c0 [ 450.944893][T18651] ? may_open_dev+0xf0/0xf0 [ 450.949394][T18651] ? do_raw_spin_lock+0x120/0x2b0 [ 450.954414][T18651] ? rwlock_bug.part.0+0x90/0x90 [ 450.959355][T18651] ? _raw_spin_unlock+0x24/0x40 [ 450.964186][T18651] ? __alloc_fd+0x28d/0x600 [ 450.968682][T18651] do_sys_openat2+0x16f/0x3b0 [ 450.973471][T18651] ? build_open_flags+0x650/0x650 [ 450.978485][T18651] ? __mutex_unlock_slowpath+0xe2/0x610 [ 450.984059][T18651] ? wait_for_completion+0x260/0x260 [ 450.989330][T18651] __x64_sys_openat+0x13f/0x1f0 [ 450.994216][T18651] ? __ia32_sys_open+0x1c0/0x1c0 [ 450.999132][T18651] ? ksys_write+0x1a5/0x250 [ 451.003655][T18651] ? lock_is_held_type+0xb0/0xe0 [ 451.008573][T18651] ? do_syscall_64+0x1c/0xe0 [ 451.013151][T18651] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 451.019109][T18651] do_syscall_64+0x60/0xe0 [ 451.023507][T18651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 451.029382][T18651] RIP: 0033:0x45cba9 [ 451.033254][T18651] Code: Bad RIP value. [ 451.037326][T18651] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 451.045807][T18651] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 451.053780][T18651] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 451.061738][T18651] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 451.069720][T18651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 451.077677][T18651] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 02:34:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$cont(0x20, r3, 0x3, 0x55) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x212c03) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) readv(r4, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r5, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r3, 0x1004000000016) 02:34:18 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:18 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0xff, &(0x7f0000000040)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x1b, {0x1b, 0x9, "f3e0606b7df8c3f25861f76aab2403f84557bcab321f376bed"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4b}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x0, 0x7, "9e4b1710", "0f004ad2"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x43, 0xff, 0x7, 0x71, 0x12c}}}, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x40, 0x14, 0xe5, "68f4401f5bcc797c9dcef54ae2bde38772c7df7891577a26ca78629c19fdfaf376977bf59231ebb204b8d142d5bc37517032cde956ea4317af114916e8a3366548b964db37828cf725d8571787c0f1a40e5bfd284447753bc82effc1b185d51174468a7cf5df093975636552b9f36a43adbe6353bbc73f2bf790bb6555c6a4e91d8c41c504389cbe8097cdae979aaa9b9188ba601eecbc55be60110797530bfa47ddfa028c29b8664aef073ae46d25948e1569ddfedc343eff4dfe336293510becd80b9a211deb875a8efa91c02986c662c48291e6cef886ba8016ab6561202885f6a96c4f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x60, 0x20, [0x0]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000440)={0x40, 0xb, 0x2, "1475"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000004c0)={0x40, 0x13, 0x6}, &(0x7f0000000500)={0x40, 0x17, 0x6, @random="5171ca753aa0"}, &(0x7f0000000540)={0x40, 0x19, 0x2, "95d6"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x4}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 451.097967][ T8614] usb 1-1: USB disconnect, device number 56 02:34:18 executing program 0 (fault-call:4 fault-nth:33): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:18 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7903, 0x35}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:19 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "7822c5351c5163fb", "9a2d5f6b0166efb89ce88abc30ab4fd4", "1f2be616", "9d36edbd411e6697"}, 0x28) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xd, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x2800c0c2) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r5, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r6, r5, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r4, 0x1004000000016) [ 452.027702][ T8614] usb 1-1: new high-speed USB device number 57 using dummy_hcd 02:34:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:19 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x15) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x7, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 452.281789][ T8614] usb 1-1: Using ep0 maxpacket: 8 [ 452.399033][ T8614] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 452.408877][ T8614] usb 1-1: config 0 has no interface number 0 [ 452.425743][ T8614] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 452.450358][ T8614] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 452.461800][ T8614] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 452.473762][ T8614] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 452.494361][ T8614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.514425][ T8614] usb 1-1: config 0 descriptor?? [ 452.559252][T18727] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 452.566589][T18727] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 452.810268][T18727] FAULT_INJECTION: forcing a failure. [ 452.810268][T18727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.823508][T18727] CPU: 0 PID: 18727 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 452.832185][T18727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.842253][T18727] Call Trace: [ 452.845562][T18727] dump_stack+0x18f/0x20d [ 452.849908][T18727] should_fail.cold+0x5/0x14 [ 452.854513][T18727] __alloc_pages_nodemask+0x1a3/0x930 [ 452.860668][T18727] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 452.866683][T18727] ? find_held_lock+0x2d/0x110 [ 452.871439][T18727] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 452.878185][T18727] ? lock_acquire+0x1f1/0xad0 [ 452.882844][T18727] ? fs_reclaim_acquire+0xf/0x40 [ 452.887766][T18727] ? find_held_lock+0x2d/0x110 [ 452.892515][T18727] cache_grow_begin+0x8c/0xb20 [ 452.897265][T18727] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 452.902759][T18727] cache_alloc_refill+0x27b/0x340 [ 452.907784][T18727] ? lockdep_hardirqs_off+0x66/0xa0 [ 452.913091][T18727] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 452.918929][T18727] __kmalloc_node+0x38/0x60 [ 452.923446][T18727] kvmalloc_node+0x61/0xf0 [ 452.927878][T18727] open_substream+0x33d/0x880 [ 452.932573][T18727] rawmidi_open_priv+0x591/0x6f0 [ 452.937537][T18727] snd_rawmidi_kernel_open+0x1b5/0x270 [ 452.943036][T18727] midisynth_use+0xee/0x250 [ 452.947551][T18727] ? midisynth_unsubscribe+0x70/0x70 [ 452.952857][T18727] ? down_write+0xdb/0x150 [ 452.957286][T18727] ? down_write_killable+0x170/0x170 [ 452.962586][T18727] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 452.968579][T18727] ? trace_hardirqs_on+0x5f/0x220 [ 452.973620][T18727] ? midisynth_unsubscribe+0x70/0x70 [ 452.978918][T18727] check_and_subscribe_port+0x89a/0xb80 [ 452.984488][T18727] snd_seq_port_connect+0x382/0x520 [ 452.989742][T18727] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 452.995633][T18727] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 453.001870][T18727] ? mark_held_locks+0x9f/0xe0 [ 453.006619][T18727] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 453.012407][T18727] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 453.018377][T18727] snd_seq_kernel_client_ctl+0xeb/0x130 [ 453.023997][T18727] snd_seq_oss_midi_open+0x582/0x6e0 [ 453.029281][T18727] ? snd_seq_oss_midi_setup+0x50/0x50 [ 453.035165][T18727] ? mark_held_locks+0x9f/0xe0 [ 453.039974][T18727] ? lockdep_hardirqs_on+0x6a/0xe0 [ 453.045237][T18727] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 453.051034][T18727] ? get_mdev+0x75/0x90 [ 453.055959][T18727] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 453.061962][T18727] snd_seq_oss_open+0x87e/0xa10 [ 453.066803][T18727] odev_open+0x6c/0x90 [ 453.070865][T18727] ? odev_release+0x70/0x70 [ 453.075376][T18727] soundcore_open+0x445/0x600 [ 453.080107][T18727] ? sound_devnode+0xf0/0xf0 [ 453.084685][T18727] chrdev_open+0x266/0x770 [ 453.089090][T18727] ? cdev_device_add+0x210/0x210 [ 453.094045][T18727] ? security_file_open+0x1f5/0x3f0 [ 453.099244][T18727] do_dentry_open+0x501/0x1290 [ 453.104013][T18727] ? cdev_device_add+0x210/0x210 [ 453.109111][T18727] path_openat+0x1bb9/0x2750 [ 453.113950][T18727] ? path_lookupat+0x830/0x830 [ 453.118694][T18727] ? cache_grow_end+0x46/0x170 [ 453.123447][T18727] ? lock_is_held_type+0xb0/0xe0 [ 453.128380][T18727] do_filp_open+0x17e/0x3c0 [ 453.132865][T18727] ? may_open_dev+0xf0/0xf0 [ 453.137384][T18727] ? do_raw_spin_lock+0x120/0x2b0 [ 453.142426][T18727] ? rwlock_bug.part.0+0x90/0x90 [ 453.148379][T18727] ? _raw_spin_unlock+0x24/0x40 [ 453.153218][T18727] ? __alloc_fd+0x28d/0x600 [ 453.157761][T18727] do_sys_openat2+0x16f/0x3b0 [ 453.162423][T18727] ? build_open_flags+0x650/0x650 [ 453.167439][T18727] ? __mutex_unlock_slowpath+0xe2/0x610 [ 453.172971][T18727] ? wait_for_completion+0x260/0x260 [ 453.178250][T18727] __x64_sys_openat+0x13f/0x1f0 [ 453.183081][T18727] ? __ia32_sys_open+0x1c0/0x1c0 [ 453.188005][T18727] ? ksys_write+0x1a5/0x250 [ 453.192491][T18727] ? lock_is_held_type+0xb0/0xe0 [ 453.197428][T18727] ? do_syscall_64+0x1c/0xe0 [ 453.202008][T18727] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 453.207973][T18727] do_syscall_64+0x60/0xe0 [ 453.212371][T18727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 453.218854][T18727] RIP: 0033:0x45cba9 [ 453.222722][T18727] Code: Bad RIP value. [ 453.226765][T18727] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.235173][T18727] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 453.243148][T18727] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 453.251098][T18727] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 453.259070][T18727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 453.267021][T18727] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 453.305204][ T2514] usb 1-1: USB disconnect, device number 57 02:34:20 executing program 0 (fault-call:4 fault-nth:34): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) syz_open_procfs(r2, &(0x7f0000000080)='net/wireless\x00') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r5 = dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r6, 0x202002) keyctl$revoke(0x3, r6) r7 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$describe(0x6, r7, &(0x7f0000000140)=""/91, 0x5b) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) tkill(r2, 0x1004000000016) 02:34:20 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x7, 0x20, 0x2e, 0x0, 0x10001, 0x2a01c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x2, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setsig(0x4203, r1, 0xb556, &(0x7f0000000040)={0xb, 0x3, 0x80000000}) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x1, 0x70d4, 0x64, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x731, 0xf08, 0x80000001}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x100000000000, 0x0, 0xe, 0x0, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x2, &(0x7f0000000040)={0xc, 0xeffb, 0xec}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:21 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780), 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) syncfs(0xffffffffffffffff) tkill(r4, 0x3d) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r4, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f00000001c0)='net/nfsfs\x00') dup3(r5, r3, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x100, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xa1}, 0x4000001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 454.227597][ T8614] usb 1-1: new high-speed USB device number 58 using dummy_hcd 02:34:21 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup2(0xffffffffffffffff, r1) write$P9_RRENAMEAT(r3, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r2, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 454.487531][ T8614] usb 1-1: Using ep0 maxpacket: 8 [ 454.630997][ T8614] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 454.650983][ T8614] usb 1-1: config 0 has no interface number 0 [ 454.665593][ T8614] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 454.697485][ T8614] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 454.708132][ T8614] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 454.719304][ T8614] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 454.729093][ T8614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.743735][ T8614] usb 1-1: config 0 descriptor?? [ 454.779082][T18815] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 454.786455][T18815] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 455.023688][T18815] FAULT_INJECTION: forcing a failure. [ 455.023688][T18815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.036925][T18815] CPU: 0 PID: 18815 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 455.045598][T18815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.055662][T18815] Call Trace: [ 455.058967][T18815] dump_stack+0x18f/0x20d [ 455.063313][T18815] should_fail.cold+0x5/0x14 [ 455.067922][T18815] __alloc_pages_nodemask+0x1a3/0x930 [ 455.073302][T18815] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 455.079297][T18815] ? find_held_lock+0x2d/0x110 [ 455.084087][T18815] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 455.090867][T18815] ? lock_acquire+0x1f1/0xad0 [ 455.095563][T18815] ? fs_reclaim_acquire+0xf/0x40 [ 455.100517][T18815] ? find_held_lock+0x2d/0x110 [ 455.105303][T18815] cache_grow_begin+0x8c/0xb20 [ 455.110098][T18815] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 455.115575][T18815] cache_alloc_refill+0x27b/0x340 [ 455.120613][T18815] ? lockdep_hardirqs_off+0x66/0xa0 [ 455.125831][T18815] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 455.131683][T18815] __kmalloc_node+0x38/0x60 [ 455.136201][T18815] kvmalloc_node+0x61/0xf0 [ 455.140627][T18815] open_substream+0x33d/0x880 [ 455.145315][T18815] rawmidi_open_priv+0x519/0x6f0 [ 455.150271][T18815] snd_rawmidi_kernel_open+0x1b5/0x270 [ 455.155743][T18815] ? midisynth_use+0x250/0x250 [ 455.160519][T18815] midisynth_subscribe+0xf2/0x350 [ 455.165676][T18815] ? midisynth_use+0x250/0x250 [ 455.170453][T18815] ? down_write+0xdb/0x150 [ 455.174888][T18815] ? down_write_killable+0x170/0x170 [ 455.180189][T18815] ? midisynth_use+0x250/0x250 [ 455.184962][T18815] check_and_subscribe_port+0x89a/0xb80 [ 455.190526][T18815] snd_seq_port_connect+0x2e6/0x520 [ 455.195739][T18815] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 455.201648][T18815] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 455.207901][T18815] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 455.213714][T18815] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 455.219710][T18815] snd_seq_kernel_client_ctl+0xeb/0x130 [ 455.225269][T18815] snd_seq_oss_midi_open+0x466/0x6e0 [ 455.230566][T18815] ? snd_seq_oss_midi_setup+0x50/0x50 [ 455.235946][T18815] ? mark_held_locks+0x9f/0xe0 [ 455.240728][T18815] ? lockdep_hardirqs_on+0x6a/0xe0 [ 455.245848][T18815] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 455.251663][T18815] ? get_mdev+0x75/0x90 [ 455.255832][T18815] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 455.261741][T18815] snd_seq_oss_open+0x87e/0xa10 [ 455.266592][T18815] odev_open+0x6c/0x90 [ 455.270649][T18815] ? odev_release+0x70/0x70 [ 455.275130][T18815] soundcore_open+0x445/0x600 [ 455.279805][T18815] ? sound_devnode+0xf0/0xf0 [ 455.284393][T18815] chrdev_open+0x266/0x770 [ 455.288801][T18815] ? cdev_device_add+0x210/0x210 [ 455.293866][T18815] ? security_file_open+0x1f5/0x3f0 [ 455.299066][T18815] do_dentry_open+0x501/0x1290 [ 455.303820][T18815] ? cdev_device_add+0x210/0x210 [ 455.308752][T18815] path_openat+0x1bb9/0x2750 [ 455.313444][T18815] ? path_lookupat+0x830/0x830 [ 455.318209][T18815] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 455.324199][T18815] ? lock_is_held_type+0xb0/0xe0 [ 455.329215][T18815] do_filp_open+0x17e/0x3c0 [ 455.333704][T18815] ? may_open_dev+0xf0/0xf0 [ 455.338212][T18815] ? do_raw_spin_lock+0x120/0x2b0 [ 455.343237][T18815] ? rwlock_bug.part.0+0x90/0x90 [ 455.348186][T18815] ? _raw_spin_unlock+0x24/0x40 [ 455.353029][T18815] ? __alloc_fd+0x28d/0x600 [ 455.357572][T18815] do_sys_openat2+0x16f/0x3b0 [ 455.362242][T18815] ? build_open_flags+0x650/0x650 [ 455.367253][T18815] ? __mutex_unlock_slowpath+0xe2/0x610 [ 455.372829][T18815] ? wait_for_completion+0x260/0x260 [ 455.378111][T18815] __x64_sys_openat+0x13f/0x1f0 [ 455.382954][T18815] ? __ia32_sys_open+0x1c0/0x1c0 [ 455.387888][T18815] ? ksys_write+0x1a5/0x250 [ 455.392397][T18815] ? lock_is_held_type+0xb0/0xe0 [ 455.397338][T18815] ? do_syscall_64+0x1c/0xe0 [ 455.401933][T18815] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 455.407925][T18815] do_syscall_64+0x60/0xe0 [ 455.412348][T18815] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 455.418250][T18815] RIP: 0033:0x45cba9 [ 455.423037][T18815] Code: Bad RIP value. [ 455.427087][T18815] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.435502][T18815] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 455.443457][T18815] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 455.451416][T18815] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 455.459381][T18815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 455.467359][T18815] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 455.518649][ T2514] usb 1-1: USB disconnect, device number 58 02:34:23 executing program 0 (fault-call:4 fault-nth:35): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9, 0x400000) readv(r4, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190346431df019f29079bf786728", @ANYRES32=r5], 0x2}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdb068a07fb21f2687f94f1df25150000004c0001800800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200677265746170300000000000000000001400020076657468305f746f5f627269646765003000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007379f4bd1c570089837a6b616c6c6572310000000000000800030002000000080003000200000020000180080003000000000014000200767863616e310000000000000000000038", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d61637365633000000000000000000064000180140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d793000000000000000000000140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766574683100000000000000000000005800018008000300010000001400020073797a6b616c6c6572310000000000001400020076657468315f746f5f62617461647600080001004d769d5dcff2b9a01b6d84dab1237669596acd509e49d7d60a1725046bdbea65cf96ae68f9210d8398b8a3bceb474a790d36a8b19176e294ce3237b6a6580eff26bd0d1fa6572195ef57a4cd7736202baebb490d8692c1b6b763cc73cd7ca14132b8a328a1887d923982f2d823ebafffbf40d08c7791323a8f63b55cc72737aab54fdfaea5e287f8315539aa1b13eef52db2b0ad1d408f89a2c3ded3c57692ada351493f93cc8fd6c967ed128d383688168b3ae83c78cd6a", @ANYRES32=0x0, @ANYBLOB="08000300000000001400070000006e65766530000000000000000000ff07000008000300030000ff140002006272696467655f736c6176655f310000080001000159", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="3400018008000300020000001400020074756e6830000000000000000000000014000200766c616e30000000000000000000000028000180140002006c6f0000000000000000000000000000080003000300000008000100d8c9ad1f274ec08a76714724bb6fb5b8e8de6f75a012719d19693fffb949238da6b42d0baa44814a3ef3ca3766911a524bf7dd99d15b2365ddc5dab3d345b7e56d4c3f8a6e63f1a0fef042f01b53c4b31f8b3e5399464b0e850c986de34b6342311398e4481207d3c6bb1a29053ea7b435c92ae8c8262b8524a771af712000f803980f6086a18d9e93bb315a41c8da19dfbc6094f7769d29c4c8d8e65be04e6400e66edb5b621d803d124eb7865b4d09d978729701571703e867b1231047", @ANYRES32=r8, @ANYBLOB], 0x234}, 0x1, 0x0, 0x0, 0x80c0}, 0x4040004) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r9, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:23 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x2c0841) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x22e00, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000000c0)=0x6, 0x4) dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:23 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x1104, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x5, 0x8b, &(0x7f0000000040)="a662e50f07263e77d5c3e2aa4a71e3ebba987fb341e2af29c95516cea1d9028f917000e2fbe1078d4bf1aa43a557b88992e5a974c8be37c92058656cf0fb53d892f0a78c5409dc7e1e72d6e4876fb1c7be13b3085250b7cc236f7d4bd074c08e370cace16b3bcf5d3b2168f8763ea9ab16b65c9035305174fa303dfab0ed1cfbba9b8ebbe751eaa99e25cf"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 456.447413][ T2488] usb 1-1: new high-speed USB device number 59 using dummy_hcd 02:34:23 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000040)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 456.707438][ T2488] usb 1-1: Using ep0 maxpacket: 8 [ 456.837707][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 456.845719][ T2488] usb 1-1: config 0 has no interface number 0 [ 456.854679][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 456.866437][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 456.877395][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 456.887158][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 456.897951][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.922114][ T2488] usb 1-1: config 0 descriptor?? [ 456.948825][T18899] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 456.956192][T18899] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 457.213378][T18899] FAULT_INJECTION: forcing a failure. [ 457.213378][T18899] name failslab, interval 1, probability 0, space 0, times 0 [ 457.252389][T18899] CPU: 0 PID: 18899 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 457.261102][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.271257][T18899] Call Trace: [ 457.274556][T18899] dump_stack+0x18f/0x20d [ 457.278989][T18899] should_fail.cold+0x5/0x14 [ 457.283593][T18899] should_failslab+0x5/0xf [ 457.288021][T18899] kmem_cache_alloc_trace+0x240/0x2d0 [ 457.293401][T18899] open_substream+0xe9/0x880 [ 457.298003][T18899] rawmidi_open_priv+0x519/0x6f0 [ 457.302954][T18899] snd_rawmidi_kernel_open+0x1b5/0x270 [ 457.308423][T18899] ? midisynth_use+0x250/0x250 [ 457.315355][T18899] midisynth_subscribe+0xf2/0x350 [ 457.320374][T18899] ? midisynth_use+0x250/0x250 [ 457.325230][T18899] ? down_write+0xdb/0x150 [ 457.329642][T18899] ? down_write_killable+0x170/0x170 [ 457.335014][T18899] ? midisynth_use+0x250/0x250 [ 457.339862][T18899] check_and_subscribe_port+0x89a/0xb80 [ 457.345429][T18899] snd_seq_port_connect+0x2e6/0x520 [ 457.350619][T18899] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 457.356594][T18899] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 457.362823][T18899] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 457.368612][T18899] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 457.374587][T18899] snd_seq_kernel_client_ctl+0xeb/0x130 [ 457.380148][T18899] snd_seq_oss_midi_open+0x466/0x6e0 [ 457.385412][T18899] ? snd_seq_oss_midi_setup+0x50/0x50 [ 457.390764][T18899] ? mark_held_locks+0x9f/0xe0 [ 457.395512][T18899] ? lockdep_hardirqs_on+0x6a/0xe0 [ 457.400638][T18899] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 457.406432][T18899] ? get_mdev+0x75/0x90 [ 457.410575][T18899] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 457.416449][T18899] snd_seq_oss_open+0x87e/0xa10 [ 457.421370][T18899] odev_open+0x6c/0x90 [ 457.425474][T18899] ? odev_release+0x70/0x70 [ 457.429955][T18899] soundcore_open+0x445/0x600 [ 457.434620][T18899] ? sound_devnode+0xf0/0xf0 [ 457.439186][T18899] chrdev_open+0x266/0x770 [ 457.443578][T18899] ? cdev_device_add+0x210/0x210 [ 457.448583][T18899] ? security_file_open+0x1f5/0x3f0 [ 457.453779][T18899] do_dentry_open+0x501/0x1290 [ 457.458524][T18899] ? cdev_device_add+0x210/0x210 [ 457.463444][T18899] path_openat+0x1bb9/0x2750 [ 457.468120][T18899] ? path_lookupat+0x830/0x830 [ 457.472872][T18899] ? cache_grow_end+0x46/0x170 [ 457.477721][T18899] ? lock_is_held_type+0xb0/0xe0 [ 457.482639][T18899] do_filp_open+0x17e/0x3c0 [ 457.487121][T18899] ? may_open_dev+0xf0/0xf0 [ 457.491607][T18899] ? do_raw_spin_lock+0x120/0x2b0 [ 457.496608][T18899] ? rwlock_bug.part.0+0x90/0x90 [ 457.501549][T18899] ? _raw_spin_unlock+0x24/0x40 [ 457.507418][T18899] ? __alloc_fd+0x28d/0x600 [ 457.511918][T18899] do_sys_openat2+0x16f/0x3b0 [ 457.516573][T18899] ? build_open_flags+0x650/0x650 [ 457.521574][T18899] ? __mutex_unlock_slowpath+0xe2/0x610 [ 457.527108][T18899] ? wait_for_completion+0x260/0x260 [ 457.532375][T18899] __x64_sys_openat+0x13f/0x1f0 [ 457.537205][T18899] ? __ia32_sys_open+0x1c0/0x1c0 [ 457.542116][T18899] ? ksys_write+0x1a5/0x250 [ 457.546597][T18899] ? lock_is_held_type+0xb0/0xe0 [ 457.551512][T18899] ? do_syscall_64+0x1c/0xe0 [ 457.556084][T18899] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 457.562056][T18899] do_syscall_64+0x60/0xe0 [ 457.566484][T18899] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 457.572373][T18899] RIP: 0033:0x45cba9 [ 457.576244][T18899] Code: Bad RIP value. [ 457.580295][T18899] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.588685][T18899] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 457.596633][T18899] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 457.604582][T18899] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 457.612530][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 457.620493][T18899] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 457.644543][ T5] usb 1-1: USB disconnect, device number 59 02:34:25 executing program 0 (fault-call:4 fault-nth:36): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:25 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x20, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) r7 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r8 = geteuid() fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0f820000", @ANYRES32=r8, @ANYBLOB="040007000000080800000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e4351b8a988fdf864752deb7e426f64653d30303030303030303030303030303030303132303030302c5df717020475a2987318f5d14b44f6e905f49874900a7725d00c", @ANYRESDEC=r8, @ANYBLOB="2c67fb63f24a8a8ac0bb", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,dont_hash,\x00']) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@broadcast, 0x4e22, 0x2, 0x4e22, 0x9, 0xa, 0x80, 0x80, 0x6c, 0x0, r8}, {0x0, 0xfffffffffffffff9, 0x100, 0x8, 0x9, 0x81, 0x6}, {0x1000, 0x1f, 0x4, 0x3}, 0x8001, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in6=@private0, 0x4d3, 0x32}, 0x2, @in6=@remote, 0x3501, 0x2, 0x3, 0x40, 0x40, 0x8, 0x1ff}}, 0xe8) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r9, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:25 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000080)=""/66, 0x42}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:25 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x9, 0x7, 0x10, @mcast1, @local, 0x8, 0x80, 0x244f6f9c, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0x6, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private0, 0x8000, 0x700, 0x2c, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0x1000, 0x10, @remote, @mcast2, 0x7800, 0x7, 0xffff, 0xfff}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf25070000004400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020074756e6c3000000000000000000000000800030003000000140002007465616d5f736c6176655f3100000000240001800800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="20658100", @ANYRES32=0x0, @ANYBLOB="54000180080003000000000014000200776732000000000000000000000000001400020069703667726574617030000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300020000005400018014000200626174616476300000000000000000000800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006d6163766c616e3100000000000000005800018008000300030000001400020073797a6b616c6c657231000000000000140002007866726d300000000000000000000000140002006d6163766c616e310000000000000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="6c00018008000300060000000800030003000000080003000300000008000300010000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f6d6163767461700000000800030002000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x4c004) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 458.587232][ T2488] usb 1-1: new high-speed USB device number 60 using dummy_hcd 02:34:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 458.841116][ T2488] usb 1-1: Using ep0 maxpacket: 8 [ 458.967573][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 458.976345][ T2488] usb 1-1: config 0 has no interface number 0 [ 459.001900][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 459.034390][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 459.062890][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 459.078938][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 459.091961][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.106412][ T2488] usb 1-1: config 0 descriptor?? [ 459.128705][T18982] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.135903][T18982] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 459.374022][T18982] FAULT_INJECTION: forcing a failure. [ 459.374022][T18982] name failslab, interval 1, probability 0, space 0, times 0 [ 459.387211][T18982] CPU: 1 PID: 18982 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 459.395892][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.405949][T18982] Call Trace: [ 459.409247][T18982] dump_stack+0x18f/0x20d [ 459.413588][T18982] should_fail.cold+0x5/0x14 [ 459.418186][T18982] should_failslab+0x5/0xf [ 459.422615][T18982] kmem_cache_alloc_node_trace+0x27d/0x400 [ 459.428518][T18982] __kmalloc_node+0x38/0x60 [ 459.433025][T18982] kvmalloc_node+0x61/0xf0 [ 459.437446][T18982] open_substream+0x33d/0x880 [ 459.442133][T18982] rawmidi_open_priv+0x519/0x6f0 [ 459.447080][T18982] snd_rawmidi_kernel_open+0x1b5/0x270 [ 459.452551][T18982] ? midisynth_use+0x250/0x250 [ 459.457321][T18982] midisynth_subscribe+0xf2/0x350 [ 459.462354][T18982] ? midisynth_use+0x250/0x250 [ 459.467117][T18982] ? down_write+0xdb/0x150 [ 459.471511][T18982] ? down_write_killable+0x170/0x170 [ 459.476797][T18982] ? midisynth_use+0x250/0x250 [ 459.481711][T18982] check_and_subscribe_port+0x89a/0xb80 [ 459.487275][T18982] snd_seq_port_connect+0x2e6/0x520 [ 459.492465][T18982] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 459.498342][T18982] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 459.504568][T18982] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 459.510359][T18982] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 459.516322][T18982] snd_seq_kernel_client_ctl+0xeb/0x130 [ 459.521851][T18982] snd_seq_oss_midi_open+0x466/0x6e0 [ 459.527254][T18982] ? snd_seq_oss_midi_setup+0x50/0x50 [ 459.532599][T18982] ? mark_held_locks+0x9f/0xe0 [ 459.537341][T18982] ? lockdep_hardirqs_on+0x6a/0xe0 [ 459.542430][T18982] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 459.548387][T18982] ? get_mdev+0x75/0x90 [ 459.552534][T18982] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 459.558407][T18982] snd_seq_oss_open+0x87e/0xa10 [ 459.563352][T18982] odev_open+0x6c/0x90 [ 459.567396][T18982] ? odev_release+0x70/0x70 [ 459.571872][T18982] soundcore_open+0x445/0x600 [ 459.576523][T18982] ? sound_devnode+0xf0/0xf0 [ 459.581092][T18982] chrdev_open+0x266/0x770 [ 459.585497][T18982] ? cdev_device_add+0x210/0x210 [ 459.590422][T18982] ? security_file_open+0x1f5/0x3f0 [ 459.595596][T18982] do_dentry_open+0x501/0x1290 [ 459.600334][T18982] ? cdev_device_add+0x210/0x210 [ 459.605335][T18982] path_openat+0x1bb9/0x2750 [ 459.609917][T18982] ? path_lookupat+0x830/0x830 [ 459.614655][T18982] ? cache_grow_end+0x46/0x170 [ 459.619398][T18982] ? lock_is_held_type+0xb0/0xe0 [ 459.624315][T18982] do_filp_open+0x17e/0x3c0 [ 459.628794][T18982] ? may_open_dev+0xf0/0xf0 [ 459.633277][T18982] ? do_raw_spin_lock+0x120/0x2b0 [ 459.638291][T18982] ? rwlock_bug.part.0+0x90/0x90 [ 459.643207][T18982] ? _raw_spin_unlock+0x24/0x40 [ 459.648043][T18982] ? __alloc_fd+0x28d/0x600 [ 459.652525][T18982] do_sys_openat2+0x16f/0x3b0 [ 459.657180][T18982] ? build_open_flags+0x650/0x650 [ 459.662176][T18982] ? __mutex_unlock_slowpath+0xe2/0x610 [ 459.667695][T18982] ? wait_for_completion+0x260/0x260 [ 459.672956][T18982] __x64_sys_openat+0x13f/0x1f0 [ 459.677780][T18982] ? __ia32_sys_open+0x1c0/0x1c0 [ 459.682703][T18982] ? ksys_write+0x1a5/0x250 [ 459.687193][T18982] ? lock_is_held_type+0xb0/0xe0 [ 459.692105][T18982] ? do_syscall_64+0x1c/0xe0 [ 459.696668][T18982] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 459.702622][T18982] do_syscall_64+0x60/0xe0 [ 459.707016][T18982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 459.712884][T18982] RIP: 0033:0x45cba9 [ 459.716748][T18982] Code: Bad RIP value. [ 459.720787][T18982] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.729173][T18982] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 459.737118][T18982] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 459.745063][T18982] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 459.753019][T18982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 459.760964][T18982] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 459.787528][ T2514] usb 1-1: USB disconnect, device number 60 02:34:27 executing program 0 (fault-call:4 fault-nth:37): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:27 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x420200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x26) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r5, r6+60000000}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x0, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:27 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x188, r2, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @private=0xa010101}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4848}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x94, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004000}, 0x40001) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xfffffff8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:27 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="19000000f29079bfc0f928000000000000000000", @ANYRES32=r1], 0x2}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r1, 0x4, 0x0, 0x1, 0x1, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x80, 0x9, 0x36}}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="5d20bd33d74b"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c843}, 0x40891) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 460.717109][ T2488] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 460.957118][ T2488] usb 1-1: Using ep0 maxpacket: 8 [ 461.087481][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 461.095521][ T2488] usb 1-1: config 0 has no interface number 0 [ 461.137082][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 461.150638][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 461.161949][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 461.173205][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 461.184080][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.196706][ T2488] usb 1-1: config 0 descriptor?? [ 461.238925][T19064] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 461.251095][T19064] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 461.497849][T19064] FAULT_INJECTION: forcing a failure. [ 461.497849][T19064] name failslab, interval 1, probability 0, space 0, times 0 [ 461.518873][T19064] CPU: 1 PID: 19064 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 461.527583][T19064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.537725][T19064] Call Trace: [ 461.541024][T19064] dump_stack+0x18f/0x20d [ 461.545371][T19064] should_fail.cold+0x5/0x14 [ 461.549977][T19064] should_failslab+0x5/0xf [ 461.554407][T19064] kmem_cache_alloc_node_trace+0x27d/0x400 [ 461.560259][T19064] __kmalloc_node+0x38/0x60 [ 461.564769][T19064] kvmalloc_node+0x61/0xf0 [ 461.569202][T19064] open_substream+0x33d/0x880 [ 461.573925][T19064] rawmidi_open_priv+0x519/0x6f0 [ 461.578887][T19064] snd_rawmidi_kernel_open+0x1b5/0x270 [ 461.584360][T19064] ? midisynth_use+0x250/0x250 [ 461.589141][T19064] midisynth_subscribe+0xf2/0x350 [ 461.594278][T19064] ? midisynth_use+0x250/0x250 [ 461.599055][T19064] ? down_write+0xdb/0x150 [ 461.603490][T19064] ? down_write_killable+0x170/0x170 [ 461.608790][T19064] ? midisynth_use+0x250/0x250 [ 461.613649][T19064] check_and_subscribe_port+0x89a/0xb80 [ 461.619216][T19064] snd_seq_port_connect+0x2e6/0x520 [ 461.624433][T19064] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 461.630340][T19064] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 461.636588][T19064] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 461.642382][T19064] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 461.648362][T19064] snd_seq_kernel_client_ctl+0xeb/0x130 [ 461.653904][T19064] snd_seq_oss_midi_open+0x466/0x6e0 [ 461.659193][T19064] ? snd_seq_oss_midi_setup+0x50/0x50 [ 461.664556][T19064] ? mark_held_locks+0x9f/0xe0 [ 461.669323][T19064] ? lockdep_hardirqs_on+0x6a/0xe0 [ 461.674428][T19064] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 461.680231][T19064] ? get_mdev+0x75/0x90 [ 461.684419][T19064] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 461.690484][T19064] snd_seq_oss_open+0x87e/0xa10 [ 461.695322][T19064] odev_open+0x6c/0x90 [ 461.699381][T19064] ? odev_release+0x70/0x70 [ 461.703875][T19064] soundcore_open+0x445/0x600 [ 461.708545][T19064] ? sound_devnode+0xf0/0xf0 [ 461.713125][T19064] chrdev_open+0x266/0x770 [ 461.717643][T19064] ? cdev_device_add+0x210/0x210 [ 461.722579][T19064] ? security_file_open+0x1f5/0x3f0 [ 461.727777][T19064] do_dentry_open+0x501/0x1290 [ 461.732538][T19064] ? cdev_device_add+0x210/0x210 [ 461.737475][T19064] path_openat+0x1bb9/0x2750 [ 461.742180][T19064] ? path_lookupat+0x830/0x830 [ 461.746941][T19064] ? cache_grow_end+0x46/0x170 [ 461.751701][T19064] ? lock_is_held_type+0xb0/0xe0 [ 461.756628][T19064] do_filp_open+0x17e/0x3c0 [ 461.761112][T19064] ? may_open_dev+0xf0/0xf0 [ 461.765601][T19064] ? do_raw_spin_lock+0x120/0x2b0 [ 461.770607][T19064] ? rwlock_bug.part.0+0x90/0x90 [ 461.775542][T19064] ? _raw_spin_unlock+0x24/0x40 [ 461.780470][T19064] ? __alloc_fd+0x28d/0x600 [ 461.784969][T19064] do_sys_openat2+0x16f/0x3b0 [ 461.789640][T19064] ? build_open_flags+0x650/0x650 [ 461.794656][T19064] ? __mutex_unlock_slowpath+0xe2/0x610 [ 461.800193][T19064] ? wait_for_completion+0x260/0x260 [ 461.805462][T19064] __x64_sys_openat+0x13f/0x1f0 [ 461.810316][T19064] ? __ia32_sys_open+0x1c0/0x1c0 [ 461.815240][T19064] ? ksys_write+0x1a5/0x250 [ 461.819756][T19064] ? lock_is_held_type+0xb0/0xe0 [ 461.824687][T19064] ? do_syscall_64+0x1c/0xe0 [ 461.829268][T19064] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 461.835256][T19064] do_syscall_64+0x60/0xe0 [ 461.839680][T19064] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 461.845562][T19064] RIP: 0033:0x45cba9 [ 461.849436][T19064] Code: Bad RIP value. [ 461.853489][T19064] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.861877][T19064] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 461.869836][T19064] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 461.877795][T19064] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 461.885761][T19064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 461.893748][T19064] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 461.924398][ T2478] usb 1-1: USB disconnect, device number 61 02:34:29 executing program 0 (fault-call:4 fault-nth:38): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') dup3(r4, r3, 0x0) fcntl$getown(r4, 0x9) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}}, 0x0) tkill(r2, 0x1004000000016) 02:34:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:29 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x109182, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:29 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xe8, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80c}, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 462.847179][ T2488] usb 1-1: new high-speed USB device number 62 using dummy_hcd 02:34:30 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x3000000000000000, 0x80) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x10000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 463.106984][ T2488] usb 1-1: Using ep0 maxpacket: 8 02:34:30 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 463.257330][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 463.265488][ T2488] usb 1-1: config 0 has no interface number 0 [ 463.316667][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 02:34:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 463.383566][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 463.409546][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 02:34:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:30 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) [ 463.434057][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 463.461332][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.493693][ T2488] usb 1-1: config 0 descriptor?? [ 463.538537][T19147] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 463.545903][T19147] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 463.807974][T19147] FAULT_INJECTION: forcing a failure. [ 463.807974][T19147] name failslab, interval 1, probability 0, space 0, times 0 [ 463.838099][T19147] CPU: 0 PID: 19147 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 463.846802][T19147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.856863][T19147] Call Trace: [ 463.860166][T19147] dump_stack+0x18f/0x20d [ 463.864519][T19147] should_fail.cold+0x5/0x14 [ 463.869475][T19147] should_failslab+0x5/0xf [ 463.873988][T19147] kmem_cache_alloc_trace+0x240/0x2d0 [ 463.879393][T19147] dummy_urb_enqueue+0x80/0x890 [ 463.884271][T19147] usb_hcd_submit_urb+0x2ad/0x2220 [ 463.889394][T19147] ? save_stack+0x32/0x40 [ 463.893744][T19147] ? save_stack+0x1b/0x40 [ 463.898080][T19147] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 463.903900][T19147] ? kvmalloc_node+0x61/0xf0 [ 463.908588][T19147] ? lock_is_held_type+0xb0/0xe0 [ 463.913537][T19147] ? usb_add_hcd+0x2c0/0x2c0 [ 463.918149][T19147] ? __mutex_lock+0x626/0x10d0 [ 463.922922][T19147] ? lock_release+0x8d0/0x8d0 [ 463.927613][T19147] ? do_syscall_64+0x60/0xe0 [ 463.932212][T19147] ? substream_open.isra.0+0xab/0xc10 [ 463.937609][T19147] usb_submit_urb+0xb4e/0x1320 [ 463.942394][T19147] snd_usbmidi_input_start.part.0+0x101/0x200 [ 463.948514][T19147] substream_open.isra.0+0x82c/0xc10 [ 463.953818][T19147] open_substream+0x42e/0x880 [ 463.958515][T19147] rawmidi_open_priv+0x519/0x6f0 [ 463.963469][T19147] snd_rawmidi_kernel_open+0x1b5/0x270 [ 463.968938][T19147] ? midisynth_use+0x250/0x250 [ 463.973716][T19147] midisynth_subscribe+0xf2/0x350 [ 463.978759][T19147] ? midisynth_use+0x250/0x250 [ 463.983535][T19147] ? down_write+0xdb/0x150 [ 463.987966][T19147] ? down_write_killable+0x170/0x170 [ 463.993264][T19147] ? midisynth_use+0x250/0x250 [ 463.998049][T19147] check_and_subscribe_port+0x89a/0xb80 [ 464.003615][T19147] snd_seq_port_connect+0x2e6/0x520 [ 464.008823][T19147] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 464.014719][T19147] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 464.020967][T19147] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 464.026776][T19147] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 464.032771][T19147] snd_seq_kernel_client_ctl+0xeb/0x130 [ 464.038327][T19147] snd_seq_oss_midi_open+0x466/0x6e0 [ 464.043622][T19147] ? snd_seq_oss_midi_setup+0x50/0x50 [ 464.049003][T19147] ? mark_held_locks+0x9f/0xe0 [ 464.054303][T19147] ? lockdep_hardirqs_on+0x6a/0xe0 [ 464.059424][T19147] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 464.065273][T19147] ? get_mdev+0x75/0x90 [ 464.069444][T19147] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 464.075350][T19147] snd_seq_oss_open+0x87e/0xa10 [ 464.080211][T19147] odev_open+0x6c/0x90 [ 464.084281][T19147] ? odev_release+0x70/0x70 [ 464.088786][T19147] soundcore_open+0x445/0x600 [ 464.093472][T19147] ? sound_devnode+0xf0/0xf0 [ 464.098065][T19147] chrdev_open+0x266/0x770 [ 464.102489][T19147] ? cdev_device_add+0x210/0x210 [ 464.107445][T19147] ? security_file_open+0x1f5/0x3f0 [ 464.112652][T19147] do_dentry_open+0x501/0x1290 [ 464.117424][T19147] ? cdev_device_add+0x210/0x210 [ 464.122379][T19147] path_openat+0x1bb9/0x2750 [ 464.126991][T19147] ? path_lookupat+0x830/0x830 [ 464.131758][T19147] ? cache_grow_end+0x46/0x170 [ 464.136540][T19147] ? lock_is_held_type+0xb0/0xe0 [ 464.143923][T19147] do_filp_open+0x17e/0x3c0 [ 464.148438][T19147] ? may_open_dev+0xf0/0xf0 [ 464.152954][T19147] ? do_raw_spin_lock+0x120/0x2b0 [ 464.157981][T19147] ? rwlock_bug.part.0+0x90/0x90 [ 464.162929][T19147] ? _raw_spin_unlock+0x24/0x40 [ 464.167780][T19147] ? __alloc_fd+0x28d/0x600 [ 464.172304][T19147] do_sys_openat2+0x16f/0x3b0 [ 464.176989][T19147] ? build_open_flags+0x650/0x650 [ 464.182021][T19147] ? __mutex_unlock_slowpath+0xe2/0x610 [ 464.187578][T19147] ? wait_for_completion+0x260/0x260 [ 464.192875][T19147] __x64_sys_openat+0x13f/0x1f0 [ 464.197729][T19147] ? __ia32_sys_open+0x1c0/0x1c0 [ 464.202669][T19147] ? ksys_write+0x1a5/0x250 [ 464.207185][T19147] ? lock_is_held_type+0xb0/0xe0 [ 464.212137][T19147] ? do_syscall_64+0x1c/0xe0 [ 464.216736][T19147] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 464.222729][T19147] do_syscall_64+0x60/0xe0 [ 464.227153][T19147] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 464.233049][T19147] RIP: 0033:0x45cba9 [ 464.237088][T19147] Code: Bad RIP value. [ 464.241156][T19147] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 464.251308][T19147] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 464.259287][T19147] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 464.267266][T19147] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 464.275244][T19147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 464.283213][T19147] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 464.297943][T19147] usb 1-1: usb_submit_urb: -12 [ 464.351263][ T2488] usb 1-1: USB disconnect, device number 62 02:34:31 executing program 0 (fault-call:4 fault-nth:39): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 02:34:31 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x40, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000080)={0x4, r5, 0x1}) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 465.216826][ T2488] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 465.476785][ T2488] usb 1-1: Using ep0 maxpacket: 8 02:34:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:34:32 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x303941, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x100, 0x14b080) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x105000, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x58, 0x20, 0x0, 0x0) sched_setparam(0x0, 0x0) 02:34:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/200, 0xc8}], 0x1) r3 = syz_open_procfs(r1, &(0x7f0000000080)='net/ip_tables_targets\x00') dup3(r3, r2, 0x0) epoll_pwait(r3, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x9ba, &(0x7f0000000280)={[0x1]}, 0x8) clock_gettime(0x0, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000300)="1c35f6ee3a3cba58ffd502f32a2327386dc682214afd367aa281fac8cc6e0371a02e05d90c06759b5f5bcfadea226b81b1e717bd0daaa4c735a7aad6a3a60a7c15085629d3654fc5197bb509f6358b6871a31b7433c2cffad0534aefc16d454ac39560099f0e84857c1d8ae1ebf69076bfaeaa732f8519b68171b5215e4aff2c2bec0c27a6c2047efa73ef3b", &(0x7f00000009c0)="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"}}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r6, 0x87bb65a2c3f858c8, &(0x7f0000000140)={{}, {r7, r8+60000000}}, 0x0) tkill(0x0, 0x32) [ 465.597166][ T2488] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 465.622302][ T2488] usb 1-1: config 0 has no interface number 0 [ 465.660934][ T2488] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 02:34:32 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)={0x164, r2, 0x200, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x7fff}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000024) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x429, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 465.701895][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 465.748012][ T2488] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 465.785108][ T2488] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 465.831634][ T2488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.878765][ T2488] usb 1-1: config 0 descriptor?? 02:34:32 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) [ 465.908378][T19231] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 465.915709][T19231] raw-gadget gadget: fail, usb_ep_enable returned -22 02:34:33 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) [ 466.174981][T19231] FAULT_INJECTION: forcing a failure. [ 466.174981][T19231] name failslab, interval 1, probability 0, space 0, times 0 [ 466.206173][T19231] CPU: 1 PID: 19231 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 466.214875][T19231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.224925][T19231] Call Trace: [ 466.228207][T19231] dump_stack+0x18f/0x20d [ 466.232527][T19231] should_fail.cold+0x5/0x14 [ 466.237110][T19231] should_failslab+0x5/0xf [ 466.241509][T19231] kmem_cache_alloc_trace+0x240/0x2d0 [ 466.246868][T19231] dummy_urb_enqueue+0x80/0x890 [ 466.251709][T19231] usb_hcd_submit_urb+0x2ad/0x2220 [ 466.257327][T19231] ? save_stack+0x32/0x40 [ 466.261635][T19231] ? save_stack+0x1b/0x40 [ 466.265943][T19231] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 466.271730][T19231] ? kvmalloc_node+0x61/0xf0 [ 466.276321][T19231] ? lock_is_held_type+0xb0/0xe0 [ 466.281238][T19231] ? usb_add_hcd+0x2c0/0x2c0 [ 466.285827][T19231] ? __mutex_lock+0x626/0x10d0 [ 466.290578][T19231] ? lock_release+0x8d0/0x8d0 [ 466.295235][T19231] ? do_syscall_64+0x60/0xe0 [ 466.299810][T19231] ? substream_open.isra.0+0xab/0xc10 [ 466.305168][T19231] usb_submit_urb+0xb4e/0x1320 [ 466.310009][T19231] snd_usbmidi_input_start.part.0+0x101/0x200 [ 466.316059][T19231] substream_open.isra.0+0x82c/0xc10 [ 466.321325][T19231] open_substream+0x42e/0x880 [ 466.325986][T19231] rawmidi_open_priv+0x519/0x6f0 [ 466.330907][T19231] snd_rawmidi_kernel_open+0x1b5/0x270 [ 466.336346][T19231] ? midisynth_use+0x250/0x250 [ 466.341090][T19231] midisynth_subscribe+0xf2/0x350 [ 466.346096][T19231] ? midisynth_use+0x250/0x250 [ 466.350842][T19231] ? down_write+0xdb/0x150 [ 466.355240][T19231] ? down_write_killable+0x170/0x170 [ 466.360515][T19231] ? midisynth_use+0x250/0x250 [ 466.365258][T19231] check_and_subscribe_port+0x89a/0xb80 [ 466.370791][T19231] snd_seq_port_connect+0x2e6/0x520 [ 466.376059][T19231] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 466.382018][T19231] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 466.388295][T19231] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 466.394110][T19231] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 466.400083][T19231] snd_seq_kernel_client_ctl+0xeb/0x130 [ 466.405619][T19231] snd_seq_oss_midi_open+0x466/0x6e0 [ 466.410912][T19231] ? snd_seq_oss_midi_setup+0x50/0x50 [ 466.416271][T19231] ? mark_held_locks+0x9f/0xe0 [ 466.421047][T19231] ? lockdep_hardirqs_on+0x6a/0xe0 [ 466.426230][T19231] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 466.432125][T19231] ? get_mdev+0x75/0x90 [ 466.436265][T19231] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 466.442143][T19231] snd_seq_oss_open+0x87e/0xa10 [ 466.446976][T19231] odev_open+0x6c/0x90 [ 466.451026][T19231] ? odev_release+0x70/0x70 [ 466.455510][T19231] soundcore_open+0x445/0x600 [ 466.460181][T19231] ? sound_devnode+0xf0/0xf0 [ 466.464762][T19231] chrdev_open+0x266/0x770 [ 466.469159][T19231] ? cdev_device_add+0x210/0x210 [ 466.474080][T19231] ? security_file_open+0x1f5/0x3f0 [ 466.479260][T19231] do_dentry_open+0x501/0x1290 [ 466.484003][T19231] ? cdev_device_add+0x210/0x210 [ 466.488925][T19231] path_openat+0x1bb9/0x2750 [ 466.493500][T19231] ? path_lookupat+0x830/0x830 [ 466.498243][T19231] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 466.504209][T19231] ? lock_is_held_type+0xb0/0xe0 [ 466.509129][T19231] do_filp_open+0x17e/0x3c0 [ 466.513614][T19231] ? may_open_dev+0xf0/0xf0 [ 466.518102][T19231] ? do_raw_spin_lock+0x120/0x2b0 [ 466.523114][T19231] ? rwlock_bug.part.0+0x90/0x90 [ 466.528050][T19231] ? _raw_spin_unlock+0x24/0x40 [ 466.532878][T19231] ? __alloc_fd+0x28d/0x600 [ 466.537377][T19231] do_sys_openat2+0x16f/0x3b0 [ 466.542035][T19231] ? build_open_flags+0x650/0x650 [ 466.547050][T19231] ? __mutex_unlock_slowpath+0xe2/0x610 [ 466.552587][T19231] ? wait_for_completion+0x260/0x260 [ 466.558645][T19231] __x64_sys_openat+0x13f/0x1f0 [ 466.563474][T19231] ? __ia32_sys_open+0x1c0/0x1c0 [ 466.568398][T19231] ? ksys_write+0x1a5/0x250 [ 466.572880][T19231] ? lock_is_held_type+0xb0/0xe0 [ 466.577812][T19231] ? do_syscall_64+0x1c/0xe0 [ 466.582385][T19231] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 466.588350][T19231] do_syscall_64+0x60/0xe0 [ 466.592756][T19231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 466.598628][T19231] RIP: 0033:0x45cba9 [ 466.602497][T19231] Code: Bad RIP value. [ 466.606553][T19231] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 466.615029][T19231] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 466.622981][T19231] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 466.630932][T19231] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 466.638880][T19231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 466.648825][T19231] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 02:34:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0xb, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x372f76e66e2dcb8b) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000008c0)=""/197, 0xc5}], 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) dup3(r3, r3, 0x80000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x1004000000016) 02:34:33 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x2004c004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x5, 0xffffffffffffffec, 0x3, 0x3, 0x9, 0x1d, 0x0, 0x0, 0x100, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc626, 0x4, @perf_config_ext={0x66, 0x1}, 0x40000, 0x200005, 0x5, 0x1, 0x9, 0x4, 0x7}, r0, 0x7, r3, 0x3) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x2) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x5a, 0x0, 0x0) clone3(0x0, 0x0) sched_setparam(0x0, 0x0) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) [ 466.791546][T19231] usb 1-1: usb_submit_urb: -12 [ 466.803836][T19231] ------------[ cut here ]------------ [ 466.816505][T19231] URB 000000008b0c7abb submitted while active [ 466.860413][T19231] WARNING: CPU: 0 PID: 19231 at drivers/usb/core/urb.c:363 usb_submit_urb+0x112f/0x1320 [ 466.919366][T19231] Kernel panic - not syncing: panic_on_warn set ... [ 466.925999][T19231] CPU: 0 PID: 19231 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 466.934674][T19231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.944737][T19231] Call Trace: [ 466.948037][T19231] dump_stack+0x18f/0x20d [ 466.952377][T19231] panic+0x2e3/0x75c [ 466.956276][T19231] ? __warn_printk+0xf3/0xf3 [ 466.960959][T19231] ? __warn.cold+0x5/0x45 [ 466.965296][T19231] ? usb_submit_urb+0x112f/0x1320 [ 466.970321][T19231] __warn.cold+0x20/0x45 [ 466.974568][T19231] ? usb_submit_urb+0x112f/0x1320 [ 466.979594][T19231] report_bug+0x1bd/0x210 [ 466.983932][T19231] handle_bug+0x38/0x90 [ 466.988089][T19231] ? __warn_printk+0xc6/0xf3 [ 466.992687][T19231] exc_invalid_op+0x13/0x40 [ 466.997196][T19231] asm_exc_invalid_op+0x12/0x20 [ 467.002059][T19231] RIP: 0010:usb_submit_urb+0x112f/0x1320 [ 467.007697][T19231] Code: 89 de e8 24 01 5f fc 84 db 0f 85 3d fa ff ff e8 d7 04 5f fc 4c 89 fe 48 c7 c7 c0 04 cd 88 c6 05 78 f5 94 05 01 e8 23 45 30 fc <0f> 0b e9 1b fa ff ff c7 44 24 14 01 00 00 00 e9 3e f5 ff ff 41 bd [ 467.027390][T19231] RSP: 0018:ffffc90001c172a0 EFLAGS: 00010282 [ 467.033459][T19231] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 467.041436][T19231] RDX: 0000000000040000 RSI: ffffffff815d4f87 RDI: fffff52000382e46 [ 467.049516][T19231] RBP: ffff888090b79400 R08: 0000000000000001 R09: ffff8880ae6318e7 [ 467.058288][T19231] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 467.066268][T19231] R13: 00000000fffffff0 R14: ffff8880a96e9400 R15: ffff8880a96e9400 [ 467.074279][T19231] ? vprintk_func+0x97/0x1a6 [ 467.078903][T19231] snd_usbmidi_input_start.part.0+0x101/0x200 [ 467.084986][T19231] substream_open.isra.0+0x82c/0xc10 [ 467.090464][T19231] open_substream+0x42e/0x880 [ 467.095160][T19231] rawmidi_open_priv+0x519/0x6f0 [ 467.100118][T19231] snd_rawmidi_kernel_open+0x1b5/0x270 [ 467.105586][T19231] ? midisynth_use+0x250/0x250 [ 467.110447][T19231] midisynth_subscribe+0xf2/0x350 [ 467.116526][T19231] ? midisynth_use+0x250/0x250 [ 467.121304][T19231] ? down_write+0xdb/0x150 [ 467.125728][T19231] ? down_write_killable+0x170/0x170 [ 467.131028][T19231] ? midisynth_use+0x250/0x250 [ 467.135797][T19231] check_and_subscribe_port+0x89a/0xb80 [ 467.141360][T19231] snd_seq_port_connect+0x2e6/0x520 [ 467.146574][T19231] snd_seq_ioctl_subscribe_port+0x1fc/0x400 [ 467.152916][T19231] ? snd_seq_ioctl_unsubscribe_port+0x400/0x400 [ 467.159175][T19231] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 467.165002][T19231] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 467.171088][T19231] snd_seq_kernel_client_ctl+0xeb/0x130 [ 467.176646][T19231] snd_seq_oss_midi_open+0x466/0x6e0 [ 467.182036][T19231] ? snd_seq_oss_midi_setup+0x50/0x50 [ 467.187417][T19231] ? mark_held_locks+0x9f/0xe0 [ 467.192196][T19231] ? lockdep_hardirqs_on+0x6a/0xe0 [ 467.197322][T19231] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 467.203138][T19231] ? get_mdev+0x75/0x90 [ 467.207302][T19231] snd_seq_oss_synth_setup_midi+0x123/0x520 [ 467.213204][T19231] snd_seq_oss_open+0x87e/0xa10 [ 467.218154][T19231] odev_open+0x6c/0x90 [ 467.222223][T19231] ? odev_release+0x70/0x70 [ 467.226727][T19231] soundcore_open+0x445/0x600 [ 467.231407][T19231] ? sound_devnode+0xf0/0xf0 [ 467.235997][T19231] chrdev_open+0x266/0x770 [ 467.240418][T19231] ? cdev_device_add+0x210/0x210 [ 467.245364][T19231] ? security_file_open+0x1f5/0x3f0 [ 467.250569][T19231] do_dentry_open+0x501/0x1290 [ 467.255376][T19231] ? cdev_device_add+0x210/0x210 [ 467.260327][T19231] path_openat+0x1bb9/0x2750 [ 467.264938][T19231] ? path_lookupat+0x830/0x830 [ 467.269711][T19231] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 467.275711][T19231] ? lock_is_held_type+0xb0/0xe0 [ 467.280664][T19231] do_filp_open+0x17e/0x3c0 [ 467.285172][T19231] ? may_open_dev+0xf0/0xf0 [ 467.289690][T19231] ? do_raw_spin_lock+0x120/0x2b0 [ 467.294719][T19231] ? rwlock_bug.part.0+0x90/0x90 [ 467.299670][T19231] ? _raw_spin_unlock+0x24/0x40 [ 467.304523][T19231] ? __alloc_fd+0x28d/0x600 [ 467.309040][T19231] do_sys_openat2+0x16f/0x3b0 [ 467.313745][T19231] ? build_open_flags+0x650/0x650 [ 467.318775][T19231] ? __mutex_unlock_slowpath+0xe2/0x610 [ 467.324328][T19231] ? wait_for_completion+0x260/0x260 [ 467.329620][T19231] __x64_sys_openat+0x13f/0x1f0 [ 467.334477][T19231] ? __ia32_sys_open+0x1c0/0x1c0 [ 467.339417][T19231] ? ksys_write+0x1a5/0x250 [ 467.343924][T19231] ? lock_is_held_type+0xb0/0xe0 [ 467.348866][T19231] ? do_syscall_64+0x1c/0xe0 [ 467.353464][T19231] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 467.359454][T19231] do_syscall_64+0x60/0xe0 [ 467.363874][T19231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 467.369766][T19231] RIP: 0033:0x45cba9 [ 467.373658][T19231] Code: Bad RIP value. [ 467.377738][T19231] RSP: 002b:00007fd46aba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.386154][T19231] RAX: ffffffffffffffda RBX: 00000000004fa1c0 RCX: 000000000045cba9 [ 467.394129][T19231] RDX: 0000000000080103 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 467.402192][T19231] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 467.410166][T19231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 467.420227][T19231] R13: 0000000000000813 R14: 00000000004caf66 R15: 00007fd46abaa6d4 [ 467.429774][T19231] Kernel Offset: disabled [ 467.434185][T19231] Rebooting in 86400 seconds..