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", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000180)={0x2, 0x4, 0x1aef18a3, 0x0, 'syz1\x00', 0x7}) [ 625.730538][ T3421] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.739685][ T3421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.771227][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.794166][ T3421] usb 3-1: Product: syz [ 625.795970][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.817420][ T3421] usb 3-1: Manufacturer: syz [ 625.837751][ T3421] usb 3-1: SerialNumber: syz [ 625.839381][ T17] usb 6-1: Product: syz [ 625.854693][T20256] ntfs: (device loop3): parse_options(): Unrecognized mount option f0x0000000000000000. [ 625.865149][ T17] usb 6-1: Manufacturer: syz [ 625.869922][ T17] usb 6-1: SerialNumber: syz [ 625.877263][T20256] ntfs: (device loop3): parse_options(): Unrecognized mount option permit_directio. [ 625.896036][T20256] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_role. [ 625.897316][ T3421] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 625.941455][ T17] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 626.165249][ T17] usb 3-1: USB disconnect, device number 9 [ 626.178317][ T8234] usb 6-1: USB disconnect, device number 7 01:50:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x0, 0x0, &(0x7f0000000000)) 01:50:55 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = getgid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000001480)=[{&(0x7f0000001640)="e2167a62774bb15212ebdd3f6ec9f3f81da8e7388499f41db0d8e02201aaec377b513c715b1d7640aa3888fceac3aed889c1b382a811fb506ea65edd64e02fc74d521dc2ff606133119de9ebe5bae2e08e0b7b8bdc96df5273af493a9363dd620d9f1eaa68bce5eff6298c31741a9b4e9ab620e559e52c2c3d89bbf91fd1259e20c6fcfced2a561d232556c1d60a53621b62557f412c1b3fc42e05f117520621ec68cf91dca71233dc968ab8284a10f2b62023d31b9b61902e0c62801d", 0xbd, 0x4}, {&(0x7f0000000240)="bca858ecd1e5f2377c8e4deb24d0d4ddf659e615aef497972bdc54ffdf266ddb7a974aed3a89d2bf8b581c4142860fdfe00e3630d9012dd823a693fd8a7c40573c8890b86a09e1f890b1b914dc2fe0252de5a1b2050b7a5654324e9aa4710d5b9a2ef4eb694c5ec9c57babb883637687c388891509654516c32ec56942d4f85645", 0x81}, {&(0x7f0000000300)="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", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 01:50:55 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:50:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) 01:50:55 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:50:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:50:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) [ 627.480579][T20294] ntfs: (device loop3): parse_options(): Unrecognized mount option f0x0000000000000000. 01:50:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) 01:50:56 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = getgid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000001480)=[{&(0x7f0000001640)="e2167a62774bb15212ebdd3f6ec9f3f81da8e7388499f41db0d8e02201aaec377b513c715b1d7640aa3888fceac3aed889c1b382a811fb506ea65edd64e02fc74d521dc2ff606133119de9ebe5bae2e08e0b7b8bdc96df5273af493a9363dd620d9f1eaa68bce5eff6298c31741a9b4e9ab620e559e52c2c3d89bbf91fd1259e20c6fcfced2a561d232556c1d60a53621b62557f412c1b3fc42e05f117520621ec68cf91dca71233dc968ab8284a10f2b62023d31b9b61902e0c62801d", 0xbd, 0x4}, {&(0x7f0000000240)="bca858ecd1e5f2377c8e4deb24d0d4ddf659e615aef497972bdc54ffdf266ddb7a974aed3a89d2bf8b581c4142860fdfe00e3630d9012dd823a693fd8a7c40573c8890b86a09e1f890b1b914dc2fe0252de5a1b2050b7a5654324e9aa4710d5b9a2ef4eb694c5ec9c57babb883637687c388891509654516c32ec56942d4f85645", 0x81}, {&(0x7f0000000300)="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", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) 01:50:56 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 01:50:56 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = getgid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000001480)=[{&(0x7f0000001640)="e2167a62774bb15212ebdd3f6ec9f3f81da8e7388499f41db0d8e02201aaec377b513c715b1d7640aa3888fceac3aed889c1b382a811fb506ea65edd64e02fc74d521dc2ff606133119de9ebe5bae2e08e0b7b8bdc96df5273af493a9363dd620d9f1eaa68bce5eff6298c31741a9b4e9ab620e559e52c2c3d89bbf91fd1259e20c6fcfced2a561d232556c1d60a53621b62557f412c1b3fc42e05f117520621ec68cf91dca71233dc968ab8284a10f2b62023d31b9b61902e0c62801d", 0xbd, 0x4}, {&(0x7f0000000240)="bca858ecd1e5f2377c8e4deb24d0d4ddf659e615aef497972bdc54ffdf266ddb7a974aed3a89d2bf8b581c4142860fdfe00e3630d9012dd823a693fd8a7c40573c8890b86a09e1f890b1b914dc2fe0252de5a1b2050b7a5654324e9aa4710d5b9a2ef4eb694c5ec9c57babb883637687c388891509654516c32ec56942d4f85645", 0x81}, {&(0x7f0000000300)="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", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 01:50:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) [ 627.810793][ T17] usb 1-1: new high-speed USB device number 67 using dummy_hcd 01:50:56 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = getgid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000001480)=[{&(0x7f0000001640)="e2167a62774bb15212ebdd3f6ec9f3f81da8e7388499f41db0d8e02201aaec377b513c715b1d7640aa3888fceac3aed889c1b382a811fb506ea65edd64e02fc74d521dc2ff606133119de9ebe5bae2e08e0b7b8bdc96df5273af493a9363dd620d9f1eaa68bce5eff6298c31741a9b4e9ab620e559e52c2c3d89bbf91fd1259e20c6fcfced2a561d232556c1d60a53621b62557f412c1b3fc42e05f117520621ec68cf91dca71233dc968ab8284a10f2b62023d31b9b61902e0c62801d", 0xbd, 0x4}, {&(0x7f0000000240)="bca858ecd1e5f2377c8e4deb24d0d4ddf659e615aef497972bdc54ffdf266ddb7a974aed3a89d2bf8b581c4142860fdfe00e3630d9012dd823a693fd8a7c40573c8890b86a09e1f890b1b914dc2fe0252de5a1b2050b7a5654324e9aa4710d5b9a2ef4eb694c5ec9c57babb883637687c388891509654516c32ec56942d4f85645", 0x81}, {&(0x7f0000000300)="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", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:50:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) [ 628.084740][ T17] usb 1-1: device descriptor read/64, error 18 [ 628.166659][ T8234] usb 3-1: new high-speed USB device number 10 using dummy_hcd 01:50:56 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:50:56 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = getgid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000001480)=[{&(0x7f0000001640)="e2167a62774bb15212ebdd3f6ec9f3f81da8e7388499f41db0d8e02201aaec377b513c715b1d7640aa3888fceac3aed889c1b382a811fb506ea65edd64e02fc74d521dc2ff606133119de9ebe5bae2e08e0b7b8bdc96df5273af493a9363dd620d9f1eaa68bce5eff6298c31741a9b4e9ab620e559e52c2c3d89bbf91fd1259e20c6fcfced2a561d232556c1d60a53621b62557f412c1b3fc42e05f117520621ec68cf91dca71233dc968ab8284a10f2b62023d31b9b61902e0c62801d", 0xbd, 0x4}, {&(0x7f0000000240)="bca858ecd1e5f2377c8e4deb24d0d4ddf659e615aef497972bdc54ffdf266ddb7a974aed3a89d2bf8b581c4142860fdfe00e3630d9012dd823a693fd8a7c40573c8890b86a09e1f890b1b914dc2fe0252de5a1b2050b7a5654324e9aa4710d5b9a2ef4eb694c5ec9c57babb883637687c388891509654516c32ec56942d4f85645", 0x81}, {&(0x7f0000000300)="8b5a9c4323967986eb33e2c0382ee9a41303248913740a1f991228771dc2a0287dd573a082090bcc2475437c32a48bf5aa6b2e919a3f59b918b773237daa5c4622201130aaf6a25ec7bc560b2f0d09cef101edb6ae2261416b34d3a87064691bc4aee63218dda13c4dd211b83b84a3595570122a29e39fba546967d3306007cc2f87dcbee7e5e27452854df1f6cedb54d391feb1819101ff2b10c2b7b09970c408e9d751bd909e869a4a96ec86cf188c55d6cd6badf75b2f904ccc510abf1558f4c5fbef3935a1b6110ebfc814edee9dcc2246f9285c4bcaa285a8289d0bd787eac77fa176e58ab1734b640155ae46296ea379d473a9a26b45d5ec2c92cd6ca5e30c3d4f242d30c032e5ed1601e79032336d7117a69ae22bd8fe1ec000a6f7dc9c31ab0bc1970eff3d4aea099a1f6c8d5ff926af12dd27810ccfaecb791d673ace342de11342515409865ed100e18b8b0d6f732ff3aa570392d85940f715c7ecaf800d68428bb84194dee41de204c7477ed14e04dc819a862c44fc9de9b09f3fa8f027320f82c8cce691f322cc4f322c6b504ed8bad50f399275aaa4b3ccd82eb6eef45430c2be1d3ef03ec8a9c8eb77e5f552a7e39a37b0ba76e020a4af19297f0bf7f03fc993bdbfbf592ed1276e5ccdebb51771f6defaa3e2f4b100907c3b88f0f31bd71fb632df507a40c0c8e72b86c9edec7cf17dd49eadd436c0e107626ab12a89b354b7d89c1fd61904b57400a26d887ea661b6c1789ceecf0f91984947109c513dd47f83dede0a991654d9467741a3b9675bc603eaa69748d35f9a1846e25c9d36d566b0971635f3e23d4b2ca3100825385903f2e286eaa7ecab5816e6aab396c56d3042377499916ee0b9dbf0d30921dd4caa5254bd5501e0832c451df172d00ee84ebffc70c12e4175a649abd682c172693ce0835ab570cd2996554c7d80f8ce5c33d7f5e981d9b1bd9bca30a4a5a276920429511299af2c13e3af26cb286b8485d78582cb2f1ca448096f99913620d4de83e7262692898fd9f49de4aaa99cfd546b307ff0d4ea7fdbe54fcd87a174add81fe242a2082ad9308cf0145d1baa7c1a77171e34995b05d96d5c39381cd7800f8348256870e1d91a0e68c59e5dc2b34717c7d0386503bcfd2f646c8e09c5ad889e22098607a7a4eddcc40df6e2199ff20c3a4e4fa8edf6198809bbbfb6d047d941ab868342c7c14ee22f39e15f2c53681935d7cf9cec8e7ddd8c8457c15930a898094055359a3866bd560d9cdfcab8ec4ce79c3ec6f0214d118b3e44a084ad356a5a8eaa3b3a4ba9af747dd8b89604c3be4666e12cb55258b4a4c4bfac73a32560c5b04f2978ee79a94b4a3d0ce72e2fd4980735307cb4f45b618174d004ec1f0c04c97e6918cd4388b160c1c345a39cab697919485fd9c20560ee328364710c8dfda5299588b7580a9c3ec1dbd2376bf65ed2816bb2f2c5a772e66704ff45b4cb318eff553e0b1f02ed6830295ba013cc43077e9642094877dc547ab6cfb89241baaac4e965943838b85560a9e0e563ba7e7383c7c76f8c18638efbe25e0a1cc6abe7238569cefe7cf3bbe6486a24ffb1ddca5d9d467d354e859dc260068d0a2992d2c59eac7d27c6259c20a8ff2db02c76e74aef4cef12ac3497b05646267fef368e3387994fbb66576e9ae1d75913e60170c49d1d7897d6538486fef0ef07b5a0cd51891861ab6f9a4f785572e1d368973a4ae09859a8559a1f535eea34d88128555d371100e0397852f344deed3bde08748aadaa8e738d3487e28236afdf7d2ec42e891688701752dd6e2b52c0a5e482e72703464553223a40e36452653b9447716b3097c6d675cd3e0ed289841c394dfdbd1cfa87158f9c7e9e51fd3a24fbf26a9a08261bfde65b86fe17b32323c2c1ab7eae69417988053ff6d556b90445fd207baea0f7fc7d2dc1a9a65f798234e5e0817f8b423c5ab52bd7bdc879a847d7453b3e77608c9e1323fb84144ea5d2f9cb37c95aa9ad8c33b3a6e65687ccd235fdeef29439cbd6ba2a79c9f53932b93e8537207eb3d8c52117256b28b09abf6c84b38c5f6c5bc70f35e4b25259093d8c6f6a3e17953e37f3f210d1861a79dca8ed70e419ff16fe6236fe1d17d680c01e661c4d585e116c77bcf377f21457966db2b0c5f9543ee70b0d407986f96d26e410f0e4dc6e3c14dc1189e2ce77216b94d2119ff1c0ef9e6d784dcb928239d49b7da1e7e48c2138f6420e13bfa8902003cc66d6e93e0fc6ef5d42e4f49ae58e750bb3f9e2e8215dd48e0a6289c0b02168ea400666c24b15c6c61bc90cc1af62187e8b2ea0669f6f6395c6a9eb1444b4c3e535c08bab4429c3e655335edc45eb4f56dc7d47bfd768f28ed9ca3da690607cbdb49d5d93e165e1945c87cbba424a45b9c4b56120522e64b50dd8d412ffdea1610ba0ef7c2fcb80075f909027627789c921f90a94bae064d195eb405c829c10520e16bc3f5c63d4149a0fff3746f0c4f3ddbcd32cab4a96128c454497c6b74f52eeb69d14c468db129ecbd106fa58063150cd3d902b926c910b30698eaf0df33599084687ddd7635467fcc3a2e0b9a6deb3aaf8991589bdc0d637ff6a046229f8b5b2e7c5c59a8bea87ed00fa8698958d7911655ccb444ed2df7893d4171452a495c98152ff733b43ba5c232ea433098fee874cb9e58656a92a6e2e4755f7d384af23f477db6dad72684f2d084e92b180012f47a03ae0a86137526e83d73856e95f029945a533eff1a58dee6168510cfb6c1eded61be7a5d869b341d0ff3f6bc16765ac5e9e80f00e5c6d525646e5be23e197e22bd6e5f758c52809386f39bdc508995a9632ce045f56a939e62f7c67481b68bf69cb90177bfbf097cc097cedb2e571f69f02667510dc817e7751043d86736c6a75dae680017ec67b6cc666ddb9beaf3998573ac750445e8973cc3b7d5d74b19e84bed1c97426ee163d7f89a616c3cca90f9877c0bcdeee0e802b22c846450e11f9323d577e627a015790f44b45537266a343d7518e4b667201fafb2542887137be67db85c52589d4449a39051a2edf483c5852fea375bcf0681cf175756c94b016afd1afbc8528f8be28515f1857ea6d5766293eea452cec54114c4309e241eabaa37ac2f9542e4d9f82d03c4c02d2e02aece1adc1a17574f03318bef7f008cb4ccd0216b6b74782970a09cbf4e36c42275499cc4c8c24054f24be909942505832fe255cdd2a934fca46ab3a1ce578fca1cfac247302c7aad9164f35b267479248ce671c83e8b0947e55f266492762e89a415beedf910eeedee45030ffb3c843f479bc0c5c3c85ba0c0fdc8e8b7330f0fae893e5648425255d2d437c83d396f8555a2e8a4c012285d5387a75b7fde223d5620d50f5493380fcb097269b1391039135af695dbfb5f5210fed31be4bcef81596cb2fedc1e92bb4fd4118b8c427795dc51512d5db7527f5ca46e92a28545976b03abc36aa86237f57bedfd829bd46399bb5fc1d63d900036964f0d9d26494e92ddebd7c55775df2d28b5f2ad44e8cc5b0428bd82fcfbdcae8079c6d1be57fa6b97b747e05e54fd029bc8acc242b0c7c07fcfb049efaa7dc877aa7ef9cdb95fe65ee16016a18f5b81b52a7a73ac44f178874848d274397aa1982119c1714a630c9be7678f13a07db64141547e0098ebf8038b4b4089b475d18a11539980d5e76c27d1c6306766be9897724aaf4339abb8b000ee1541cf22fd91bf562f5c935fbbbcf3e67ce8099d6d97501e9236758fdbce20ecebcc5a046638e51e44b4d2a5bccfd00adbb4928c15d8c4ba56fe953b7e7604055dbd827ab3da458db856e3712d585d1f0c3eaf55217938c2f39394d8cb307b91eb0abdeb473a203334b8f608a11ec444784d6dafafe8ea7794a0a22fcc5b2a3e30529bcf72bd8a68e0a1c8ae418aee600952037d9bb5d7c0801cbfb2f776837faa6fea3782288d4e2b6928273a645e741308b4fb929cb8489308696397928e76a2fb8b77788579fa9791bee3cf9363526039b34cac2d77a01a4e2617333df742dc073d211e42f08f9b42330e3594c8440d80dea6b1ca83b5789f1405d9c1f5b46f75540b295c3930a23f1d56968af7411a8fff6097f0ecd5daa87120463d853271862feefc940be284c0b019959aac2a0dcaaa38497938d05ad8f41a317d9593d337655379eeb18bed660e43c4bccc4c57b013654eeba282b727ec3914060d2d31348bf2dcd8d4a89125c0faf9904fd035231a78e4c993e16c44f21963a7a4903fd79f7eae8304cf2484320b8c8f4a064cd31deba3943916bb6847a50fa2a83c275bc150220a588a55d5b42ac69339fe180ca7dfb360261fd9ffdcb1e28a2634b1b308fb81d1aa457edc570c31736a43de28caa8a03e88274f806e09f7f840f65f5c1661dd25f4595e623881aefa75d7a131044fbcd6ffb2c24c09f38e05450233b80ea72e6c397d7331fefa54bb320c65fec0d5c043c6bcece72085edded3d9b553fa90f8b90aae47250b8dbc2d95144621f3d6303df889f32dacb81d10d5eca3b2308bb26accd25130c060421333c60b39f60dfafc3950df2701c6f3c59ae19e16d300f6fe41c1df4a87a7f617fc7a053ac1f99a3cf766df06b59cb91a8d2b9c8f2780b1c9e7e8a64eeaaed933b28054c253b547633d5bcdc9cfa0719094a7b3df4dc1b5e911f17d9ed964fd6cc1b47ac6b0f2d95acd5c1deaae7f5b32352508d5e7ef19d3a35ad8d0088dd0b6ceae721f52a8d46c594ef6110c13576ba1aaa679e84d663aa778c9082eaf84d6584a5852d9b227a4e684661e252008327a10478b6896684a152b2bea733467ec79681af8a3a143d6a4dc85ec95869ce331e507e176496b3a4e6e5e9bdae0194121341368a0a6ce705924ec6d3c4ebbb370612b8343122920cd93cc262bd24cd564e37d8258f2464610457165369a2237c7934b5f351f5a342cdb8fec7d9851fb06b5618d776b01e3c42c7a507acdd57b4a7df03529be9da62f7c278f204b3765348af636c770f9eaaa32b19a691c1c6ed785b7ba25dda408ff2ab1dc1d945d4ddcec57c7349cbd587bc91969d7fd7b0a89f2e906c98ddbbdf36e81dee5981fab126a48235ecca8bdc51f9fcaf97c257556fe76118e013be93b7dc3282c9892a161fe7db4559bd1af5152e100ad3e423d128fa629b2fbbc702f3c5a2a38ebc34230921cef6b2c068e69ff2b08ac65ce8e113b1b13e42582ee1c13b8dce8d709f727000dc29a2687e3618deebca5c2e86a47809039ca7dccc2c9b79724feeb49319b11a22fc30fe928e39fdfd629b9e791e7a89b8c39775e7fb39377706f9b5554442d920c34f56320e119c2b0725b6725d4bc095c1e70241c821b5175ee26eb6a9f909fe41b59fc86201299d4473d6c0d41e83d36c289dbc6bd0b6371faab3f4034d2bfbdb810c9dd69de41b3931159f82f6b033ad82b9b0f2a5b139101ce0577749f3daaf063cac314c275377b9ea29cc6aee97fb4009680966b5e7a79c2afd7f5abc0c9d6d5646935094792d89e29274925cdcb860b84f390def1ca75aaab03e18d46571c8c4689dc4d270899942df867497804de74ffb9e942df23867d2c8d2c934a7dccc891dc2d1234b4f04042aba1cd79f61ff0512f6c2a961d5c3aa940b49fd369ebf212b3473fc5bc55071db341d2ad0ac62b5a0e541f8a530a819660f9f2913f2d7d5e035c49701cf6fc7e87494c1f0855a03fa18f3fa59da08bac9859e824ba02dcf08d317e888dc499ea5bdbbb13e2f6348aba19fc48c5b68412c0e0c", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:50:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) [ 628.430238][ T8234] usb 3-1: Using ep0 maxpacket: 16 [ 628.480179][ T17] usb 1-1: device descriptor read/64, error 18 [ 628.550812][ T8234] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 628.740257][ T8234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.750371][ T17] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 628.758188][ T8234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.768921][ T8234] usb 3-1: Product: syz [ 628.774141][ T8234] usb 3-1: Manufacturer: syz [ 628.778903][ T8234] usb 3-1: SerialNumber: syz [ 628.833402][ T8234] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 629.020134][ T17] usb 1-1: device descriptor read/64, error 18 [ 629.061371][ T8234] usb 3-1: USB disconnect, device number 10 [ 629.410182][ T17] usb 1-1: device descriptor read/64, error 18 [ 629.530136][ T17] usb usb1-port1: attempt power cycle [ 630.249953][ T17] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 630.341035][ T17] usb 1-1: Invalid ep0 maxpacket: 0 01:50:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:50:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 01:50:58 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = getgid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000001480)=[{&(0x7f0000001640)="e2167a62774bb15212ebdd3f6ec9f3f81da8e7388499f41db0d8e02201aaec377b513c715b1d7640aa3888fceac3aed889c1b382a811fb506ea65edd64e02fc74d521dc2ff606133119de9ebe5bae2e08e0b7b8bdc96df5273af493a9363dd620d9f1eaa68bce5eff6298c31741a9b4e9ab620e559e52c2c3d89bbf91fd1259e20c6fcfced2a561d232556c1d60a53621b62557f412c1b3fc42e05f117520621ec68cf91dca71233dc968ab8284a10f2b62023d31b9b61902e0c62801d", 0xbd, 0x4}, {&(0x7f0000000240)="bca858ecd1e5f2377c8e4deb24d0d4ddf659e615aef497972bdc54ffdf266ddb7a974aed3a89d2bf8b581c4142860fdfe00e3630d9012dd823a693fd8a7c40573c8890b86a09e1f890b1b914dc2fe0252de5a1b2050b7a5654324e9aa4710d5b9a2ef4eb694c5ec9c57babb883637687c388891509654516c32ec56942d4f85645", 0x81}, {&(0x7f0000000300)="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", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:50:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 01:50:58 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:50:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) [ 630.489912][ T17] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 630.532791][T20383] __ntfs_error: 14 callbacks suppressed [ 630.532803][T20383] ntfs: (device loop3): parse_options(): Unrecognized mount option f0x0000000000000000. [ 630.559599][T20383] ntfs: (device loop3): parse_options(): Unrecognized mount option permit_directio. 01:50:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) clock_gettime(0x0, &(0x7f0000000100)) io_getevents(r0, 0x2, 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) [ 630.583832][T20383] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_role. 01:50:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 01:50:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 01:50:59 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = getgid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000001480)=[{&(0x7f0000001640)="e2167a62774bb15212ebdd3f6ec9f3f81da8e7388499f41db0d8e02201aaec377b513c715b1d7640aa3888fceac3aed889c1b382a811fb506ea65edd64e02fc74d521dc2ff606133119de9ebe5bae2e08e0b7b8bdc96df5273af493a9363dd620d9f1eaa68bce5eff6298c31741a9b4e9ab620e559e52c2c3d89bbf91fd1259e20c6fcfced2a561d232556c1d60a53621b62557f412c1b3fc42e05f117520621ec68cf91dca71233dc968ab8284a10f2b62023d31b9b61902e0c62801d", 0xbd, 0x4}, {&(0x7f0000000240)="bca858ecd1e5f2377c8e4deb24d0d4ddf659e615aef497972bdc54ffdf266ddb7a974aed3a89d2bf8b581c4142860fdfe00e3630d9012dd823a693fd8a7c40573c8890b86a09e1f890b1b914dc2fe0252de5a1b2050b7a5654324e9aa4710d5b9a2ef4eb694c5ec9c57babb883637687c388891509654516c32ec56942d4f85645", 0x81}, {&(0x7f0000000300)="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", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) [ 630.843526][T20409] ntfs: (device loop3): parse_options(): Unrecognized mount option f0x0000000000000000. [ 630.866785][T20409] ntfs: (device loop3): parse_options(): Unrecognized mount option permit_directio. 01:50:59 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = getgid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000001480)=[{&(0x7f0000001640)="e2167a62774bb15212ebdd3f6ec9f3f81da8e7388499f41db0d8e02201aaec377b513c715b1d7640aa3888fceac3aed889c1b382a811fb506ea65edd64e02fc74d521dc2ff606133119de9ebe5bae2e08e0b7b8bdc96df5273af493a9363dd620d9f1eaa68bce5eff6298c31741a9b4e9ab620e559e52c2c3d89bbf91fd1259e20c6fcfced2a561d232556c1d60a53621b62557f412c1b3fc42e05f117520621ec68cf91dca71233dc968ab8284a10f2b62023d31b9b61902e0c62801d", 0xbd, 0x4}, {&(0x7f0000000240)="bca858ecd1e5f2377c8e4deb24d0d4ddf659e615aef497972bdc54ffdf266ddb7a974aed3a89d2bf8b581c4142860fdfe00e3630d9012dd823a693fd8a7c40573c8890b86a09e1f890b1b914dc2fe0252de5a1b2050b7a5654324e9aa4710d5b9a2ef4eb694c5ec9c57babb883637687c388891509654516c32ec56942d4f85645", 0x81}, {&(0x7f0000000300)="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", 0x1000, 0xe58}, {&(0x7f0000001300)="a1c2ce2f6e37031f4c", 0x9, 0x3}, {&(0x7f0000001340)="f4be51c60bd80e88aa5da1f6f2b94bb8e5ee7494fe574d467699e19ea4f4c519582a303e717cce5b0e0bdfb40c35805b7968631875dbd65e6977ade6383f6d5552725ec061390fd02583363f0bcba38c9b7e0b52506ca841fe4f83a49e86e1c1c90a93f3052bf6cc6d17722c4c9791dc89fabf2838b92b4c87ef8a1cd59f03a515d92e1b4aa1f81df81f19fb2824d3b434bae67bbc05ab98665a86241ffa169fe9818494e456ec20826dcb", 0xab}, {&(0x7f0000001400)}, {&(0x7f0000001440)="b6a27052668f", 0x6, 0x80}], 0x80, &(0x7f0000001540)=ANY=[@ANYBLOB="8110d466", @ANYRESHEX=r1, @ANYBLOB="2c73686f775f7379735f66696c65733d7965732c7065726d69745f646972656374696f2c6f626abe895f726f6c653d2f6465762f6472692f6361726423002c7375626a5f747970653d2f6465762f6472692f6361726423002c7063723d30303030303030343030303030303030303030312c61707072616973652c646f6e745f686173682c7065726d69745f646972656374696f2c7375626a5f747970653d2f6465762f6472692f636172636b6673726f6f743d2f6465762f6472692f6361726423001d8d07568efc2c0000000000000000"]) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:50:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) clock_gettime(0x0, &(0x7f0000000100)) io_getevents(r0, 0x2, 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) [ 630.888639][T20409] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_role. [ 630.969772][ T17] usb 1-1: device not accepting address 70, error -71 [ 630.981339][ T17] usb usb1-port1: unable to enumerate USB device [ 631.096878][T20419] ntfs: (device loop3): parse_options(): Unrecognized mount option f0x0000000000000000. [ 631.121675][T20419] ntfs: (device loop3): parse_options(): Unrecognized mount option permit_directio. [ 631.138042][T20419] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_role. [ 631.339837][ T17] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 631.619792][ T17] usb 1-1: device descriptor read/64, error 18 [ 632.019666][ T17] usb 1-1: device descriptor read/64, error 18 [ 632.299730][ T17] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 632.569667][ T17] usb 1-1: device descriptor read/64, error 18 [ 632.969610][ T17] usb 1-1: device descriptor read/64, error 18 [ 633.089787][ T17] usb usb1-port1: attempt power cycle 01:51:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:51:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) clock_gettime(0x0, &(0x7f0000000100)) io_getevents(r0, 0x2, 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) clock_gettime(0x0, &(0x7f0000000100)) io_getevents(r0, 0x2, 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:02 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) getgid() r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) getpid() get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x0, 0x2041) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x7d, &(0x7f0000000140)={r4}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x20, 0x30, 0x5, 0x7ff}, &(0x7f0000000100)=0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x122c00, 0x4) 01:51:02 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:02 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:02 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) close(r0) 01:51:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) clock_gettime(0x0, &(0x7f0000000100)) io_getevents(r0, 0x2, 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:02 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$getsig(0x4202, r1, 0x6, &(0x7f0000000200)) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f00000001c0)={0x80000000, 0x1, 0x4, 0x80000000, 0x8, "fcf015d07c36ac3a34eb8783f017f2783f40cc", 0x7, 0xbd}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf250100000009002fa7891c7a31000000000900010073797a300000000014000200626174616476300000000000000900010073797a31000000000900010073797a30000000001400020076657468305f746f5f68737200000000050004000100000000000000000000000000002114bededd99fd44f84215ad5f70b4616fde9b06ae88ade895814ab58a7e2cde019fb6aa1b634b215a19f8cbc244491b63f78e6d2f126e8cd6a9b2f0fbedca6a25ce"], 0x7c}}, 0x40040) socket$isdn_base(0x22, 0x3, 0x0) 01:51:02 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/dri/card#\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) [ 634.101761][ T2735] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 634.239476][ T17] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 634.329551][ T17] usb 1-1: Invalid ep0 maxpacket: 0 [ 634.350599][ T2735] usb 3-1: Using ep0 maxpacket: 16 [ 634.470098][ T2735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 634.483433][ T17] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 634.579548][ T17] usb 1-1: Invalid ep0 maxpacket: 0 [ 634.584893][ T17] usb usb1-port1: unable to enumerate USB device [ 634.649587][ T2735] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.658682][ T2735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.667775][ T2735] usb 3-1: Product: syz [ 634.672509][ T2735] usb 3-1: Manufacturer: syz [ 634.677101][ T2735] usb 3-1: SerialNumber: syz [ 634.720482][ T2735] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 634.947034][ T17] usb 3-1: USB disconnect, device number 11 01:51:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 01:51:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x3, &(0x7f0000000000)='!&\x00'}, 0x30) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r4, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x3, 0x7, {r2}, {r4}, 0x20, 0x7}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x80045400, &(0x7f00000000c0)) syz_open_procfs(r5, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:05 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) dup3(r0, r1, 0x80000) socket$isdn_base(0x22, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) 01:51:05 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:05 executing program 2: syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:05 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x9, 0x1f}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000006b00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000006c00)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000006bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000012140002000000020000000800150005000000080001000000000089616edee90ab95fb9e9e176e10800030004000000080003000300"/77], 0x40}, 0x1, 0x0, 0x0, 0x2000051}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) r4 = dup(r2) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x240800, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000200)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff7, @loopback, 0x80000000}, 0x1c) 01:51:05 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) [ 637.071019][ T17] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 637.359258][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 637.481448][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 637.669546][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.678670][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.687739][ T17] usb 1-1: Product: syz [ 637.692192][ T17] usb 1-1: Manufacturer: syz [ 637.696803][ T17] usb 1-1: SerialNumber: syz [ 637.750263][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 637.958367][ T17] usb 1-1: USB disconnect, device number 75 01:51:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 01:51:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @private}}}}, 0x3a) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x25, 0x400202, 0x3d) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={r4, 0x25}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r4, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) clock_gettime(0x0, &(0x7f0000000000)) 01:51:07 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:07 executing program 5: syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002900270d00"/20, @ANYRES32], 0x1ec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'veth0_virt_wifi\x00', 0x0}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000015c0)={'ip6gre0\x00', &(0x7f0000001540)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x8b, 0x1, 0x7d, @ipv4={[], [], @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8, 0x8, 0xfff}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000004000000000000920000", @ANYRES32=r5, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x48, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x95}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 01:51:07 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) syz_open_procfs(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f00000021c0)}, &(0x7f00000022c0)=0x18) socket$isdn_base(0x22, 0x3, 0x0) 01:51:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r1 = socket(0x15, 0x5, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x181e00, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}}, 0x40) 01:51:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x2000000, 0x9, 0x1f}) [ 638.978936][ T3422] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 639.244000][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 639.369205][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 639.559212][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.568267][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.576639][ T3422] usb 1-1: Product: syz [ 639.580997][ T3422] usb 1-1: Manufacturer: syz [ 639.585611][ T3422] usb 1-1: SerialNumber: syz [ 639.631058][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 639.838223][ T3422] usb 1-1: USB disconnect, device number 76 01:51:08 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 01:51:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:08 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:08 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:08 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 640.392426][T20602] FAULT_INJECTION: forcing a failure. [ 640.392426][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 640.431242][T20602] CPU: 0 PID: 20602 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 640.439608][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.449762][T20602] Call Trace: [ 640.453072][T20602] dump_stack+0x18f/0x20d [ 640.457430][T20602] should_fail.cold+0x5/0x14 [ 640.462041][T20602] ? tomoyo_realpath_from_path+0xc3/0x620 [ 640.467778][T20602] should_failslab+0x5/0xf [ 640.472216][T20602] __kmalloc+0x27d/0x340 [ 640.476472][T20602] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 640.482042][T20602] tomoyo_realpath_from_path+0xc3/0x620 [ 640.487605][T20602] ? tomoyo_profile+0x42/0x50 [ 640.492301][T20602] tomoyo_path_number_perm+0x1cb/0x4d0 [ 640.497784][T20602] ? tomoyo_path_number_perm+0x183/0x4d0 [ 640.503435][T20602] ? tomoyo_execute_permission+0x470/0x470 [ 640.509258][T20602] ? lock_acquire+0x1f1/0xad0 [ 640.513948][T20602] ? delayed_put_pid+0x30/0x30 [ 640.518743][T20602] ? lock_is_held_type+0xb0/0xe0 [ 640.523721][T20602] ? selinux_inode_getsecctx+0x90/0x90 [ 640.529199][T20602] ? __mutex_unlock_slowpath+0xe2/0x610 [ 640.534765][T20602] ? lock_is_held_type+0xb0/0xe0 [ 640.539728][T20602] ? __fget_files+0x294/0x400 [ 640.544434][T20602] security_file_ioctl+0x50/0xb0 [ 640.549402][T20602] ksys_ioctl+0x50/0x180 [ 640.553661][T20602] __x64_sys_ioctl+0x6f/0xb0 [ 640.558261][T20602] ? lockdep_hardirqs_on+0x6a/0xe0 [ 640.563387][T20602] do_syscall_64+0x60/0xe0 [ 640.567818][T20602] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 640.573717][T20602] RIP: 0033:0x45cce9 [ 640.577625][T20602] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 640.597234][T20602] RSP: 002b:00007fdaf6642c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.605655][T20602] RAX: ffffffffffffffda RBX: 000000000000d540 RCX: 000000000045cce9 [ 640.614068][T20602] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 640.622129][T20602] RBP: 00007fdaf6642ca0 R08: 0000000000000000 R09: 0000000000000000 [ 640.630103][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 01:51:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:09 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) [ 640.638081][T20602] R13: 00007ffe679923af R14: 00007fdaf66439c0 R15: 000000000078bf0c 01:51:09 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) [ 640.721207][T20602] ERROR: Out of memory at tomoyo_realpath_from_path. 01:51:09 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:09 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:09 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x3) [ 640.808890][ T8234] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 641.052746][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 641.179804][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 641.379154][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.388210][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.396575][ T8234] usb 1-1: Product: syz [ 641.400963][ T8234] usb 1-1: Manufacturer: syz [ 641.405564][ T8234] usb 1-1: SerialNumber: syz [ 641.449982][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 641.658344][ T8234] usb 1-1: USB disconnect, device number 77 01:51:10 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) close(r0) 01:51:10 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:10 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:10 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x9, 0x2, 0x8, 0x8, 0x8, 0x7}) 01:51:10 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x200008ee) 01:51:10 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 642.261841][T20660] FAULT_INJECTION: forcing a failure. [ 642.261841][T20660] name failslab, interval 1, probability 0, space 0, times 0 [ 642.290887][T20660] CPU: 1 PID: 20660 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 642.299267][T20660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.309361][T20660] Call Trace: [ 642.312665][T20660] dump_stack+0x18f/0x20d [ 642.317023][T20660] should_fail.cold+0x5/0x14 [ 642.321652][T20660] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 642.327034][T20660] should_failslab+0x5/0xf [ 642.331476][T20660] __kmalloc+0x27d/0x340 [ 642.335734][T20660] ? tomoyo_realpath_from_path+0xc3/0x620 [ 642.341471][T20660] tomoyo_encode2.part.0+0xe9/0x3a0 [ 642.346682][T20660] ? tomoyo_realpath_from_path+0xc3/0x620 [ 642.352436][T20660] tomoyo_encode+0x28/0x50 [ 642.356871][T20660] tomoyo_realpath_from_path+0x186/0x620 01:51:10 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x99, 0x7f, 0x3779, 0x4, 0x1f, 0x1, "92275f0998cd884b4d729d8c0ecc1e2bece701084b1bd77d13014a42daf39419b2770a0840d5167297a2934213dc48e97a2eef344cf961e664f12bcb40a381b7ecc9a1029d8a5d4cf297aea54ddfa98ec5e2d7992ed9b5235a21062a957b08dba0fd2cad26b2c1355a82e069df884c2168203184d62da27d4ac20630c515dbd55ef72a862ca75402d868cc1eb6c541686483c4c103a4c409c3"}}, 0x1b1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/adsp1\x00', 0x408082, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000280)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'bond_slave_1\x00', 0x200}) recvfrom$llc(r2, &(0x7f00000002c0)=""/19, 0x13, 0x1, &(0x7f0000000300)={0x1a, 0x31a, 0x6, 0x4, 0x18, 0x6, @random="be37f1fafbc8"}, 0x10) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:51:10 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 642.362530][T20660] tomoyo_path_number_perm+0x1cb/0x4d0 [ 642.368008][T20660] ? tomoyo_path_number_perm+0x183/0x4d0 [ 642.373931][T20660] ? tomoyo_execute_permission+0x470/0x470 [ 642.379776][T20660] ? lock_acquire+0x1f1/0xad0 [ 642.384457][T20660] ? delayed_put_pid+0x30/0x30 [ 642.389237][T20660] ? lock_is_held_type+0xb0/0xe0 [ 642.394219][T20660] ? selinux_inode_getsecctx+0x90/0x90 [ 642.399689][T20660] ? __mutex_unlock_slowpath+0xe2/0x610 [ 642.405247][T20660] ? lock_is_held_type+0xb0/0xe0 01:51:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) [ 642.410195][T20660] ? __fget_files+0x294/0x400 [ 642.414893][T20660] security_file_ioctl+0x50/0xb0 [ 642.419859][T20660] ksys_ioctl+0x50/0x180 [ 642.424109][T20660] __x64_sys_ioctl+0x6f/0xb0 [ 642.428736][T20660] ? lockdep_hardirqs_on+0x6a/0xe0 [ 642.433851][T20660] do_syscall_64+0x60/0xe0 [ 642.438269][T20660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 642.444162][T20660] RIP: 0033:0x45cce9 [ 642.448078][T20660] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 642.467685][T20660] RSP: 002b:00007fdaf6642c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.476122][T20660] RAX: ffffffffffffffda RBX: 000000000000d540 RCX: 000000000045cce9 [ 642.484100][T20660] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 642.492075][T20660] RBP: 00007fdaf6642ca0 R08: 0000000000000000 R09: 0000000000000000 [ 642.500052][T20660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.508025][T20660] R13: 00007ffe679923af R14: 00007fdaf66439c0 R15: 000000000078bf0c 01:51:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:51:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x2, 0x8, 0x8, 0x8, 0x7}) [ 642.590729][ T8234] hid (null): invalid report_size -717223926 [ 642.625173][T20660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 642.625747][ T8234] hid-generic 007F:3779:0004.0001: ignoring exceeding usage max [ 642.699806][ T8234] hid-generic 007F:3779:0004.0001: unknown main item tag 0x0 [ 642.699830][ T8234] hid-generic 007F:3779:0004.0001: unknown main item tag 0x4 [ 642.699854][ T8234] hid-generic 007F:3779:0004.0001: invalid report_size -717223926 [ 642.699871][ T8234] hid-generic 007F:3779:0004.0001: item 0 4 1 7 parsing failed [ 642.700289][ T8234] hid-generic: probe of 007F:3779:0004.0001 failed with error -22 [ 642.878665][ T8234] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 643.138639][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 643.259559][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 643.468667][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 643.477933][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.489947][ T8234] usb 1-1: Product: syz [ 643.494208][ T8234] usb 1-1: Manufacturer: syz [ 643.499054][ T8234] usb 1-1: SerialNumber: syz [ 643.539819][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 643.748504][ T3424] usb 1-1: USB disconnect, device number 78 01:51:12 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) close(r0) 01:51:12 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 01:51:12 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x8, 0x8, 0x7}) 01:51:12 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={r2, 0x25}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000040)={r2, &(0x7f0000000000)=""/16}) 01:51:12 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 644.319883][T20712] FAULT_INJECTION: forcing a failure. [ 644.319883][T20712] name failslab, interval 1, probability 0, space 0, times 0 [ 644.351347][T20712] CPU: 0 PID: 20712 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 644.359719][T20712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.369792][T20712] Call Trace: [ 644.373110][T20712] dump_stack+0x18f/0x20d [ 644.377489][T20712] should_fail.cold+0x5/0x14 [ 644.382123][T20712] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 644.387504][T20712] should_failslab+0x5/0xf [ 644.391961][T20712] __kmalloc+0x27d/0x340 [ 644.396221][T20712] ? tomoyo_realpath_from_path+0xc3/0x620 [ 644.401960][T20712] tomoyo_encode2.part.0+0xe9/0x3a0 [ 644.407174][T20712] ? tomoyo_realpath_from_path+0xc3/0x620 [ 644.412905][T20712] tomoyo_encode+0x28/0x50 [ 644.417381][T20712] tomoyo_realpath_from_path+0x186/0x620 [ 644.423044][T20712] tomoyo_path_number_perm+0x1cb/0x4d0 [ 644.428517][T20712] ? tomoyo_path_number_perm+0x183/0x4d0 [ 644.434165][T20712] ? tomoyo_execute_permission+0x470/0x470 [ 644.439982][T20712] ? lock_acquire+0x1f1/0xad0 [ 644.444845][T20712] ? delayed_put_pid+0x30/0x30 [ 644.449639][T20712] ? lock_is_held_type+0xb0/0xe0 [ 644.454615][T20712] ? selinux_inode_getsecctx+0x90/0x90 [ 644.460182][T20712] ? __mutex_unlock_slowpath+0xe2/0x610 [ 644.465835][T20712] ? lock_is_held_type+0xb0/0xe0 [ 644.470806][T20712] ? __fget_files+0x294/0x400 [ 644.475552][T20712] security_file_ioctl+0x50/0xb0 [ 644.480532][T20712] ksys_ioctl+0x50/0x180 [ 644.484815][T20712] __x64_sys_ioctl+0x6f/0xb0 [ 644.489507][T20712] ? lockdep_hardirqs_on+0x6a/0xe0 [ 644.494637][T20712] do_syscall_64+0x60/0xe0 [ 644.499066][T20712] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 644.504968][T20712] RIP: 0033:0x45cce9 [ 644.508895][T20712] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 644.528632][T20712] RSP: 002b:00007fdaf6642c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.537056][T20712] RAX: ffffffffffffffda RBX: 000000000000d540 RCX: 000000000045cce9 [ 644.545812][T20712] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 644.553781][T20712] RBP: 00007fdaf6642ca0 R08: 0000000000000000 R09: 0000000000000000 [ 644.561758][T20712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:51:13 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8, 0x7}) [ 644.569730][T20712] R13: 00007ffe679923af R14: 00007fdaf66439c0 R15: 000000000078bf0c [ 644.594119][T20712] ERROR: Out of memory at tomoyo_realpath_from_path. 01:51:13 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:13 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_DESTROY(r2, &(0x7f0000000600), 0x4) mq_open(&(0x7f0000000780)='/dev/nvme-fabrics\x00', 0x40, 0x40, &(0x7f00000007c0)={0x6, 0x7, 0x4, 0x7f}) r3 = dup(r0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nvme-fabrics\x00', 0x4001c2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000700)=""/114) getrlimit(0xa, &(0x7f0000000680)) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$SNDCTL_SEQ_CTRLRATE(r6, 0xc0045103, &(0x7f00000005c0)=0x2000004) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x1, 0x7, 0x80, 'syz1\x00', 0x5}, 0x1, [0x3, 0x7ff, 0x0, 0x2, 0x5, 0x268, 0x1f, 0x2, 0x80, 0x1, 0x0, 0x80000000, 0x5, 0x10000, 0x9, 0x9a, 0xb41, 0x1ff, 0x2, 0x0, 0x0, 0x3f, 0x9, 0x5, 0x8, 0x6, 0x3, 0x1, 0xfffffffffffffff5, 0x2, 0x9, 0x5e, 0xc518, 0x8, 0xfe, 0x5, 0x49e, 0x4, 0xffffffff, 0xfffc000000000000, 0xbf1, 0xbb, 0xfffffffffffffc01, 0x1ae3, 0x10000, 0x100000000, 0x47, 0x100, 0x1, 0x0, 0x101, 0xffffffffffffffe1, 0x8, 0x101, 0x80, 0xd29, 0x4, 0x100000001, 0x9, 0x31885ef4, 0x401, 0x6, 0xfffffffffffffffe, 0x8, 0x4, 0x1, 0x0, 0x5, 0x4, 0x4, 0x1, 0x5, 0x5, 0x3, 0x4a4, 0x8, 0x387, 0x1, 0x4, 0xb59, 0x6e3a, 0x4, 0x2, 0x80000001, 0xfff, 0x4, 0x4, 0x0, 0x800, 0x8, 0xdacb, 0x10001, 0x1, 0x4000000000000003, 0x43d, 0xcab2, 0x9, 0x4, 0x528, 0x1, 0xf800000000000000, 0x10000, 0x8, 0x7fff, 0x800, 0x3f7e009d, 0x40, 0xfff, 0xc7b, 0x47d, 0xfd0d, 0x8000000000000, 0x6, 0x8, 0x5, 0x800, 0x8, 0x0, 0x90b, 0x8001, 0x42d, 0x0, 0x8, 0x0, 0x66, 0x400, 0x7ff]}) 01:51:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x7}) 01:51:13 executing program 1 (fault-call:1 fault-nth:3): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 644.825566][ T8234] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 644.973921][T20742] FAULT_INJECTION: forcing a failure. [ 644.973921][T20742] name failslab, interval 1, probability 0, space 0, times 0 [ 644.973987][T20742] CPU: 1 PID: 20742 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 644.973997][T20742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.974002][T20742] Call Trace: [ 644.974027][T20742] dump_stack+0x18f/0x20d [ 644.974050][T20742] should_fail.cold+0x5/0x14 [ 644.974078][T20742] ? bit_cursor+0x8a3/0x17d0 [ 644.974096][T20742] should_failslab+0x5/0xf [ 644.974113][T20742] __kmalloc+0x69/0x340 [ 644.974131][T20742] ? fb_get_color_depth+0x11a/0x240 [ 644.974150][T20742] bit_cursor+0x8a3/0x17d0 [ 644.974175][T20742] ? kmalloc_array.constprop.0+0x20/0x20 [ 644.974200][T20742] ? do_update_region+0x47c/0x630 [ 644.974226][T20742] ? fb_get_color_depth+0x11a/0x240 [ 644.974250][T20742] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 644.974268][T20742] ? get_color+0x20e/0x410 [ 644.974287][T20742] fbcon_cursor+0x52b/0x650 [ 644.974305][T20742] ? kmalloc_array.constprop.0+0x20/0x20 [ 644.974321][T20742] ? fbcon_set_palette+0x3a8/0x490 [ 644.974342][T20742] set_cursor+0x1dd/0x230 [ 644.974361][T20742] redraw_screen+0x4b7/0x770 [ 644.974380][T20742] ? vga16fb_update_fix+0x4a0/0x4a0 [ 644.974399][T20742] ? vc_init+0x440/0x440 [ 644.974419][T20742] ? fbcon_set_palette+0x3a8/0x490 [ 644.974444][T20742] fbcon_modechanged+0x575/0x710 [ 644.974468][T20742] fbcon_update_vcs+0x3a/0x50 [ 644.974486][T20742] fb_set_var+0xae8/0xd60 [ 644.974506][T20742] ? fb_blank+0x190/0x190 [ 644.974521][T20742] ? lock_release+0x8d0/0x8d0 [ 644.974548][T20742] ? lock_is_held_type+0xb0/0xe0 [ 644.974577][T20742] ? do_fb_ioctl+0x2f2/0x6c0 [ 644.974610][T20742] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 644.974631][T20742] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 644.974646][T20742] ? trace_hardirqs_on+0x5f/0x220 [ 644.974669][T20742] do_fb_ioctl+0x33f/0x6c0 [ 644.974687][T20742] ? fb_set_suspend+0x1a0/0x1a0 [ 644.974705][T20742] ? tomoyo_execute_permission+0x470/0x470 [ 644.974722][T20742] ? delayed_put_pid+0x30/0x30 [ 644.974749][T20742] ? lock_is_held_type+0xb0/0xe0 [ 644.974776][T20742] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 644.974792][T20742] ? do_vfs_ioctl+0x27d/0x1090 [ 644.974828][T20742] ? __fget_files+0x294/0x400 [ 644.974855][T20742] fb_ioctl+0xdd/0x130 [ 644.974875][T20742] ? do_fb_ioctl+0x6c0/0x6c0 [ 644.974891][T20742] ksys_ioctl+0x11a/0x180 [ 644.974911][T20742] __x64_sys_ioctl+0x6f/0xb0 [ 644.974928][T20742] ? lockdep_hardirqs_on+0x6a/0xe0 [ 644.974945][T20742] do_syscall_64+0x60/0xe0 [ 644.974963][T20742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 644.974976][T20742] RIP: 0033:0x45cce9 [ 644.974995][T20742] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 644.975004][T20742] RSP: 002b:00007fdaf6642c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.975021][T20742] RAX: ffffffffffffffda RBX: 000000000000d540 RCX: 000000000045cce9 [ 644.975032][T20742] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 644.975042][T20742] RBP: 00007fdaf6642ca0 R08: 0000000000000000 R09: 0000000000000000 [ 644.975053][T20742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 644.975064][T20742] R13: 00007ffe679923af R14: 00007fdaf66439c0 R15: 000000000078bf0c [ 645.082261][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 645.199128][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 645.369045][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.369067][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.369083][ T8234] usb 1-1: Product: syz [ 645.369098][ T8234] usb 1-1: Manufacturer: syz [ 645.369114][ T8234] usb 1-1: SerialNumber: syz [ 645.409623][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 645.622734][ T8234] usb 1-1: USB disconnect, device number 79 01:51:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) close(r0) 01:51:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 01:51:14 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x8000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:14 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 01:51:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 01:51:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:14 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x7d, &(0x7f0000000140)={r5}, 0x14) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x20400) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0xff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r6, 0x9}, 0x8) 01:51:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 01:51:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 646.638159][ T3424] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 646.888241][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 647.028423][ T3424] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 647.208424][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 647.217636][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.273229][ T3424] usb 1-1: Product: syz [ 647.277813][ T3424] usb 1-1: Manufacturer: syz [ 647.291643][ T3424] usb 1-1: SerialNumber: syz [ 647.359309][ T3424] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 647.576755][ T3424] usb 1-1: USB disconnect, device number 80 01:51:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) 01:51:16 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 01:51:16 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6e3) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="73f3e877ae68485316bebb49c2c398e4cdad79d4341189d1e272efa6945484db2230185861fc98e00f742cd8e4e573372557070a03f46afd372fd5c7a65b8baed65ede4066ad31399e4543c4ff66c73016c24fcd00aeed0f96ece354abadf5cf00b459b033fa5e45daf3640a7ea6f9a828019517fc2ce1ddbb4d8638830df463276fc81fad929e7377d43f20dbe62fd5ccdc2ea864024174a8f6e943896b1a1d10fcfe41d249aaa1a196f7f630432c6ecf7e8022e9e85ecda0c5732723af3fe219010ffd0a1f1ad5"}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/246, 0xf6) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r10, 0x8, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x4000800) 01:51:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:16 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:16 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:16 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) socket$caif_seqpacket(0x25, 0x5, 0x1) 01:51:16 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x301, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, 0x0) [ 648.567983][ T3422] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 648.817928][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 648.941404][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 649.148336][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.157498][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.188058][ T3422] usb 1-1: Product: syz [ 649.192257][ T3422] usb 1-1: Manufacturer: syz [ 649.196877][ T3422] usb 1-1: SerialNumber: syz [ 649.279126][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 649.484844][ T8234] usb 1-1: USB disconnect, device number 81 01:51:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) 01:51:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x127b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, 0x0) 01:51:18 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x40, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffbffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYBLOB="c5feff18c4478723be44738d757286594a06d2bd9030922b023e2363f243c549be4ed723e5653e42172fc3aa7488df11775d99e5b1b6b001f62b8695ffd323cbebc95d132f19270f85c970df4cb0c17a8794373270673af25b694590b7dd8ade6e7dc289bdaf0ac1adb0571ff05ce5148fa7a6f98ef7d604", @ANYBLOB="9dd9488089bd42af76d11a616a6ae7fc58e75de9f36a51f01b69183447a339d77f0777ca9380ea6ced5a2065fed3c0b5062c058c950944affa181d307d95f5f3a568d88e9085775949aeb2960bbea17ce127ed337881c99b615bb3093281e9f542bd0132a2f320a16b6e8765c5a403be855e94b111ab3c9b819ca9ea88ec4a1072bff11d265bce6fae7cb3f262ad1124ce9406ec5cdadbb5cf39268dcc9a17000708000000915e0bea975af8c3dfc893c4ccfa7f509c094ae4", @ANYRESOCT, @ANYRESHEX=r1, @ANYRES64], 0x12e) 01:51:18 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 01:51:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, 0x0) 01:51:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x0, 0x1f}) 01:51:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:18 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) 01:51:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x0, 0x1f}) [ 650.447826][ T3422] usb 1-1: new high-speed USB device number 82 using dummy_hcd 01:51:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x0, 0x1f}) [ 650.687768][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 650.807890][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 650.997936][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.006999][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.027732][ T3422] usb 1-1: Product: syz [ 651.031942][ T3422] usb 1-1: Manufacturer: syz [ 651.036804][ T3422] usb 1-1: SerialNumber: syz [ 651.108902][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 651.324148][ T3422] usb 1-1: USB disconnect, device number 82 01:51:20 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) 01:51:20 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x200, 0x101800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYBLOB="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", @ANYRES64=r3], 0x12e) 01:51:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4603, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf}) 01:51:20 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:20 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 01:51:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf}) 01:51:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4604, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:20 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='@(\x00') write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf}) 01:51:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:20 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 652.307651][ T8234] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 652.421363][T21018] FAULT_INJECTION: forcing a failure. [ 652.421363][T21018] name failslab, interval 1, probability 0, space 0, times 0 [ 652.451025][T21018] CPU: 1 PID: 21018 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 652.459384][T21018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.469461][T21018] Call Trace: [ 652.472760][T21018] dump_stack+0x18f/0x20d [ 652.477105][T21018] should_fail.cold+0x5/0x14 [ 652.481705][T21018] ? tomoyo_realpath_from_path+0xc3/0x620 [ 652.487430][T21018] should_failslab+0x5/0xf [ 652.491857][T21018] __kmalloc+0x27d/0x340 [ 652.496111][T21018] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 652.501671][T21018] tomoyo_realpath_from_path+0xc3/0x620 [ 652.507238][T21018] ? tomoyo_profile+0x42/0x50 [ 652.511932][T21018] tomoyo_path_number_perm+0x1cb/0x4d0 [ 652.517405][T21018] ? tomoyo_path_number_perm+0x183/0x4d0 [ 652.523051][T21018] ? tomoyo_execute_permission+0x470/0x470 [ 652.528866][T21018] ? lock_acquire+0x1f1/0xad0 [ 652.533552][T21018] ? delayed_put_pid+0x30/0x30 [ 652.538341][T21018] ? lock_is_held_type+0xb0/0xe0 [ 652.543308][T21018] ? selinux_inode_getsecctx+0x90/0x90 [ 652.548782][T21018] ? __mutex_unlock_slowpath+0xe2/0x610 [ 652.554350][T21018] ? lock_is_held_type+0xb0/0xe0 [ 652.559324][T21018] ? __fget_files+0x294/0x400 [ 652.564038][T21018] security_file_ioctl+0x50/0xb0 [ 652.568984][T21018] ksys_ioctl+0x50/0x180 [ 652.573245][T21018] __x64_sys_ioctl+0x6f/0xb0 [ 652.577849][T21018] ? lockdep_hardirqs_on+0x6a/0xe0 [ 652.582970][T21018] do_syscall_64+0x60/0xe0 [ 652.587398][T21018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 652.593291][T21018] RIP: 0033:0x45cce9 [ 652.597276][T21018] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.616905][T21018] RSP: 002b:00007f77bef0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.625344][T21018] RAX: ffffffffffffffda RBX: 000000000000bc00 RCX: 000000000045cce9 [ 652.633323][T21018] RDX: 0000000020000040 RSI: 00000000c01864ba RDI: 0000000000000003 [ 652.641340][T21018] RBP: 00007f77bef0bca0 R08: 0000000000000000 R09: 0000000000000000 [ 652.649321][T21018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.657309][T21018] R13: 00007fff078d94bf R14: 00007f77bef0c9c0 R15: 000000000078bf0c [ 652.702242][T21018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.717988][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 652.838081][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 653.037942][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.047051][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.077662][ T8234] usb 1-1: Product: syz [ 653.081848][ T8234] usb 1-1: Manufacturer: syz [ 653.087054][ T8234] usb 1-1: SerialNumber: syz [ 653.148721][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 653.354479][ T3422] usb 1-1: USB disconnect, device number 83 01:51:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:22 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40000, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:22 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:22 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:22 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 01:51:22 executing program 0 (fault-call:8 fault-nth:0): r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 653.939144][T21048] FAULT_INJECTION: forcing a failure. [ 653.939144][T21048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 653.943954][T21047] FAULT_INJECTION: forcing a failure. [ 653.943954][T21047] name failslab, interval 1, probability 0, space 0, times 0 [ 653.952387][T21048] CPU: 0 PID: 21048 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 653.952398][T21048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.952404][T21048] Call Trace: [ 653.952428][T21048] dump_stack+0x18f/0x20d [ 653.952452][T21048] should_fail.cold+0x5/0x14 [ 653.952480][T21048] __alloc_pages_nodemask+0x1a3/0x930 [ 654.001031][T21048] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 654.007836][T21048] ? lock_downgrade+0x820/0x820 [ 654.012707][T21048] cache_grow_begin+0x8c/0xb20 [ 654.017489][T21048] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 654.022964][T21048] cache_alloc_refill+0x27b/0x340 [ 654.028009][T21048] ? lockdep_hardirqs_off+0x66/0xa0 [ 654.033221][T21048] ? tomoyo_realpath_from_path+0xc3/0x620 [ 654.038966][T21048] __kmalloc+0x319/0x340 [ 654.043220][T21048] tomoyo_realpath_from_path+0xc3/0x620 [ 654.048779][T21048] ? tomoyo_profile+0x42/0x50 [ 654.053471][T21048] tomoyo_path_number_perm+0x1cb/0x4d0 [ 654.059195][T21048] ? tomoyo_path_number_perm+0x183/0x4d0 [ 654.064846][T21048] ? tomoyo_execute_permission+0x470/0x470 [ 654.070658][T21048] ? lock_acquire+0x1f1/0xad0 [ 654.075348][T21048] ? delayed_put_pid+0x30/0x30 [ 654.080129][T21048] ? lock_is_held_type+0xb0/0xe0 [ 654.085177][T21048] ? selinux_inode_getsecctx+0x90/0x90 [ 654.090668][T21048] ? __mutex_unlock_slowpath+0xe2/0x610 [ 654.096230][T21048] ? lock_is_held_type+0xb0/0xe0 [ 654.101192][T21048] ? __fget_files+0x294/0x400 [ 654.105998][T21048] security_file_ioctl+0x50/0xb0 [ 654.110949][T21048] ksys_ioctl+0x50/0x180 [ 654.115647][T21048] __x64_sys_ioctl+0x6f/0xb0 [ 654.120624][T21048] ? lockdep_hardirqs_on+0x6a/0xe0 [ 654.125749][T21048] do_syscall_64+0x60/0xe0 [ 654.130170][T21048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.136063][T21048] RIP: 0033:0x45cce9 [ 654.139961][T21048] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.159584][T21048] RSP: 002b:00007f77bef0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.168352][T21048] RAX: ffffffffffffffda RBX: 000000000000bc00 RCX: 000000000045cce9 [ 654.176343][T21048] RDX: 0000000020000040 RSI: 00000000c01864ba RDI: 0000000000000003 [ 654.184320][T21048] RBP: 00007f77bef0bca0 R08: 0000000000000000 R09: 0000000000000000 [ 654.192306][T21048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.200285][T21048] R13: 00007fff078d94bf R14: 00007f77bef0c9c0 R15: 000000000078bf0c [ 654.208373][T21047] CPU: 1 PID: 21047 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 654.216713][T21047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.227612][T21047] Call Trace: [ 654.227640][T21047] dump_stack+0x18f/0x20d [ 654.227662][T21047] should_fail.cold+0x5/0x14 01:51:22 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x408100, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x200, 0x1000, 0x4, 0x80000000, 0xc0, "034fdb31a4604cd7ec76b0ea79dae6c4404b80", 0x5, 0x1}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) [ 654.227685][T21047] ? tomoyo_realpath_from_path+0xc3/0x620 [ 654.227699][T21047] should_failslab+0x5/0xf [ 654.227715][T21047] __kmalloc+0x27d/0x340 [ 654.227740][T21047] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 654.227757][T21047] tomoyo_realpath_from_path+0xc3/0x620 [ 654.227774][T21047] ? tomoyo_profile+0x42/0x50 [ 654.227796][T21047] tomoyo_path_number_perm+0x1cb/0x4d0 [ 654.227823][T21047] ? tomoyo_path_number_perm+0x183/0x4d0 [ 654.281192][T21047] ? tomoyo_execute_permission+0x470/0x470 01:51:22 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 654.287006][T21047] ? lock_acquire+0x1f1/0xad0 [ 654.291705][T21047] ? delayed_put_pid+0x30/0x30 [ 654.296500][T21047] ? lock_is_held_type+0xb0/0xe0 [ 654.301495][T21047] ? selinux_inode_getsecctx+0x90/0x90 [ 654.307082][T21047] ? __mutex_unlock_slowpath+0xe2/0x610 [ 654.312640][T21047] ? lock_is_held_type+0xb0/0xe0 [ 654.318139][T21047] ? __fget_files+0x294/0x400 [ 654.322835][T21047] security_file_ioctl+0x50/0xb0 [ 654.328042][T21047] ksys_ioctl+0x50/0x180 [ 654.332293][T21047] __x64_sys_ioctl+0x6f/0xb0 01:51:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 654.336897][T21047] ? lockdep_hardirqs_on+0x6a/0xe0 [ 654.342025][T21047] do_syscall_64+0x60/0xe0 [ 654.346464][T21047] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.352692][T21047] RIP: 0033:0x45cce9 [ 654.356779][T21047] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.376397][T21047] RSP: 002b:00007f4e9f1f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.384820][T21047] RAX: ffffffffffffffda RBX: 000000000000b5c0 RCX: 000000000045cce9 [ 654.392799][T21047] RDX: 00000000200001c0 RSI: 00000000c01c64ae RDI: 0000000000000003 [ 654.400803][T21047] RBP: 00007f4e9f1f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 654.409073][T21047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.417060][T21047] R13: 00007ffc63cffcaf R14: 00007f4e9f1f99c0 R15: 000000000078bf0c 01:51:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x1000, 0x9, 0xb8, 0x8}}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x12e) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xfffffffffffffeaa) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0x9e0000, 0x0, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a090d, 0x401, [], @p_u16=&(0x7f0000000080)=0xe3}}) ioctl$TCSETX(r8, 0x5433, &(0x7f0000000140)={0x800, 0x9, [0xc939, 0x3ff, 0xffc0, 0x8, 0xc2], 0x4}) 01:51:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4609, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:23 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 654.544232][T21047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 654.672006][T21079] FAULT_INJECTION: forcing a failure. [ 654.672006][T21079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.685246][T21079] CPU: 1 PID: 21079 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 654.693616][T21079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.703701][T21079] Call Trace: [ 654.707009][T21079] dump_stack+0x18f/0x20d [ 654.711361][T21079] should_fail.cold+0x5/0x14 [ 654.716014][T21079] __alloc_pages_nodemask+0x1a3/0x930 01:51:23 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) [ 654.721423][T21079] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 654.728222][T21079] ? lock_downgrade+0x820/0x820 [ 654.733100][T21079] cache_grow_begin+0x8c/0xb20 [ 654.737885][T21079] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 654.743370][T21079] cache_alloc_refill+0x27b/0x340 [ 654.748438][T21079] ? lockdep_hardirqs_off+0x66/0xa0 [ 654.753688][T21079] ? tomoyo_realpath_from_path+0xc3/0x620 [ 654.759425][T21079] __kmalloc+0x319/0x340 [ 654.763695][T21079] tomoyo_realpath_from_path+0xc3/0x620 [ 654.769261][T21079] ? tomoyo_profile+0x42/0x50 [ 654.773961][T21079] tomoyo_path_number_perm+0x1cb/0x4d0 [ 654.779444][T21079] ? tomoyo_path_number_perm+0x183/0x4d0 [ 654.785206][T21079] ? tomoyo_execute_permission+0x470/0x470 [ 654.791089][T21079] ? lock_acquire+0x1f1/0xad0 [ 654.795788][T21079] ? delayed_put_pid+0x30/0x30 [ 654.800669][T21079] ? lock_is_held_type+0xb0/0xe0 [ 654.805679][T21079] ? selinux_inode_getsecctx+0x90/0x90 [ 654.811170][T21079] ? __mutex_unlock_slowpath+0xe2/0x610 [ 654.816832][T21079] ? lock_is_held_type+0xb0/0xe0 [ 654.821794][T21079] ? __fget_files+0x294/0x400 [ 654.826495][T21079] security_file_ioctl+0x50/0xb0 [ 654.831479][T21079] ksys_ioctl+0x50/0x180 [ 654.835739][T21079] __x64_sys_ioctl+0x6f/0xb0 [ 654.840348][T21079] ? lockdep_hardirqs_on+0x6a/0xe0 [ 654.845595][T21079] do_syscall_64+0x60/0xe0 [ 654.852636][T21079] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.858545][T21079] RIP: 0033:0x45cce9 01:51:23 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x12e) [ 654.862455][T21079] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.882095][T21079] RSP: 002b:00007f4e9f1f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.890549][T21079] RAX: ffffffffffffffda RBX: 000000000000b5c0 RCX: 000000000045cce9 [ 654.898621][T21079] RDX: 00000000200001c0 RSI: 00000000c01c64ae RDI: 0000000000000003 [ 654.906608][T21079] RBP: 00007f4e9f1f8ca0 R08: 0000000000000000 R09: 0000000000000000 01:51:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 654.914760][T21079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.924219][T21079] R13: 00007ffc63cffcaf R14: 00007f4e9f1f99c0 R15: 000000000078bf0c 01:51:23 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 655.041735][ T17] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 655.145097][T21095] FAULT_INJECTION: forcing a failure. [ 655.145097][T21095] name failslab, interval 1, probability 0, space 0, times 0 [ 655.159064][T21095] CPU: 0 PID: 21095 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 655.167409][T21095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.177497][T21095] Call Trace: [ 655.180822][T21095] dump_stack+0x18f/0x20d [ 655.185244][T21095] should_fail.cold+0x5/0x14 [ 655.189876][T21095] ? tomoyo_realpath_from_path+0xc3/0x620 [ 655.195659][T21095] should_failslab+0x5/0xf [ 655.200126][T21095] __kmalloc+0x27d/0x340 [ 655.204418][T21095] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 655.209992][T21095] tomoyo_realpath_from_path+0xc3/0x620 [ 655.215588][T21095] ? tomoyo_profile+0x42/0x50 [ 655.220387][T21095] tomoyo_path_number_perm+0x1cb/0x4d0 [ 655.225871][T21095] ? tomoyo_path_number_perm+0x183/0x4d0 [ 655.231528][T21095] ? tomoyo_execute_permission+0x470/0x470 [ 655.237569][T21095] ? lock_acquire+0x1f1/0xad0 [ 655.242450][T21095] ? delayed_put_pid+0x30/0x30 [ 655.247252][T21095] ? lock_is_held_type+0xb0/0xe0 [ 655.252240][T21095] ? selinux_inode_getsecctx+0x90/0x90 [ 655.258361][T21095] ? __mutex_unlock_slowpath+0xe2/0x610 [ 655.268093][T21095] ? lock_is_held_type+0xb0/0xe0 [ 655.273052][T21095] ? __fget_files+0x294/0x400 [ 655.277752][T21095] security_file_ioctl+0x50/0xb0 [ 655.282732][T21095] ksys_ioctl+0x50/0x180 [ 655.287258][T21095] __x64_sys_ioctl+0x6f/0xb0 [ 655.291873][T21095] ? lockdep_hardirqs_on+0x6a/0xe0 [ 655.297025][T21095] do_syscall_64+0x60/0xe0 [ 655.301659][T21095] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 655.308018][T21095] RIP: 0033:0x45cce9 [ 655.312037][T21095] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 655.331690][T21095] RSP: 002b:00007f8236cedc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.340116][T21095] RAX: ffffffffffffffda RBX: 000000000000f240 RCX: 000000000045cce9 [ 655.348101][T21095] RDX: 0000000020000000 RSI: 00000000c0386106 RDI: 0000000000000003 [ 655.358346][T21095] RBP: 00007f8236cedca0 R08: 0000000000000000 R09: 0000000000000000 [ 655.366332][T21095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.374494][T21095] R13: 00007ffdbf68859f R14: 00007f8236cee9c0 R15: 000000000078bf0c [ 655.508433][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 655.582399][T21095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 655.647789][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 655.857512][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.866690][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.879487][ T17] usb 1-1: Product: syz [ 655.883688][ T17] usb 1-1: Manufacturer: syz [ 655.890399][ T17] usb 1-1: SerialNumber: syz [ 655.938557][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 656.151700][ T2735] usb 1-1: USB disconnect, device number 84 01:51:25 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:51:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x460f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:25 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:25 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x10, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 656.730481][T21124] FAULT_INJECTION: forcing a failure. [ 656.730481][T21124] name failslab, interval 1, probability 0, space 0, times 0 [ 656.780779][T21124] CPU: 1 PID: 21124 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 656.789140][T21124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.799192][T21124] Call Trace: [ 656.802502][T21124] dump_stack+0x18f/0x20d [ 656.806849][T21124] should_fail.cold+0x5/0x14 [ 656.811449][T21124] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 656.816824][T21124] should_failslab+0x5/0xf [ 656.821888][T21124] __kmalloc+0x27d/0x340 01:51:25 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="7db700e100000000f56810"], 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, r3, 0xb98, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xff, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x11e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x47}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x84) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 656.826147][T21124] ? tomoyo_realpath_from_path+0xc3/0x620 [ 656.831876][T21124] tomoyo_encode2.part.0+0xe9/0x3a0 [ 656.837082][T21124] ? tomoyo_realpath_from_path+0xc3/0x620 [ 656.842816][T21124] tomoyo_encode+0x28/0x50 [ 656.847278][T21124] tomoyo_realpath_from_path+0x186/0x620 [ 656.852959][T21124] tomoyo_path_number_perm+0x1cb/0x4d0 [ 656.858447][T21124] ? tomoyo_path_number_perm+0x183/0x4d0 [ 656.865627][T21124] ? tomoyo_execute_permission+0x470/0x470 [ 656.871541][T21124] ? lock_acquire+0x1f1/0xad0 [ 656.876346][T21124] ? delayed_put_pid+0x30/0x30 [ 656.881130][T21124] ? lock_is_held_type+0xb0/0xe0 [ 656.886105][T21124] ? selinux_inode_getsecctx+0x90/0x90 [ 656.891666][T21124] ? __mutex_unlock_slowpath+0xe2/0x610 [ 656.897412][T21124] ? lock_is_held_type+0xb0/0xe0 [ 656.902388][T21124] ? __fget_files+0x294/0x400 [ 656.907083][T21124] security_file_ioctl+0x50/0xb0 [ 656.912069][T21124] ksys_ioctl+0x50/0x180 [ 656.916344][T21124] __x64_sys_ioctl+0x6f/0xb0 [ 656.920945][T21124] ? lockdep_hardirqs_on+0x6a/0xe0 [ 656.926059][T21124] do_syscall_64+0x60/0xe0 [ 656.930483][T21124] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 656.936465][T21124] RIP: 0033:0x45cce9 [ 656.941233][T21124] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.960843][T21124] RSP: 002b:00007f4e9f1f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.969285][T21124] RAX: ffffffffffffffda RBX: 000000000000b5c0 RCX: 000000000045cce9 01:51:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4611, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4b47, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 656.977265][T21124] RDX: 00000000200001c0 RSI: 00000000c01c64ae RDI: 0000000000000003 [ 656.985244][T21124] RBP: 00007f4e9f1f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 656.993220][T21124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.001197][T21124] R13: 00007ffc63cffcaf R14: 00007f4e9f1f99c0 R15: 000000000078bf0c 01:51:25 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r6 = accept4$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, 0x0, 0x8000) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES64=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYRESDEC=r1, @ANYRES16=r8, @ANYRESDEC=r9, @ANYBLOB="a94a8a44b7a26fa7cdbed997e154fdf1"], 0x12e) 01:51:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4615, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 657.297395][ T3422] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 657.375280][T21124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 657.537391][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 657.657506][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 657.847525][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.856604][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.877108][ T3422] usb 1-1: Product: syz [ 657.881331][ T3422] usb 1-1: Manufacturer: syz [ 657.885937][ T3422] usb 1-1: SerialNumber: syz [ 657.948336][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 658.231392][ T3422] usb 1-1: USB disconnect, device number 85 01:51:27 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:51:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4b49, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:27 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xa500, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000040)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000080)={0x6, 'gre0\x00', {}, 0x11}) 01:51:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4619, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:27 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x2, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:27 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) connect$tipc(r2, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 01:51:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4c00, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4650, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x10, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 659.197152][ T3422] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 659.440618][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 659.557342][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 659.727100][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.736344][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.745667][ T3422] usb 1-1: Product: syz [ 659.750441][ T3422] usb 1-1: Manufacturer: syz [ 659.755032][ T3422] usb 1-1: SerialNumber: syz [ 659.798234][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 660.004801][ T3422] usb 1-1: USB disconnect, device number 86 01:51:29 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 01:51:29 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup(r4) ioctl$PPPIOCGDEBUG(r7, 0x80047441, &(0x7f00000000c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX=r3, @ANYRESDEC=r6, @ANYRES16=r8, @ANYRESDEC=r8], 0x12e) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x62, 0xc, 0x3, "6d95742a59eda840e724cf19be62a34f", "2fb8f76c3fdcc2f9204bcbb81a202d8563b2e9e94f41f812c8e534fec7c8f9c4551a906dae6db0f7a8ca2250c58b74ddf3ad09b14b046f6eb8e0dea8f7db68749ad10c1b773c09442a211e48d8"}, 0x62, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 01:51:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4c01, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:29 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x4b47, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4b34, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4c04, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:29 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x4b49, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4b49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4b44, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4c05, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 660.986896][ T2735] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 661.246871][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 661.378129][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 661.577192][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.606812][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.614924][ T2735] usb 1-1: Product: syz [ 661.676817][ T2735] usb 1-1: Manufacturer: syz [ 661.687187][ T2735] usb 1-1: SerialNumber: syz [ 661.737907][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 661.943960][ T2735] usb 1-1: USB disconnect, device number 87 [ 662.736819][ T17] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 662.996789][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 663.137957][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 663.327007][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 663.336072][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.345369][ T17] usb 1-1: Product: syz [ 663.350328][ T17] usb 1-1: Manufacturer: syz [ 663.354938][ T17] usb 1-1: SerialNumber: syz [ 663.398329][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 01:51:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4c00, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4b47, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x4c01, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0, @ANYRES16=r1, @ANYRESDEC=r0], 0x12e) [ 663.600734][ T8234] usb 1-1: USB disconnect, device number 88 01:51:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5411, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:32 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01000000000000000000090582020000000000090503020020000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:51:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x541b, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4c01, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4b49, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x541b, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x541c, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5421, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x5421, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4c00, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 664.146672][ T8234] usb 1-1: new high-speed USB device number 89 using dummy_hcd 01:51:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 664.396650][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 664.536797][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 664.736781][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.747135][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.756014][ T8234] usb 1-1: Product: syz [ 664.763986][ T8234] usb 1-1: Manufacturer: syz [ 664.770757][ T8234] usb 1-1: SerialNumber: syz [ 664.831402][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 665.051604][ T8234] usb 1-1: USB disconnect, device number 89 [ 665.881499][ T2735] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 666.152331][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 666.277215][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 666.476859][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.496396][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.505470][ T2735] usb 1-1: Product: syz [ 666.516077][ T2735] usb 1-1: Manufacturer: syz [ 666.522194][ T2735] usb 1-1: SerialNumber: syz [ 666.567783][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 01:51:35 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000021000102505a1a440000102030109023b000101000000290400000002060000052406000005240000000d240f0100000000000000000009058202000000000009050302000000000099b3c2e3325d94ccfbe8bb29f119cf"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:51:35 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x5450, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5450, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5450, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4c01, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x12e) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0xa26d, 0x22002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xffffffff], 0x1, 0x800, r4, r5}) [ 666.750815][ T3422] usb 1-1: USB disconnect, device number 90 01:51:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5451, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:35 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x5) 01:51:35 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x5451, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5451, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5452, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 667.330433][ T3422] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 667.591561][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 667.752924][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 667.956573][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.965922][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.974658][ T3422] usb 1-1: Product: syz [ 667.979506][ T3422] usb 1-1: Manufacturer: syz [ 667.984126][ T3422] usb 1-1: SerialNumber: syz [ 668.037843][ T3422] usb 1-1: bad CDC descriptors [ 668.243488][ T8234] usb 1-1: USB disconnect, device number 91 [ 669.016262][ T8234] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 669.256275][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 669.376573][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 669.547113][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.556489][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.564489][ T8234] usb 1-1: Product: syz [ 669.569403][ T8234] usb 1-1: Manufacturer: syz [ 669.574043][ T8234] usb 1-1: SerialNumber: syz [ 669.617047][ T8234] usb 1-1: bad CDC descriptors 01:51:38 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x5452, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4c05, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5460, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:38 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'bond0\x00', {}, 0x5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000340)={0x0, 'batadv_slave_1\x00', {0x210000}, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r1, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x401}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x81, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0xd, 0x80000}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x533341) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r2, 0x4, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x8, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x200}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x0, 0xcd}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r3, 0x8}) 01:51:38 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r4, 0xc94}, &(0x7f0000000100)=0x8) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r0) [ 669.821779][ T8234] usb 1-1: USB disconnect, device number 92 01:51:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x541b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:38 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x5460, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x6364, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x5460, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:38 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) 01:51:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x8912, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x541c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x6364, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:38 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x5501, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:38 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x8000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r3, @ANYRESHEX=r1, @ANYBLOB, @ANYRES64=r5], 0x12e) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:51:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x8933, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 670.336347][ T8234] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 670.576218][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 670.696458][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 670.886557][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.895672][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.911120][ T8234] usb 1-1: Product: syz [ 670.915384][ T8234] usb 1-1: Manufacturer: syz [ 670.921414][ T8234] usb 1-1: SerialNumber: syz [ 670.967491][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 671.192637][ T3422] usb 1-1: USB disconnect, device number 93 01:51:40 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1ff, 0x2, [0x3f, 0x0]}, &(0x7f0000000040)=0xc) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) ptrace$getregset(0x4204, r6, 0x207, &(0x7f0000000180)={&(0x7f0000000200)=""/140, 0x8c}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x7ff}, &(0x7f0000000100)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:51:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:40 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x90001, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="bf67230490b181f562e9482335d13255affc34f56d6babea38e716a0b267bdd106ea3b39133bac509e5c2524c249c02796b95627575b19"], 0x12e) 01:51:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x8912, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x89f5, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x5509, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x5421, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x5602, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x8933, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x5450, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:40 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x8000) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x8, 0x8000, 0x1, 'queue1\x00', 0xffff}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) [ 672.219708][ T3422] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 672.466062][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 672.586460][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 672.776512][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.799101][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.823896][ T3422] usb 1-1: Product: syz [ 672.829228][ T3422] usb 1-1: Manufacturer: syz [ 672.833916][ T3422] usb 1-1: SerialNumber: syz [ 672.903549][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 673.113139][ T3422] usb 1-1: USB disconnect, device number 94 [ 673.905954][ T3422] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 674.165848][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 674.286091][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 674.456135][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.465243][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.473696][ T3422] usb 1-1: Product: syz [ 674.478058][ T3422] usb 1-1: Manufacturer: syz [ 674.482662][ T3422] usb 1-1: SerialNumber: syz [ 674.527148][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 01:51:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x400448dd, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:43 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x6364, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x8982, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x5451, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x564}, @mss={0x2, 0x2}, @mss={0x2, 0x41b}], 0x4) r3 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r3, 0x1000000) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01000000000000000000090582020001000000090503020000000000113d141ad47fbbb964f345bfd87e6975a479bff322b0e72c510bf60a65be708a21bc949f6b3ed591d39373644c38ae955d03998703b9e1f784ac6545363cb387b5d9c36d999f6208e2f6f51bff582c67358208da089d13b97d77a9655201cfd7646dcee79a3beb10e6762a3a040289348633074610bdf4db8ac44dc83f97f8d958"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) [ 674.732346][ T8234] usb 1-1: USB disconnect, device number 95 01:51:43 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) 01:51:43 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x7002, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x5452, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x2) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x400448c9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x400454ca, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:43 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x770a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:43 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec01000029000000000000000000000000000000cffc56fdabe548", @ANYRES32=r3], 0x1ec}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', r3}) 01:51:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x5460, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x40049409, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 675.235877][ T8234] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 675.485830][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 675.657403][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 675.826067][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.835116][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.843630][ T8234] usb 1-1: Product: syz [ 675.848330][ T8234] usb 1-1: Manufacturer: syz [ 675.852935][ T8234] usb 1-1: SerialNumber: syz [ 675.877116][T21696] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 675.908039][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 676.121001][ T8234] usb 1-1: USB disconnect, device number 96 [ 676.895714][ T8234] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 677.135680][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 677.255810][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 677.426021][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 677.435164][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.443760][ T8234] usb 1-1: Product: syz [ 677.448390][ T8234] usb 1-1: Manufacturer: syz [ 677.453052][ T8234] usb 1-1: SerialNumber: syz [ 677.476301][T21699] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 677.496704][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 01:51:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCDISCONN(r5, 0x7439) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b00db1ae7f7bd900efa0e57a66a0100000000090400000002060000052406000005240000000d240f00ffffffffffffdd0000090582020000ca6e5ccb1f5fdb61650ef9420ddd35bf19ca6420124a00c93129ec0910c1b3f410f9cf837f72d524b025d6491bfd6b7bfa6cea094b7fa110ccfa0912f0bc2d07529b17ab775fbf6b53f216e088d4d7ce01393755ddf1f33c4bb1f002826ea5b8b9cc3de43018d95cc002519041b4a1051a235dcdefddbfb43206a35234676d3b35d5eeae1522462ba3efba656f3366e73f29d1348380498404fca625a037f965e626f6"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x100400200) close(r0) 01:51:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4008550d, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x6364, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x890c, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x400454ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:46 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = semget(0x0, 0x0, 0x0) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000240)=""/211) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/225) r3 = socket(0x15, 0x5, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0xb8, 0x6, 0x13, 0x701, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockopt$inet_mreq(r1, 0x0, 0x63, &(0x7f0000000000)={@loopback, @loopback}, &(0x7f00000000c0)=0x8) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) [ 677.701595][ T8234] usb 1-1: USB disconnect, device number 97 01:51:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4004560e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x8912, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x8912, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x40086602, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:46 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x8000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, 0x0, 0x8000) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYBLOB="ba6c5adb4e6481959bdc7a15464ce79262242c8e98dccb9eb851d859caefe28b92025b730080", @ANYRES64=r6, @ANYRESOCT=r7, @ANYRESHEX], 0x12e) 01:51:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x8933, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 678.221895][ T8234] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 678.485624][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 678.606984][ T8234] usb 1-1: config 26 has too many interfaces: 219, using maximum allowed: 32 [ 678.624388][ T8234] usb 1-1: config 26 has an invalid descriptor of length 144, skipping remainder of the config [ 678.641528][ T8234] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 219 [ 678.817002][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.837531][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.863171][ T8234] usb 1-1: Product: syz [ 678.869547][ T8234] usb 1-1: Manufacturer: syz [ 678.874260][ T8234] usb 1-1: SerialNumber: syz [ 679.157704][ T8234] usb 1-1: USB disconnect, device number 98 01:51:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x40087602, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:48 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x8933, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x8983, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:48 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r1 = accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002900270d00"/20, @ANYRES32=r4], 0x1ec}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x4e24, 0x7, 0x4e20, 0x0, 0xa, 0x120, 0x20, 0xc, r4, r6}, {0x8, 0x4, 0x6, 0x1, 0x0, 0x6f, 0x1, 0x6e}, {0x6e0, 0x3, 0xfff, 0x8}, 0x3, 0x6e6bbc, 0x1, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d2, 0xff}, 0x2, @in=@empty, 0x34ff, 0x3, 0x2, 0x5, 0x800, 0x1, 0x6}}, 0xe8) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff800, 0x484000) write$UHID_CREATE2(r7, &(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYRES16, @ANYBLOB="6e6d002ddc7cbd1fdd559233b815f38c6cb57dd0a1b808044a2b46bfdfa17a4d40fc449bf0f13a1066bf87635e27b2d199b94a980b8cd14cf53d6714f543a458ff896cda871a7f086aec583f557ab1a5c2d3576046fd3dfb1ae2fa41ab565b91c1ca4bd34f54d2f96ed7208679942ef6c418a2cfb72e6fab1e9495b78b0c26085df8f691b70dae3dd5743eadc1ae98be8ebe89efb619cc4948118ee4afdd7b0a232d2d88668e83fb0b06c0d4a387f770ca2254e8e46d0e8a509e8219409a61a304c19f9be4526a7e0e7b0da7f76183748b2fc8a5d0b398d21e377fc366f8fc131428285881c647f92a927738"], 0x12e) 01:51:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101000000090400000002060002052406000005240000000d240f01000000000000000000090582020000000000090503020000000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={r5, 0x25}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000000)={r5, 0x24}) close(r0) [ 679.735677][T21834] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 01:51:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xae01, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x40186366, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:48 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x7d, &(0x7f0000000140)={r5}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r5, 0x3}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x12e) 01:51:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xae41, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x40087602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:48 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:48 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x89a0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x40186366, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x80086301, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 680.325485][ T2735] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 680.585432][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 680.725885][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 680.916674][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 680.925839][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.933826][ T2735] usb 1-1: Product: syz [ 680.938157][ T2735] usb 1-1: Manufacturer: syz [ 680.943076][ T2735] usb 1-1: SerialNumber: syz [ 681.226248][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 681.234901][ T2735] usb 1-1: USB disconnect, device number 99 [ 681.985318][ T17] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 682.245355][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 682.376964][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 682.565437][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.575074][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.584494][ T17] usb 1-1: Product: syz [ 682.589107][ T17] usb 1-1: Manufacturer: syz [ 682.593900][ T17] usb 1-1: SerialNumber: syz 01:51:51 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x8000) sync_file_range(r2, 0x5, 0x400, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) 01:51:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xae60, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:51 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x89a1, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:51 executing program 5: setresuid(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)='/dev/uhid\x00', 0xffffffffffffffff}, 0x30) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r7, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x384, 0x4, 0x3, 0x401, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @generic="6b4a64dcf5a30d86584fb4389ea67fbfc17300000000000000d40a745793a0d150bb31dd1376c5479a7c783ee7fee99d56", @nested={0xc, 0x46, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @uid=0xee01}]}, @nested={0xd1, 0x58, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @pid=r3}, @generic="aff941a9f1714a4dc1240d8433b98c0472618324291808daa61f86672eb9bd229deab48cf42d4507d57877dccf40d5f6652e6484730a0ccc42400d498b699dfcba5d05a42ce823bb6089873557ee796cbddb16704de6b1f1e851d9230b6bf7f674eeb2dd185c466c93f8f7859abfbb0041a51ab1744842419858ef9528068d40640489600e616d7a8b81b28536347a26e064519550ce485fe2b40bec4c983369537e870748b8cb3003dfaa4aea6f71abf2f15965857807fd562491640b166fbb099ba029c2"]}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @nested={0xcf, 0x49, 0x0, 0x1, [@typed={0xc, 0x1d, 0x0, 0x0, @u64=0x4}, @typed={0x6d, 0x43, 0x0, 0x0, @binary="74a1eaec984ed1696be6695334b1e20cac6a090422202c14e974f253f8ec0637cf2e4cd381873dce2aeb20e287fb26c99ae18e46706c5a733696d2b14b24284949ebe766090a2d4cb2b9b7f48c38c107915829dd7285baab74ac83d01a76e8455edddd3615c05cc3e7"}, @typed={0x8, 0xc, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x11, 0x0, 0x0, @uid=r7}, @generic="abcf4c9178c9885b15ac360e8a4e3cbae34438026c61c122af7b3c5d45520c349b9e0526588ee476b3c4e5ecfdfc0e2a60836db25d2df89ca515b3a2a8f9c2"]}, @generic="4c243d3321fcea6bffcf247fc7bc971df5cfd569844a924b63700423e7f60b045d53e19f5d0bf75c7cee4a7f95cc80ce99c41665f7cd646c7f1c9363adeeeabca74429dd1bc1a1fdaae2679223f0b5bc769ceba2bb9eb1a9ecfb82559f95aac0874abd037b4e54275099eee4893a52cf21cdd6ab10ffa4048e8567591d9f9a54aaee36cc800e5ec2ea9ab323d869f8bb5754e27de6aa1316960d61c6398c1a713e337d6e8a12965584d6b4e7d1ddb3293c7ebd2785", @generic="8b9799270976bc9c6d66270a788758c154095b7150d16c5b99ceaf6bdb76a47284c7bac944a0aecce72d0676f2477b2f21ea167eec54ba975d86b77d3b13288a605d574a747c04c067f1f2777a76403f4c5f55d9335b1d1d5569b51cabc004f194a6beb6f1af8ef92bbca48e84a5467dae6465a42d7da913ae7d210b08ec37bd340f8bcbe0e8b9d086949a876cdd2ffb11ed0b18dc8ba0cf9304cb526f300f432a078b0aa653e598cb7008f81208b268e38704a0ebcc80a89f08649b8f"]}, 0x384}, 0x1, 0x0, 0x0, 0x800}, 0x800) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[], 0x12e) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000000000)=""/210) 01:51:51 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x80086601, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 682.836127][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 682.868298][ T17] usb 1-1: USB disconnect, device number 100 01:51:51 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xae01, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:51 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x41015500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xae80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x80087601, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x400448c9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 683.475352][ T17] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 683.765341][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 683.885511][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 684.095641][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 684.104812][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.113278][ T17] usb 1-1: Product: syz [ 684.117856][ T17] usb 1-1: Manufacturer: syz [ 684.122558][ T17] usb 1-1: SerialNumber: syz [ 684.167320][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 684.374958][ T3422] usb 1-1: USB disconnect, device number 101 01:51:53 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xae41, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x8004745a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x400448dd, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:53 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x2, 0x2715, &(0x7f0000032580)=""/102394, &(0x7f0000000100)=0x18ffa) sendto$l2tp6(r1, &(0x7f0000000000)="771f3a968aad6343f5dc92fdc2c9c58fee39c09f8e6a6124023202649dd0ed302806a54d9b01273ed644d9b45ddcf8dbb17ca1fcf3b30c224bb943b1783e7a79a9487394ddef88efa3a3427a6e3c556da73fb77df8b91a0c499c8c4a5a4783746fe6ce743a65ef54c35910bb7a09f26d5e0bf757753fbad7a82557612ab2298661f4ba18262ce248004a9b69bfb5adbc05461a20c248cfed", 0x98, 0x40, 0x0, 0x0) 01:51:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8}}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:51:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x400454ca, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ce, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x80086301, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:53 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xae80, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:53 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x6, 0x34, "44b5a0e1aae8402c64831bc649768aef9e53d23d9ec689a07e68bbaf163eff732d89e3ac16b77208b4569904bddde6bc7e1ee00e"}, 0x3c) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x8000) write$UHID_CREATE2(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB="f1e231ef6bcb54bb5261deff17c2671a251d1b92fee0964897a9b2171d1df2925268f6f3fac2b4492f3cc3d256493f38026ad7f8e13ebcba95aab6a3d59bb2fc5fd98a6192a62f969050dce95018340731aa467f618f9055ed", @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES16=r2, @ANYBLOB="60b9043a4b89a54b5cbaa9867da9346fa502df1e9f9f83df37132962f34499578869bafdae4325e41d71441b57fff5aaf74c3ed3242d9cc5a73f62703b898669be12162b04eb5ef90a255f3c0dc68f89106ba682f9f440824bf97eac89d09cf6551f8b345b00ab603139b67fb076b3caf250646f16a9a170b7ded57c402bbcaea0eb1663378d9b4e848bf39214b0ed282d5bdec5c2836520cb27f56b67a2bb51dec7268a7a13fd36feda12e7f7156445701066d9d3b285edb5a972b3f64e8c3713dfa4bae69167659974666299e26e668954d8245fbbda12a221191fb15b190759725bb1b28522d6a3ae136001", @ANYRES64, @ANYRESHEX=r2], 0x12e) 01:51:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x40049409, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:53 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xae9a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x80086601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:53 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x3, 0x936, 0x3f, 0x5}) 01:51:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x40086602, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 685.345093][ T3421] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 685.595263][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 685.715510][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 685.895254][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.904441][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.925058][ T3421] usb 1-1: Product: syz [ 685.929301][ T3421] usb 1-1: Manufacturer: syz [ 685.934443][ T3421] usb 1-1: SerialNumber: syz [ 685.976553][T22000] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 685.996078][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 686.224081][ T17] usb 1-1: USB disconnect, device number 102 01:51:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x33, @rand_addr=0x64010102, 0x4e23, 0x3, 'fo\x00', 0x0, 0x2, 0x57}, {@local, 0x4e21, 0x4, 0x3, 0x100, 0x4}}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 01:51:55 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40026102, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:51:55 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x8021, 0x3}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x440000, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x80087601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x40087602, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x40186366, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x2, 0xf, 0x1f}) 01:51:55 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:51:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:55 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x400448c9, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4020940d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 687.394935][ T3421] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 687.655117][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 687.796987][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 687.975230][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 687.985685][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.993948][ T3421] usb 1-1: Product: syz [ 688.000062][ T3421] usb 1-1: Manufacturer: syz [ 688.005965][ T3421] usb 1-1: SerialNumber: syz [ 688.056318][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 688.269446][ T3421] usb 1-1: USB disconnect, device number 103 01:51:57 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x80, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0x4147, 0x0) close(r0) 01:51:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x3, 0xf, 0x1f}) 01:51:57 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0xb, 0x50, {0x50, 0xb, "465306a1ce62046587b06696ddbfcf0903700ecbd5c466b7e214b9222efcb6397b6ba0ebe6c47bbb5e96eacc4870efa67a0a386530635424ef1c26048bf43dcc1d6edb2949f7eb49e0fe4091b648"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x0, 0x8, 0x32, "b6c01eddfe12d66da2289b95b2cb860ca7563b54fcda9dc0418eca95f727fe5d12e4f1e29df0294392c2d0caf74d20fb06b4"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x2}}) 01:51:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:57 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x400448dd, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:57 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x400454ca, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:51:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x4090ae82, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x4, 0xf, 0x1f}) 01:51:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:51:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x800454d3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:51:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x5, 0xf, 0x1f}) [ 689.212764][ T3422] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 689.424978][ T3421] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 689.504845][ T3422] usb 6-1: device descriptor read/64, error 18 [ 689.684958][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 689.815018][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 689.924963][ T3422] usb 6-1: device descriptor read/64, error 18 [ 690.004968][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.014357][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.022904][ T3421] usb 1-1: Product: syz [ 690.028018][ T3421] usb 1-1: Manufacturer: syz [ 690.032696][ T3421] usb 1-1: SerialNumber: syz [ 690.204881][ T3422] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 690.327685][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 690.345698][ T3421] usb 1-1: USB disconnect, device number 104 [ 690.484761][ T3422] usb 6-1: device descriptor read/64, error 18 [ 690.874864][ T3422] usb 6-1: device descriptor read/64, error 18 [ 690.996128][ T3422] usb usb6-port1: attempt power cycle [ 691.064761][ T3421] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 691.304733][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 691.425925][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 691.595069][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.604155][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.613270][ T3421] usb 1-1: Product: syz [ 691.618078][ T3421] usb 1-1: Manufacturer: syz [ 691.622665][ T3421] usb 1-1: SerialNumber: syz [ 691.704956][ T3422] usb 6-1: new high-speed USB device number 10 using dummy_hcd 01:52:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x7f, @none, 0x2, 0x2}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:52:00 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x4004550a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 691.875074][ T3422] usb 6-1: device descriptor read/8, error -71 01:52:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x6, 0xf, 0x1f}) 01:52:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x80086301, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 691.945847][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 691.967945][ T3421] usb 1-1: USB disconnect, device number 105 01:52:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x80086601, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x7, 0xf, 0x1f}) 01:52:00 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0684608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 692.084701][ T3422] usb 6-1: device descriptor read/8, error -71 01:52:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x80087601, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x8, 0xf, 0x1f}) 01:52:00 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="dc"], 0x8, 0x0) msgrcv(r1, &(0x7f0000000500)={0x0, ""/210}, 0x200005da, 0x0, 0x4800) r2 = getuid() r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r8, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x3, r2, r4, r6, r8, 0x39}, 0x0, 0x0, 0x3, 0x7, 0x7, 0x2, 0x9, 0x0, 0x8, 0x0, r9, r10}) [ 692.504822][ T3421] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 692.760993][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 692.885073][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 693.054717][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.063797][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.073281][ T3421] usb 1-1: Product: syz [ 693.078043][ T3421] usb 1-1: Manufacturer: syz [ 693.082630][ T3421] usb 1-1: SerialNumber: syz [ 693.125619][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 693.332768][ T3421] usb 1-1: USB disconnect, device number 106 [ 694.104820][ T3421] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 694.345145][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 694.465858][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 694.634890][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.644046][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.652693][ T3421] usb 1-1: Product: syz [ 694.657170][ T3421] usb 1-1: Manufacturer: syz [ 694.661840][ T3421] usb 1-1: SerialNumber: syz [ 694.705410][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 01:52:03 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000), 0x2) 01:52:03 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40049409, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0d05605, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0x80404506, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x300, 0xf, 0x1f}) 01:52:03 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000000040)=0x1c, 0x80000) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r2}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = syz_open_procfs(r6, &(0x7f00000000c0)='mounts\x00') getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 694.908945][ T8234] usb 1-1: USB disconnect, device number 107 01:52:03 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40085503, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x500, 0xf, 0x1f}) 01:52:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc0045878, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:03 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40086602, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x600, 0xf, 0x1f}) [ 695.404541][ T8234] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 695.654730][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 695.788973][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 695.994542][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.003684][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.012358][ T8234] usb 1-1: Product: syz [ 696.017878][ T8234] usb 1-1: Manufacturer: syz [ 696.022574][ T8234] usb 1-1: SerialNumber: syz [ 696.075752][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 696.285315][ T3421] usb 1-1: USB disconnect, device number 108 [ 697.074367][ T2735] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 697.324388][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 697.455740][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 697.644894][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.654288][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.662376][ T2735] usb 1-1: Product: syz [ 697.667930][ T2735] usb 1-1: Manufacturer: syz [ 697.672628][ T2735] usb 1-1: SerialNumber: syz [ 697.725609][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 01:52:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @fwd, @restrict]}}, 0x0, 0x3e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r4 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) 01:52:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc0045878, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:06 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40087602, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x700, 0xf, 0x1f}) 01:52:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket(0x15, 0xa, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) sendto(r2, &(0x7f0000000040)="51157c33f04ff01c551851f7c2305dd0117b87070eb299caa99481f911764b4a83f6755ab8fecdab54991b5cddcb136aee5d9e9b1910eadb0966af8d", 0x3c, 0x2000c815, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r8, 0x2468825185d9173d}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x85) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'xfrm0\x00', {0x3}, 0x2}) [ 697.944633][ T3421] usb 1-1: USB disconnect, device number 109 01:52:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc018480b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:06 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40186366, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xff00, 0xf, 0x1f}) 01:52:06 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], 0x12e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0x80}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250300000008000200010000000800020003280000080002000300000008000200ff00000008000100ffffffff640008801c00078008000500a5155c60080006009300000008000500ea33b1bea1d3c5de114401008008000500c2630e6108000600b600000071070600c600000008000600b9000000080006082b00000008000600130000000800060045000000080006008f0000000800010000000000080002"], 0xb0}, 0x1, 0x0, 0x0, 0x10048040}, 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000280)=0xfa2) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_G_CTRL(r8, 0xc008561b, &(0x7f0000000200)={0x1e, 0x6}) 01:52:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01864ba, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:06 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x4018f50b, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 698.071859][T22351] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 01:52:09 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902c43a9d2c7d35b6b2a59e77de3b000101000000090400000002060000052406000005240000000d240f01000000000000000000090582020000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001ff) close(r0) 01:52:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x1000000, 0xf, 0x1f}) 01:52:09 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) socket$inet6(0xa, 0x2, 0x0) clone(0x5200, 0x0, &(0x7f0000000340), 0x0, 0x0) eventfd(0x0) pipe(&(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0), 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={0xff8}, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:09 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x4020565a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ce, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x2000000, 0xf, 0x1f}) 01:52:09 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x4020940d, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 701.183131][T22408] UHID_CREATE from different security context by process 1414 (syz-executor.5), this is not allowed. 01:52:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x3000000, 0xf, 0x1f}) 01:52:09 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x4020ae46, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 701.454406][ T3423] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 701.704073][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 701.844521][ T3423] usb 1-1: config index 0 descriptor too short (expected 15044, got 59) [ 701.860036][ T3423] usb 1-1: config 44 has too many interfaces: 157, using maximum allowed: 32 [ 701.873168][ T3423] usb 1-1: config 44 has an invalid descriptor of length 178, skipping remainder of the config [ 701.917812][ T3423] usb 1-1: config 44 has 0 interfaces, different from the descriptor's value: 157 [ 702.094424][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.103473][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.111684][ T3423] usb 1-1: Product: syz [ 702.116679][ T3423] usb 1-1: Manufacturer: syz [ 702.121284][ T3423] usb 1-1: SerialNumber: syz [ 702.395449][ T3423] usb 1-1: USB disconnect, device number 110 01:52:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x4000000, 0xf, 0x1f}) 01:52:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000000209010100050000080800054000000011080003400000000108000540000000118c0002002c00018014000300fe88000000000000000000000000800114000400fe80000000000000000000000000002e2c00018014000300fc01000000000000000000000000000114000400fc0100000000000000000000000000001400018008000100ac1414bb08000200ac1414bb0600034000000000140001800800010d0a01010008000200ffffffff"], 0xb8}, 0x1, 0x0, 0x0, 0x20004884}, 0x20000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400202) close(r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000100)={0x2, 'tunl0\x00', {0x4}, 0x7}) 01:52:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc0506617, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:11 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x41015500, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:11 executing program 5: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102392, &(0x7f0000000080)=0x18ff8) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x5000000, 0xf, 0x1f}) 01:52:11 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:11 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x80026101, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x6000000, 0xf, 0x1f}) 01:52:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc058560f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:11 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x80046108, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 703.354080][ T17] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 703.603964][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 703.740271][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 703.944397][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 703.963029][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.999800][ T17] usb 1-1: Product: syz [ 704.014348][ T17] usb 1-1: Manufacturer: syz [ 704.033575][ T17] usb 1-1: SerialNumber: syz [ 704.075061][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 704.282933][ T17] usb 1-1: USB disconnect, device number 111 01:52:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) waitid(0x1, r4, &(0x7f0000000000), 0x8, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:52:13 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0xe4, "a4fd95f7619d05b2a3ae766cbabfb293b54815a3984d117324dfbb8baa560e6310204131fbb03797ceb962315fccc7a1ee447137a125c78f864ce26185733c316e09b81d47e9bf6b983ab1295f3cbbba71e2356988d29e5b9d389fcc828e61b0e0a101172bb9d746c6b7d8d80d298298543e6919f0f9c718164692e0aebb4112840c17d4823659a8554c9acf166d6cc00d2a3d7701b8f1304280c0efdb7ed6208920cbe4f1d62a57dfb5193c8b37b780d1be4e25c3d240212f39deb062edeee08c77078b2046ba3bfc457d9ca03571b8c1854aac70a86cfc6006f8ac9130eb27977cac91"}, &(0x7f0000000140)=0x108) r2 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x8, 0x404040) fsetxattr$security_selinux(r2, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:klogd_exec_t:s0\x00', 0x22, 0x1) 01:52:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x7000000, 0xf, 0x1f}) 01:52:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:13 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x8008330e, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x8}) 01:52:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x8000000, 0xf, 0x1f}) 01:52:13 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xb0543, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x12e) 01:52:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x8}) 01:52:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xddffffff, 0xf, 0x1f}) 01:52:13 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x80085502, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 705.273928][ T8234] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 705.533997][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 705.654102][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 705.854799][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 705.863970][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.871964][ T8234] usb 1-1: Product: syz [ 705.878951][ T8234] usb 1-1: Manufacturer: syz [ 705.883580][ T8234] usb 1-1: SerialNumber: syz [ 705.925065][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 706.134638][ T8234] usb 1-1: USB disconnect, device number 112 [ 706.923828][ T3423] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 707.163827][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 707.283879][ T3423] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 707.454156][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.463428][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.472695][ T3423] usb 1-1: Product: syz [ 707.479165][ T3423] usb 1-1: Manufacturer: syz [ 707.485448][ T3423] usb 1-1: SerialNumber: syz [ 707.545119][ T3423] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 707.748107][ T8234] usb 1-1: USB disconnect, device number 113 01:52:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x8}) 01:52:16 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x8000) fcntl$getflags(r1, 0x1) 01:52:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xfdfdffff, 0xf, 0x1f}) 01:52:16 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x80085504, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x400, 0x0, {0x0, 0xea60}, {0x4, 0xc, 0xf4, 0x4, 0x5, 0xf8, "a0d9667e"}, 0x9, 0x2, @offset=0x9, 0x0, 0x0, r3}) r4 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r4, 0x1000000) sendfile(r0, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a4000000090400000002060000052406000005240000000d240f01000000000000000000090582020000000000090503020000ecff00"/77], 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0xfe) close(r0) 01:52:16 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x80086301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xff000000, 0xf, 0x1f}) 01:52:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 0x8}) 01:52:16 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket(0x15, 0x5, 0x0) finit_module(r0, &(0x7f00000000c0)='/dev/dri/card#\x00', 0x3) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), 0x4) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x7d, &(0x7f0000000140)={r5}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r5, 0x800, 0x10}, &(0x7f00000001c0)=0xc) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="5170e9228b22a424f0afb5a645f0938d4a97b466817852309aa0e2ccf3580df5b0baacfc0aded21c5c8f6ea80f70e690d61911f6343c8406a741bbee7cb0bfdf6546f58d9ae6b20d4e4f45d1dd547cc9615957c6f21cb62fff08cf3de2c086470230cf91205ced42ec", @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="d966f676a5f964b844cd7f97d728772597a90eff8c218e86b2d933f66e8c7bdeb255fe1f214ba0f048296e791a3c8a103c016fc0a42326956ad9b86d5601860ae0a053d730abd53a9fef6147661ea422eab8c295a1cd4d3cf6ae97f1f041642106a90beac314be8860ca28fcab0c5c72997fd786be6e2ab77b58388f85f9dd6c554b7e389bcc420031a4fd4872394aa14bb7aa17c1d5147a520eb7599f7c26d7a9f188cce74c1207b30a517f9ee89df8211c2d6644c49bd0ecbbac5dea69b418b92bd094d337000000000000", @ANYRESOCT=r2], 0x12e) 01:52:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xfffffdfd, 0xf, 0x1f}) 01:52:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x8}) 01:52:16 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x80086601, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:16 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0xd0, 0x1, 0x4}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r0], 0x12e) 01:52:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 708.283748][ T3423] usb 1-1: new high-speed USB device number 114 using dummy_hcd 01:52:16 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x80087601, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:16 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) [ 708.533729][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 708.574223][ T3423] usb 1-1: no configurations [ 708.574249][ T3423] usb 1-1: can't read configurations, error -22 [ 708.723785][ T3423] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 708.963801][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 709.004072][ T3423] usb 1-1: no configurations [ 709.008820][ T3423] usb 1-1: can't read configurations, error -22 [ 709.015549][ T3423] usb usb1-port1: attempt power cycle [ 709.743630][ T3423] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 709.835066][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 709.874222][ T3423] usb 1-1: no configurations [ 709.878978][ T3423] usb 1-1: can't read configurations, error -22 [ 710.046209][ T3423] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 710.165949][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 710.204218][ T3423] usb 1-1: no configurations [ 710.210320][ T3423] usb 1-1: can't read configurations, error -22 [ 710.217303][ T3423] usb usb1-port1: unable to enumerate USB device 01:52:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1b26589812010000020000102505a1a440000102030109023b0001010000000904000000020600000524060000052420000000b20fa6552c0000000d240f01070000000000000000090582020000000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:52:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xffffff7f, 0xf, 0x1f}) 01:52:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x8}) 01:52:19 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x8044610a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:19 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket(0x15, 0x5, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000380)={0x18, 0x0, 0x6, {0xffffffff}}, 0x18) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="fa459ee8", 0x4}, {&(0x7f00000000c0)="4a7aa2fcc8e19fbf5726a1e818a3c61ca9a323da73b3d5820e3db331034c09b602e8bc3d6f5ba044cec749a818f456a11a904ac1981c72724100a857af18090fe5adca6ec0e2a5c1df57a07243b8f12b17c332e1cd89994992d39ddff72a86bef7714f36ba5b414b40a90945a1194e29edc9702600fac6104f697bee90ab29b8c1a69e34a39c17634fac07a1f4bb025f8386c6a74426ca34ea666513eccfae738f707b8ca7fbac231dd0", 0xaa}, {&(0x7f0000000180)="31082cd6d9189fcb806180c4058010fc8baeab31f715b6928e3408f9877297e311f65c9fe29f6a383e84f91598ebed76af7df8b2c7a77c5ae524656f64d999f2363769ea076e243c96cac1cf7e4a0a44f1d50aaa7a", 0x55}], 0x3, &(0x7f0000000380)}, 0x0) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$char_usb(r7, &(0x7f0000000200)="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", 0x125) 01:52:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xffffffdd, 0xf, 0x1f}) 01:52:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x0, 0x8}) 01:52:19 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000000)={0x0, @data}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:19 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x805c6103, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0xf, 0x1f}) 01:52:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x300, 0x0, 0x0, 0x0, 0x8}) [ 711.393583][ T3422] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 711.713634][ T3422] usb 1-1: device descriptor read/64, error 18 [ 712.113569][ T3422] usb 1-1: device descriptor read/64, error 18 [ 712.393542][ T3422] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 712.673735][ T3422] usb 1-1: device descriptor read/64, error 18 [ 713.083441][ T3422] usb 1-1: device descriptor read/64, error 18 [ 713.205012][ T3422] usb usb1-port1: attempt power cycle 01:52:22 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:52:22 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x3}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x100) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_CREATE(r4, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000140)=""/125, 0x7d, 0x65db, 0x1, 0x6, 0xa99, 0x3f}}, 0x120) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x1, 0x1000, 0x4, 0x2, 0x1, 0x6}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000340)) 01:52:22 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0044308, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 713.933433][ T3422] usb 1-1: new high-speed USB device number 120 using dummy_hcd 01:52:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x200000000000000, 0xf, 0x1f}) 01:52:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x500, 0x0, 0x0, 0x0, 0x8}) [ 714.053483][ T3422] usb 1-1: device descriptor read/8, error -71 01:52:22 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0045002, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x300000000000000, 0xf, 0x1f}) 01:52:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x600, 0x0, 0x0, 0x0, 0x8}) 01:52:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x700, 0x0, 0x0, 0x0, 0x8}) 01:52:22 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0045627, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x400000000000000, 0xf, 0x1f}) [ 714.265105][ T3422] usb 1-1: device descriptor read/8, error -71 [ 714.769699][ T3422] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 714.870299][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 715.003487][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 715.183657][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.193066][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.201533][ T3422] usb 1-1: Product: syz [ 715.206109][ T3422] usb 1-1: Manufacturer: syz [ 715.211149][ T3422] usb 1-1: SerialNumber: syz [ 715.264745][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 715.477279][ T3422] usb 1-1: USB disconnect, device number 121 [ 716.293313][ T3422] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 716.553280][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 716.693610][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 716.863517][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.872793][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.881522][ T3422] usb 1-1: Product: syz [ 716.885859][ T3422] usb 1-1: Manufacturer: syz [ 716.890499][ T3422] usb 1-1: SerialNumber: syz [ 716.934460][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 01:52:25 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r0, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x8000) dup(r4) r5 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b0001010000000904000000020005240000000d240f010000000000000000000905820200000000120905030200"/77], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) 01:52:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0045878, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:25 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0xff00, 0x0, 0x0, 0x0, 0x8}) 01:52:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x500000000000000, 0xf, 0x1f}) 01:52:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 717.069009][ T3422] usb 1-1: USB disconnect, device number 122 01:52:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x0, 0x8}) 01:52:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x600000000000000, 0xf, 0x1f}) 01:52:25 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x4, 0xa5, 0x7f, 0x1, 0x0, 0x3, 0x2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_config_ext={0x9, 0x8000}, 0x10, 0x6d70, 0x81, 0x7, 0x2, 0x80000000, 0x3}, r4, 0x4, r6, 0x3) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0045878, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, 0x8}) 01:52:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x3000000, 0x0, 0x0, 0x0, 0x8}) [ 717.643220][ T3422] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 717.903271][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 718.023427][ T3422] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.233346][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.243218][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.251321][ T3422] usb 1-1: Product: syz [ 718.255647][ T3422] usb 1-1: Manufacturer: syz [ 718.260301][ T3422] usb 1-1: SerialNumber: syz [ 718.545537][ T3422] usb 1-1: USB disconnect, device number 123 01:52:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0085504, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x700000000000000, 0xf, 0x1f}) 01:52:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x4000000, 0x0, 0x0, 0x0, 0x8}) 01:52:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:27 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockname$l2tp6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x6, 0x18, 0x5, 0x9, "60d5c6c4edad8327c29d2167a9f62622aac225f9323c7c81dca4c1ea8e672374"}) 01:52:27 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0xe5, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd}, [@mdlm_detail={0x91, 0x24, 0x13, 0x6e, "5ae04fe6628798b4522542a642a64905e92428d54f30f0b2cce07617bde3b49be2e4ede36f92bee431240d5992016713064abedbbed3099bd303e5767fd03155554c9ae6bce64ec2180758861e407522518baee125bfe739031a051952534884b43cd1e147ec18aeef5bda7e778ba01c8eca972cc815a7fba37eb2e5a78c0e065508c9e66147e002024bfa8a8b"}, @dmm={0x7, 0x24, 0x14, 0x3}]}}}]}}]}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="000328bd7000fedbdf25040000001400048005000300050000000500030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x3f, 0x8}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000000)={0x2, 0x2, 0x9, 0x7, 0x8, 0x7fffffff}) close(r0) 01:52:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x800000000000000, 0xf, 0x1f}) 01:52:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x5000000, 0x0, 0x0, 0x0, 0x8}) 01:52:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc01864ba, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:27 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x480, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x8000) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x8000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, 0x0, 0x8000) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRESOCT=r2, @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r3, @ANYRES32=r4, @ANYRES64=r5, @ANYRESOCT=r0, @ANYRES32, @ANYRES16], 0x12e) 01:52:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0189436, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xddffffff00000000, 0xf, 0x1f}) 01:52:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x6000000, 0x0, 0x0, 0x0, 0x8}) 01:52:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:28 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc020660b, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xfdfdffff00000000, 0xf, 0x1f}) [ 719.633237][ T2735] usb 1-1: new high-speed USB device number 124 using dummy_hcd 01:52:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x7000000, 0x0, 0x0, 0x0, 0x8}) [ 719.923148][ T2735] usb 1-1: device descriptor read/64, error 18 [ 720.313201][ T2735] usb 1-1: device descriptor read/64, error 18 [ 720.613075][ T2735] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 720.903121][ T2735] usb 1-1: device descriptor read/64, error 18 [ 721.293086][ T2735] usb 1-1: device descriptor read/64, error 18 [ 721.413832][ T2735] usb usb1-port1: attempt power cycle 01:52:30 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x80000000, 0x4, 0x2}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:52:30 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386105, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:30 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="fa7158998f9537430bc3e52417129b03e64f89baadb59e6251bed8c9fa7aa9987e9908ec871224a7f902d938ddd51ea8f3fbd3c8847f89940a07039bca4d46a0952daa05a8376ccc8de95008053d5ec4c37f39d16b5ad38fdbe172748c7054518805aa346c64a1b7cc8a21e9d6e1bfb161e314392796706eb315ef20d0d5aa44a9b58315f1195712f9836149d797124005aaddde9c735eaceec8f65392867c08753ceea5b42e1105420e4d459d1d4d562f170ca14c43f2e940bfbc2b4ed1535d7ce2e2d71d78add0761af2b3d4d4ade5ae1d9ce97590db61381d693a97250481806c236ef405", 0xe6}, {&(0x7f0000000180)="15e7e993288a85e67cac46c4e90499e635c705463607bb4328ae5e4a989b39131bb5468059ccbc65b9904361b34108a514db9c4a2c4c5c7b748ebead133b66665590a87cbc58fb00039a73d0b9dd167c38d214c3c080731aa7a6", 0x5a}, {&(0x7f0000000200)="65986c71622fd66d3b8cc7175b3ae4d66199d6d5a9566ce3f70d05309d9543225e345386b4ef82bb59b234bffffe7e69bfeef779e56618a52621700e6788b91aacc2fa7da0b0b978735e0829b5c2839dd3aff1b4d174bc9b04b39064184b26ca631afc7f080d634d263030df1e808effa6c22655ec9b82c7bfa34abcf27b1ba9d33651c715", 0x85}, {&(0x7f00000002c0)="2b5a6691212ea16e7d257614794e895841fdb2b306bfc79818cb79d5ced8943ef16cb38e1fd67d", 0x27}], 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x168}, 0x40005) r2 = socket(0x15, 0x5, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x5, 0xf7, 0xff, 0x1a, 0x0, 0x9, 0xd8084, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000340), 0x5}, 0x4101d, 0x392, 0x401, 0x9, 0x2d, 0x1}, r3, 0x3, r5, 0x8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000440)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000400)={@mcast1, 0xa9, 0x2, 0xff, 0x2, 0x3, 0x1}, 0x20) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) recvmsg$qrtr(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000680)=""/150, 0x96}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000600)=""/30, 0x1e}], 0x5, 0x0, 0x0, 0x20}, 0x38, 0x10000) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x8000000, 0x0, 0x0, 0x0, 0x8}) 01:52:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xff00000000000000, 0xf, 0x1f}) 01:52:30 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 722.123070][ T2735] usb 1-1: new high-speed USB device number 126 using dummy_hcd 01:52:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xffffff7f00000000, 0xf, 0x1f}) 01:52:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0xff000000, 0x0, 0x0, 0x0, 0x8}) 01:52:30 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386109, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x8, 0x1f}) 01:52:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:31 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386110, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 722.633104][ T2735] usb 1-1: device not accepting address 126, error -71 [ 723.013033][ T2735] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 723.103265][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 723.223072][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 723.393352][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.402426][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.410703][ T2735] usb 1-1: Product: syz [ 723.415044][ T2735] usb 1-1: Manufacturer: syz [ 723.419635][ T2735] usb 1-1: SerialNumber: syz [ 723.464692][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 723.673246][ T3423] usb 1-1: USB disconnect, device number 127 [ 724.452943][ T2735] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 724.692855][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 724.813227][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 724.983247][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.992340][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.000814][ T2735] usb 1-1: Product: syz [ 725.005376][ T2735] usb 1-1: Manufacturer: syz [ 725.009975][ T2735] usb 1-1: SerialNumber: syz [ 725.053815][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 01:52:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xd, 0x1f}) 01:52:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x8}) 01:52:33 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc04c6100, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:33 executing program 5: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x12e) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) socketpair(0x10, 0x80000, 0x7fffffff, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10008000}, 0x4000000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = pidfd_getfd(r2, r4, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000180)=""/26) 01:52:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x12c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xcab}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6aed}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff001}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2fa91377}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffc00000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xebe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x99c4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc8de909}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x240020d4}, 0x4000000) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01000000000000000000090582020000000000090503020000000000d5fe825f01f013155a"], 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESDEC=r5, @ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES16=r6], 0xfffffecc) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x42}, 0x4000) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000100)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) [ 725.210535][ T3421] usb 1-1: USB disconnect, device number 2 01:52:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x8}) 01:52:33 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0506107, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) 01:52:34 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x4, 0x0, [{0x47, 0x3, 0x0, 0x0, @sint={0x19ebcba6, 0x4288}}, {0xfd38, 0x4, 0x0, 0x0, @msi={0x40, 0x1, 0x8, 0x80000000}}, {0x6, 0x4, 0x0, 0x0, @sint={0x5, 0x6}}, {0x9, 0x1, 0x0, 0x0, @msi={0x7fff, 0x6, 0x80000000, 0x6}}]}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:34 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) 01:52:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x8}) 01:52:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x11, 0x1f}) 01:52:34 executing program 5: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x12e) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x90, r3, 0x0, 0x70bd2b, 0x1, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6}, {0x8, 0x15, 0xfffd}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0xfffffffffffffe33, 0x2, '0000:00:10.0\x00'}}, {0xfffffffffffffe89, 0x3, 0x8}}, {0x8, 0xb, 0x1b}, {0x6}, {0x8}}]}, 0x90}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) getsockopt(0xffffffffffffffff, 0x200, 0x5, &(0x7f00000003c0)=""/59, &(0x7f0000000400)=0x3b) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) write$binfmt_misc(r4, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRESDEC=r6, @ANYRES16=0x0, @ANYRES32=r3, @ANYRES64, @ANYRES16=r7], 0xfffffecc) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4d9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfffffff8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) 01:52:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x8}) [ 725.843315][ T3421] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 726.095615][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 726.227342][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 726.412913][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.442320][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.465801][ T3421] usb 1-1: Product: syz [ 726.470043][ T3421] usb 1-1: Manufacturer: syz [ 726.476298][ T3421] usb 1-1: SerialNumber: syz [ 726.555401][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 726.897274][ T8234] usb 1-1: USB disconnect, device number 3 [ 727.672701][ T2735] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 727.912744][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 728.033077][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 728.202948][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 728.212010][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.225726][ T2735] usb 1-1: Product: syz [ 728.229928][ T2735] usb 1-1: Manufacturer: syz [ 728.236438][ T2735] usb 1-1: SerialNumber: syz 01:52:36 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x2}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x12, 0x1f}) 01:52:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, 0x8}) 01:52:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:36 executing program 5: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x12e) r0 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='^\x00', 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 01:52:36 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505070040000102030109023b000101000000090400000002060000052406000005240000000d240f01000000000000000000090582020000000000090503020000000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 728.284055][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 728.317606][ T2735] usb 1-1: USB disconnect, device number 4 01:52:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x8}) 01:52:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:37 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3], 0x12e) 01:52:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x14, 0x1f}) 01:52:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:52:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 728.852682][ T3421] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 729.092654][ T3421] usb 1-1: Using ep0 maxpacket: 16 01:52:37 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x3}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x8}) 01:52:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x2}) 01:52:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:37 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) [ 729.242499][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 729.473611][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=0007, bcdDevice= 0.40 [ 729.490946][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.507830][ T3421] usb 1-1: Product: syz [ 729.512230][ T3421] usb 1-1: Manufacturer: syz [ 729.520949][ T3421] usb 1-1: SerialNumber: syz [ 729.590455][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 729.801986][ T3421] usb 1-1: USB disconnect, device number 5 [ 730.602636][ T3421] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 730.862591][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 730.982662][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 731.152621][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=0007, bcdDevice= 0.40 [ 731.161753][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.170955][ T3421] usb 1-1: Product: syz [ 731.175548][ T3421] usb 1-1: Manufacturer: syz [ 731.180213][ T3421] usb 1-1: SerialNumber: syz [ 731.223673][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 01:52:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x3}) 01:52:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x8}) 01:52:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:39 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0xc202, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) socket$caif_stream(0x25, 0x1, 0x2) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) 01:52:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x4}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:40 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x20, 0x0, 0x66, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8}}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000000)) [ 731.429689][ T17] usb 1-1: USB disconnect, device number 6 01:52:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x4}) 01:52:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x500, 0x0, 0x0, 0x8}) 01:52:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:40 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="422401b4f381e4e533cf5f69", @ANYRES64, @ANYRES16=r0], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) 01:52:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x600, 0x0, 0x0, 0x8}) 01:52:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x5}) 01:52:40 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x8080) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x9) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 01:52:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x700, 0x0, 0x0, 0x8}) 01:52:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x6}) [ 732.022582][ T17] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 732.282638][ T17] usb 1-1: Using ep0 maxpacket: 16 01:52:41 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x5}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 732.402657][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 732.602598][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.612066][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.640219][ T17] usb 1-1: Product: syz [ 732.645812][ T17] usb 1-1: Manufacturer: syz [ 732.657117][ T17] usb 1-1: SerialNumber: syz [ 732.682947][T23206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 732.943433][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 732.958200][ T17] usb 1-1: USB disconnect, device number 7 [ 733.692438][ T3421] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 733.952457][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 734.082511][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 734.292703][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 734.301847][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.310398][ T3421] usb 1-1: Product: syz [ 734.315025][ T3421] usb 1-1: Manufacturer: syz [ 734.319695][ T3421] usb 1-1: SerialNumber: syz [ 734.352881][T23206] raw-gadget gadget: fail, usb_ep_enable returned -22 01:52:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r0) 01:52:43 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x8000) io_setup(0xd3, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvme-fabrics\x00', 0x105500, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000740)=0x7, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) sched_setscheduler(r6, 0x2, &(0x7f00000001c0)=0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r5, @ANYRESOCT=r7], 0x12e) fcntl$notify(r5, 0x402, 0x10) 01:52:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xff00, 0x0, 0x0, 0x8}) 01:52:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x7}) 01:52:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:43 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x6}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 734.573448][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 734.596348][ T3421] usb 1-1: USB disconnect, device number 8 01:52:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x8}) 01:52:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x1000000, 0x0, 0x0, 0x8}) 01:52:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x300}) 01:52:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x2000000, 0x0, 0x0, 0x8}) [ 735.202359][ T3421] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 735.462323][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 735.582736][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 735.772628][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.781706][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.842437][ T3421] usb 1-1: Product: syz [ 735.846638][ T3421] usb 1-1: Manufacturer: syz [ 735.851234][ T3421] usb 1-1: SerialNumber: syz [ 735.913460][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 736.135204][ T3421] usb 1-1: USB disconnect, device number 9 01:52:45 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000000)=0x7) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902010001010000000904000000021b00000500000d240f01000000210000000000090582020000000000090503020000000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 01:52:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000000)=0x8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x12e) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) fcntl$getownex(r2, 0x10, &(0x7f00000002c0)={0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpgid(r5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)=0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000400)) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) clone3(&(0x7f0000000380)={0x180010000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3f}, &(0x7f0000000100)=""/193, 0xc1, &(0x7f0000000200)=""/171, &(0x7f0000000340)=[0x0, 0x0, 0x0, r3, r4, r6, r7, r8], 0x8, {r10}}, 0x58) 01:52:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x500}) 01:52:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x3000000, 0x0, 0x0, 0x8}) 01:52:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:45 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x7}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x8}) 01:52:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x600}) 01:52:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x5000000, 0x0, 0x0, 0x8}) 01:52:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x700}) 01:52:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x6000000, 0x0, 0x0, 0x8}) [ 737.182523][ T8234] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 737.425920][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 737.542805][ T8234] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 737.702845][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.711924][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.721462][ T8234] usb 1-1: Product: syz [ 737.726307][ T8234] usb 1-1: Manufacturer: syz [ 737.730900][ T8234] usb 1-1: SerialNumber: syz [ 737.979322][ T8234] usb 1-1: USB disconnect, device number 10 01:52:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xff00}) 01:52:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x7000000, 0x0, 0x0, 0x8}) 01:52:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x8000) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000000c0)=""/37) openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/146, 0x92) 01:52:47 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x8}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x8000000, 0x0, 0x0, 0x8}) 01:52:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x1000000}) 01:52:47 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000441d05a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f0100000000000001fc020905823ecceee3f9636fc2915a02000000fc08090503020000000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc"], 0x8, 0x0) msgrcv(r4, &(0x7f0000000500)={0x0, ""/210}, 0x200005da, 0x0, 0x4800) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0x2, 0x1c00) 01:52:47 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xff000000, 0x0, 0x0, 0x8}) 01:52:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x2000000}) 01:52:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:52:47 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002900270d00"/20, @ANYRES32=r9], 0x1ec}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast1, @in=@multicast1, 0x4e23, 0x1ff, 0x4e23, 0x7fff, 0xa, 0x0, 0x0, 0x4, r9, r10}, {0x40, 0xbb, 0x400, 0x9d, 0x4, 0x9, 0x800000000000, 0x200000000000}, {0x80, 0xfffffffffffffff9, 0x8, 0x6}, 0xffff8001, 0x6e6bb9, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x3502, 0x2, 0x3, 0x7, 0x9, 0xffffffff, 0x2}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000040)=0x2) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) [ 739.172633][ T3421] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 739.456741][ T3421] usb 1-1: device descriptor read/64, error 18 01:52:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x8}) 01:52:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x3000000}) 01:52:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:48 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x300}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 739.886190][ T3421] usb 1-1: device descriptor read/64, error 18 [ 740.172494][ T3421] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 740.452528][ T3421] usb 1-1: device descriptor read/64, error 18 [ 740.852689][ T3421] usb 1-1: device descriptor read/64, error 18 [ 740.972713][ T3421] usb usb1-port1: attempt power cycle [ 741.692591][ T3421] usb 1-1: new high-speed USB device number 13 using dummy_hcd 01:52:50 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:52:50 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x10042, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000680)) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 01:52:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8}) 01:52:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x4000000}) 01:52:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:50 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x500}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 741.822744][ T3421] usb 1-1: device descriptor read/8, error -71 01:52:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x8}) 01:52:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:50 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet(0x2, 0x3, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x99, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/153}, &(0x7f0000000200)=0x78) fstat(r0, &(0x7f0000000000)) 01:52:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x5000000}) [ 742.036211][ T3421] usb 1-1: device descriptor read/8, error -71 01:52:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x8}) [ 742.532651][ T3421] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 742.632616][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 742.756680][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 742.922768][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 742.931838][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.940334][ T3421] usb 1-1: Product: syz [ 742.944697][ T3421] usb 1-1: Manufacturer: syz [ 742.949298][ T3421] usb 1-1: SerialNumber: syz [ 742.993738][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 743.200436][ T3421] usb 1-1: USB disconnect, device number 14 [ 743.972595][ T3421] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 744.212648][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 744.333834][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 744.502670][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 744.511779][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.520283][ T3421] usb 1-1: Product: syz [ 744.524863][ T3421] usb 1-1: Manufacturer: syz [ 744.529457][ T3421] usb 1-1: SerialNumber: syz [ 744.574333][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 01:52:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x6000000}) 01:52:53 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/oss_mixer\x00', 0x900, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000180)={0xd34, 0x2, 0x8}) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}}}, 0x90) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) 01:52:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x0, 0x8}) 01:52:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:53 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x600}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 744.780669][ T3421] usb 1-1: USB disconnect, device number 15 01:52:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) fallocate(r6, 0x2e, 0x44, 0x7) 01:52:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x7000000}) 01:52:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x0, 0x8}) 01:52:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xff7f0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0x8000000}) 01:52:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc1b0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x400000000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[], 0x12e) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) 01:52:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, 0x8}) 01:52:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xddffffff}) 01:52:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x300, 0x0, 0x8}) 01:52:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xfdfdffff}) [ 745.362863][ T3421] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 745.602639][ T3421] usb 1-1: Using ep0 maxpacket: 16 01:52:54 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x700}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 745.742735][ T3421] usb 1-1: unable to get BOS descriptor or descriptor too short [ 745.802752][ T3421] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 745.828408][ T3421] usb 1-1: can't read configurations, error -71 [ 746.512647][ T3421] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 746.752740][ T3421] usb 1-1: Using ep0 maxpacket: 16 01:52:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x500, 0x0, 0x8}) 01:52:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xff000000}) 01:52:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:55 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x7d, &(0x7f0000000140)={r4}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e22, 0xca39, @mcast1, 0x2}}, 0x5, 0xa4, 0x80, 0x6, 0x33, 0x3, 0x9}, &(0x7f00000000c0)=0x9c) 01:52:55 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0xff00}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 746.882789][ T3421] usb 1-1: unable to get BOS descriptor or descriptor too short 01:52:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r6, 0x0) syz_mount_image$hfsplus(&(0x7f0000000300)='hfsplus\x00', &(0x7f0000000740)='\x00', 0x48cb, 0x4, &(0x7f0000000980)=[{&(0x7f0000000780)="99e6416829dba6a53f0dd70cdd23e7aa033350b0f3bc914f4983a5ec54a109335d9828e12f8c041180e7bb4f5228d55a43f56aa3cd3b7a02f552949a3b97e8c4b77de1d300768b171e53ad55f064d09333409cad09e228a55b9cfeff5e53ac11634d5c8970e89d0ef5ff4eaeeb9a7493a333d0b26a3a3b3d4fd2b836e930ae5ac91f77f9a30509e8", 0x88, 0x9}, {&(0x7f0000000840)="4e4a0f", 0x3, 0x81}, {&(0x7f0000000880)="bf19ae3c7823b1dd30e5c4fabe90706a15a42cb8ca834329cbf8cd76d411e17ed19e8879ef1a4bc2087467bda524112e9f7d695accf1742fc240bb2ed4f88f18757e602a410da4efb7ebadc4e4a77dcc3acde9d40340655633d51bd887248d5ec497c883d64f73516c47731ad21698d8f8f7505172a626ef408b70e1a684658b1b132ad5aa3fa99634f93393e2bb28f0fd47431c3886f55a6bd65ddc11466d925da5bc", 0xa3, 0x80000001}, {&(0x7f0000000940)="2ba048", 0x3, 0x6}], 0x1a4400, &(0x7f0000000a00)={[{@gid={'gid', 0x3d, r6}}, {@umask={'umask', 0x3d, 0xc00000}}, {@nodecompose='nodecompose'}, {@session={'session', 0x3d, 0x6c}}], [{@dont_measure='dont_measure'}, {@smackfsfloor={'smackfsfloor'}}]}) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000003c0)) close(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x100, 0x3e, 0x7, 0x1, 0x40, 0x4}, 0x26, &(0x7f0000000200)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "65f73229091f5e501aeb224cca39fe02"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xff, 0x0, 0x1}, @ptm_cap={0x3}]}}) [ 746.942740][ T3421] usb 1-1: unable to read config index 0 descriptor/start: -71 01:52:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xfffffdfd}) 01:52:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x600, 0x0, 0x8}) [ 746.963886][ T3421] usb 1-1: can't read configurations, error -71 [ 746.964263][ T3421] usb usb1-port1: attempt power cycle 01:52:55 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x6, @pix={0x865, 0x2, 0x0, 0x8, 0x552d, 0x8, 0x2, 0x3, 0x1, 0x7, 0x2, 0x7}}) 01:52:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x700, 0x0, 0x8}) 01:52:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xffffff7f}) 01:52:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0xff00, 0x0, 0x8}) 01:52:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xffffffdd}) 01:52:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x1000000, 0x0, 0x8}) 01:52:56 executing program 2: clock_gettime(0x7, &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x4f2840) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)="2a382fd1019f3878da9d0c1026d3916ea005befc2d3e27da43276e4d260aeec8428424981ba3b4a35aa9806057d6976595c5dc421770840580414dfaff6ed4c38cc51f21b0286fd27d532278514c9ef9944c08cfd9c98a6145cf54b039c1ed0ba57d827b80c97a71614398b5c91d4f967c5ed9467b960c73c6dfe97e0079e48db40bc1f5a9d8dfa133a2e2ec1d6ceca1da628dd5fe1fd64db68d34ef1d4669b03b519e91826eda4b2a91684ac89745b813550993290974c6", 0xb8, r2}, 0x68) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone3(&(0x7f0000000200)={0x4088080, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x22}, &(0x7f0000000140)=""/26, 0x1a, &(0x7f0000000180), &(0x7f00000001c0)=[r3, 0xffffffffffffffff, 0x0, r4, 0xffffffffffffffff, r5], 0x6, {r7}}, 0x58) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000280)=r8) [ 747.672725][ T3421] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 747.772774][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 747.892972][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 748.072868][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.081918][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.102749][ T3421] usb 1-1: Product: syz [ 748.106940][ T3421] usb 1-1: Manufacturer: syz [ 748.111535][ T3421] usb 1-1: SerialNumber: syz [ 748.173625][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 01:52:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x2000000, 0x0, 0x8}) [ 748.447453][T23654] udc-core: couldn't find an available UDC or it's busy [ 748.462669][T23654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.474016][ T8234] usb 1-1: USB disconnect, device number 18 [ 749.273345][ T8234] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 749.532781][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 749.662867][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 749.832986][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.842061][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.855204][ T8234] usb 1-1: Product: syz [ 749.859381][ T8234] usb 1-1: Manufacturer: syz [ 749.867029][ T8234] usb 1-1: SerialNumber: syz [ 749.913979][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 01:52:58 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x6000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000280)={0x1f, 0x3, 0xd, 0x400, 0x2}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r4 = dup(r3) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x9c2, 0x20}]}, 0xc, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x13}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:52:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:58 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = io_uring_setup(0x171e, &(0x7f0000000040)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x101130, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, 0x0, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x1000, &(0x7f00000000c0), 0x8, r6, 0x6}) syz_io_uring_complete(r4) syz_io_uring_complete(r4) syz_io_uring_complete(r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000040)) write$qrtrtun(r2, &(0x7f0000000000)="77ee78722e4429200d30aaa520058521732bb56b5ae92c3d55f4beb4c0ad294c2a6139904e33d2e86da8a4186435737fe85dad", 0x33) 01:52:58 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x1000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x3000000, 0x0, 0x8}) 01:52:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000080)={0x12, 0x12, 0x5, 0x5, 0x8, 0x9, 0x6, 0xd3, 0x1}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101c56ad36e89f0f45a90a4e900000009040000000206000005240600000524ed2ac70df2edb793000000000000000009058202000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r0) [ 749.967698][ T3422] usb 1-1: USB disconnect, device number 19 01:52:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x4000000, 0x0, 0x8}) 01:52:58 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7d, &(0x7f0000000140)={r3}, 0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r3, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x90, &(0x7f0000000080)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x32a, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe7a}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x36a, @empty}, @in6={0xa, 0x4e24, 0xfffffffe, @ipv4={[], [], @remote}, 0x2}, @in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x43}, 0x1}]}, &(0x7f0000000180)=0x10) 01:52:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:52:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x5000000, 0x0, 0x8}) 01:52:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:52:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x6000000, 0x0, 0x8}) 01:52:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:52:58 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400200, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7ff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x4004c010) [ 750.442755][ T3422] usb 1-1: new high-speed USB device number 20 using dummy_hcd 01:52:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x7000000, 0x0, 0x8}) [ 750.712835][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 750.833045][ T3422] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 750.849344][ T3422] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 01:52:59 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x2000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:52:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = semget(0x0, 0x0, 0x0) semctl$GETZCNT(r1, 0x4, 0xf, &(0x7f0000000240)=""/211) semop(r1, &(0x7f0000000000)=[{0x3, 0x3, 0x800}], 0x1) [ 751.044736][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 751.053978][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.065186][ T3422] usb 1-1: Product: syz [ 751.069367][ T3422] usb 1-1: Manufacturer: syz [ 751.082780][ T3422] usb 1-1: SerialNumber: syz [ 751.356215][ T3422] usb 1-1: USB disconnect, device number 20 [ 752.102937][ T17] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 752.352814][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 752.472951][ T17] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 752.483395][ T17] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 752.643136][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.652193][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.669565][ T17] usb 1-1: Product: syz [ 752.674743][ T17] usb 1-1: Manufacturer: syz [ 752.679339][ T17] usb 1-1: SerialNumber: syz 01:53:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x8000000, 0x0, 0x8}) 01:53:01 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = semget(0x0, 0x0, 0x0) semctl$GETZCNT(r1, 0x4, 0xf, &(0x7f0000000240)=""/211) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000080)=""/44) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='+:+^\xe2\x00', 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) 01:53:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:01 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x4980) write$FUSE_IOCTL(r1, &(0x7f0000000140)={0x20, 0x0, 0x1, {0x8, 0x0, 0x8, 0x1f}}, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0xdf0, 0xb, 0x6, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xc0c0c0c0}) 01:53:01 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x3000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:01 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80040, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 752.965299][ T17] usb 1-1: USB disconnect, device number 21 01:53:01 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x12e) 01:53:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0xff000000, 0x0, 0x8}) 01:53:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xf6, 0x10080) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x100, 0x8, 0x537e, 0x6a36, 0x5ea, 0x7}) 01:53:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:01 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000000)) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000040)) 01:53:02 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000000)=0x8, 0x4) 01:53:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8}) [ 753.482902][ T17] usb 1-1: new high-speed USB device number 22 using dummy_hcd 01:53:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x8}) 01:53:02 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x351042, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000800)=0x9, 0x4) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x12e) [ 753.722865][ T17] usb 1-1: Using ep0 maxpacket: 16 01:53:02 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x4000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 753.843015][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 754.073196][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 754.102844][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.136870][ T17] usb 1-1: Product: syz [ 754.141080][ T17] usb 1-1: Manufacturer: syz [ 754.156042][ T17] usb 1-1: SerialNumber: syz [ 754.204047][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 754.428014][ T3422] usb 1-1: USB disconnect, device number 22 [ 755.212872][ T17] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 755.452858][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 755.572977][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 755.756850][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 755.771731][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.800002][ T17] usb 1-1: Product: syz [ 755.811143][ T17] usb 1-1: Manufacturer: syz [ 755.827105][ T17] usb 1-1: SerialNumber: syz [ 755.885960][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 01:53:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xfc, 0x0, 0x2, 0x6, 0x0, 0x0, {{0xfffffffffffffe41}, {0x5, 0x24, 0x0, 0x21}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x1, 0xee}}]}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:04 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7d, &(0x7f0000000140)={r3}, 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x3}, 0xc) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[], 0x12e) 01:53:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x8}) 01:53:04 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x5000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x8000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x242302, 0x0) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x401, 0x2) [ 756.064911][ T17] usb 1-1: USB disconnect, device number 23 01:53:04 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x800, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='}\x00', 0x0, r0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xb65, 0x575782) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0], 0x12e) 01:53:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x8}) 01:53:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x8}) 01:53:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x8}) 01:53:05 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r3, 0x3, 0x5ee5df1cdfa523ad}) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000680)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1000, 0x3, 0x80000000, 0x20, 0x101, 0x609, "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"}}, 0x1118) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x8000) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x12e) [ 756.642975][ T17] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 756.906606][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 757.023183][ T17] usb 1-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config [ 757.049708][ T17] usb 1-1: config 1 interface 0 has no altsetting 0 [ 757.223209][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 757.232295][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.251696][ T17] usb 1-1: Product: syz [ 757.256092][ T17] usb 1-1: Manufacturer: syz [ 757.260705][ T17] usb 1-1: SerialNumber: syz [ 757.323956][ T17] usb 1-1: bad CDC descriptors [ 757.552138][ T2487] usb 1-1: USB disconnect, device number 24 [ 758.363043][ T3422] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 758.623011][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 758.753320][ T3422] usb 1-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config [ 758.763709][ T3422] usb 1-1: config 1 interface 0 has no altsetting 0 [ 758.923070][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 758.932288][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.941319][ T3422] usb 1-1: Product: syz [ 758.946211][ T3422] usb 1-1: Manufacturer: syz [ 758.950956][ T3422] usb 1-1: SerialNumber: syz [ 758.993833][ T3422] usb 1-1: bad CDC descriptors 01:53:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x2}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x600100, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r3, 0x0, 0xf, &(0x7f0000000080)='/dev/dri/card#\x00', r5}, 0x30) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r6}) 01:53:07 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_BSZGET(r1, 0x80081270, &(0x7f0000000040)) 01:53:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:07 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x6000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000004) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80002, 0x0) connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0x0, 0xfffffffe}, 0xc) r3 = socket$pptp(0x18, 0x1, 0x2) sendfile(r3, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xe7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xff, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000000)={'veth0_to_team\x00', 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) [ 759.147113][ T2487] usb 1-1: USB disconnect, device number 25 01:53:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300, 0x8}) 01:53:07 executing program 5: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2804001075173e0de8e827ce022049269800dfb09e54d864", @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x7fff, [[0x0, 0x6, 0x40, 0x0, 0x7, 0x1, 0x2, 0xde], [0x477, 0x1, 0x20, 0x0, 0xd8, 0x0, 0x3, 0x6], [0x329d5e82, 0x7, 0x6, 0x1, 0x7f, 0x0, 0x5, 0xffff]], [], [{0xffff, 0x7, 0x0, 0x1}, {0x670c, 0x7f, 0x0, 0x1}, {0x81, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x3ff, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x6, 0x1, 0x0, 0x0, 0x1}, {0xdf, 0x100, 0x1, 0x0, 0x1}, {0x101, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x9, 0xffffffff, 0x0, 0x1, 0x1}, {0x401, 0x800, 0x1, 0x1}, {0x4, 0x200, 0x0, 0x0, 0x1, 0x1}], [], 0x1200000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r2, 0x0, 0x100005000) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[], 0x12e) 01:53:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x500, 0x8}) 01:53:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x600, 0x8}) [ 759.586232][ T27] audit: type=1804 audit(1596505988.123:47): pid=24018 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir992578188/syzkaller.YqJFUZ/593/cgroup.controllers" dev="sda1" ino=15750 res=1 01:53:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700, 0x8}) [ 759.732949][ T2487] usb 1-1: new high-speed USB device number 26 using dummy_hcd 01:53:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xff00, 0x8}) 01:53:08 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x12e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r4, 0x80000001, 0x81, 0x45d44aec}) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000100)=0xfff8, 0x2) [ 759.807549][T24018] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 759.807654][T24018] File: /root/syzkaller-testdir992578188/syzkaller.YqJFUZ/593/cgroup.controllers PID: 24018 Comm: syz-executor.5 [ 759.818417][ T27] audit: type=1804 audit(1596505988.353:48): pid=24020 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir992578188/syzkaller.YqJFUZ/593/cgroup.controllers" dev="sda1" ino=15750 res=1 [ 759.823442][ T27] audit: type=1804 audit(1596505988.353:49): pid=24018 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir992578188/syzkaller.YqJFUZ/593/cgroup.controllers" dev="sda1" ino=15750 res=1 [ 759.983068][ T2487] usb 1-1: Using ep0 maxpacket: 32 01:53:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x22c, 0x14000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000280)=""/4096) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)={0xd000, 0x1, 0x1, 0x3, 0x6}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttynull\x00', 0x100, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "32625af80f9daba5", "d59cc73cc48d98ed4299f9a7bc6c0fb951a9588fcda4f849634f7861d7ffe071", "fc88aaa6", "8dfad227f2f10332"}, 0x38) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000180)={0x4, {0x7, 0x92ec, 0x1, 0x383}}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000001280)=ANY=[@ANYBLOB="0323f7568c95b800000007000000050000000000000006000000000016000100004000000000002ddd3aa3b6e7671fd7e528878806636ca65600948040800f72000900"/77]) 01:53:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1000000, 0x8}) 01:53:08 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x7000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 760.123390][ T2487] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 760.313894][ T2487] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 760.313917][ T2487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.313933][ T2487] usb 1-1: Product: syz [ 760.313950][ T2487] usb 1-1: Manufacturer: syz [ 760.313965][ T2487] usb 1-1: SerialNumber: syz [ 760.624219][ T2487] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 760.637758][ T2487] usb 1-1: USB disconnect, device number 26 01:53:09 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000000, 0x8}) 01:53:09 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r6, 0x0) syz_mount_image$hfsplus(&(0x7f0000000300)='hfsplus\x00', &(0x7f0000000740)='\x00', 0x48cb, 0x4, &(0x7f0000000980)=[{&(0x7f0000000780)="99e6416829dba6a53f0dd70cdd23e7aa033350b0f3bc914f4983a5ec54a109335d9828e12f8c041180e7bb4f5228d55a43f56aa3cd3b7a02f552949a3b97e8c4b77de1d300768b171e53ad55f064d09333409cad09e228a55b9cfeff5e53ac11634d5c8970e89d0ef5ff4eaeeb9a7493a333d0b26a3a3b3d4fd2b836e930ae5ac91f77f9a30509e8", 0x88, 0x9}, {&(0x7f0000000840)="4e4a0f", 0x3, 0x81}, {&(0x7f0000000880)="bf19ae3c7823b1dd30e5c4fabe90706a15a42cb8ca834329cbf8cd76d411e17ed19e8879ef1a4bc2087467bda524112e9f7d695accf1742fc240bb2ed4f88f18757e602a410da4efb7ebadc4e4a77dcc3acde9d40340655633d51bd887248d5ec497c883d64f73516c47731ad21698d8f8f7505172a626ef408b70e1a684658b1b132ad5aa3fa99634f93393e2bb28f0fd47431c3886f55a6bd65ddc11466d925da5bc", 0xa3, 0x80000001}, {&(0x7f0000000940)="2ba048", 0x3, 0x6}], 0x1a4400, &(0x7f0000000a00)={[{@gid={'gid', 0x3d, r6}}, {@umask={'umask', 0x3d, 0xc00000}}, {@nodecompose='nodecompose'}, {@session={'session', 0x3d, 0x6c}}], [{@dont_measure='dont_measure'}, {@smackfsfloor={'smackfsfloor'}}]}) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000003c0)) close(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x100, 0x3e, 0x7, 0x1, 0x40, 0x4}, 0x26, &(0x7f0000000200)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "65f73229091f5e501aeb224cca39fe02"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xff, 0x0, 0x1}, @ptm_cap={0x3}]}}) 01:53:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x5, 0x80) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:53:09 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:09 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x8000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3000000, 0x8}) 01:53:09 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x2, r0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000000)={0x0, 0xf, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r3, 0x1ffc00000, 0x3}) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, 0x0, 0x8000) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f0000000280)={0xfff, 0x6, 0x6, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) 01:53:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000000, 0x8}) 01:53:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5000000, 0x8}) 01:53:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6000000, 0x8}) [ 761.593030][ T3422] usb 6-1: new high-speed USB device number 12 using dummy_hcd 01:53:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 761.783108][ T2735] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 761.833215][ T3422] usb 6-1: Using ep0 maxpacket: 16 [ 761.953835][ T3422] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 762.043079][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 762.123219][ T3422] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 762.123243][ T3422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.123258][ T3422] usb 6-1: Product: syz [ 762.123274][ T3422] usb 6-1: Manufacturer: syz [ 762.123289][ T3422] usb 6-1: SerialNumber: syz [ 762.163998][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 762.169943][ T3422] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 762.353442][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 762.353465][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.353479][ T2735] usb 1-1: Product: syz [ 762.353495][ T2735] usb 1-1: Manufacturer: syz [ 762.353510][ T2735] usb 1-1: SerialNumber: syz [ 762.404532][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 762.548781][T24104] udc-core: couldn't find an available UDC or it's busy [ 762.548806][T24104] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 762.577024][ T3422] usb 6-1: USB disconnect, device number 12 [ 762.625411][ T17] usb 1-1: USB disconnect, device number 27 [ 763.443078][ T3422] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 763.683095][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 763.803420][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 763.973401][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.982446][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.991536][ T3422] usb 1-1: Product: syz [ 763.996938][ T3422] usb 1-1: Manufacturer: syz [ 764.001529][ T3422] usb 1-1: SerialNumber: syz [ 764.044152][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 764.185422][ T0] NOHZ: local_softirq_pending 08 01:53:12 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0xfeffffff}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7000000, 0x8}) 01:53:12 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000000)) 01:53:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x2, r0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000000)={0x0, 0xf, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r3, 0x1ffc00000, 0x3}) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, 0x0, 0x8000) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f0000000280)={0xfff, 0x6, 0x6, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) 01:53:12 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000)={0x7, "0bc226"}, 0x6) syz_usb_connect$cdc_ecm(0x0, 0xe1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 764.247123][ T17] usb 1-1: USB disconnect, device number 28 01:53:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8000000, 0x8}) 01:53:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xff000000, 0x8}) 01:53:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7}) 01:53:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xe}) [ 764.843291][ T17] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 765.123627][ T17] usb 1-1: device descriptor read/64, error 18 01:53:14 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0xff000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 765.553159][ T17] usb 1-1: device descriptor read/64, error 18 01:53:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) [ 765.823117][ T17] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 765.948424][ T3422] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 766.123251][ T17] usb 1-1: device descriptor read/64, error 18 [ 766.193156][ T3422] usb 6-1: Using ep0 maxpacket: 16 [ 766.319632][ T3422] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 766.503818][ T3422] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.517429][ T3422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.533207][ T17] usb 1-1: device descriptor read/64, error 18 [ 766.533584][ T3422] usb 6-1: Product: syz [ 766.556567][ T3422] usb 6-1: Manufacturer: syz [ 766.561314][ T3422] usb 6-1: SerialNumber: syz [ 766.604277][ T3422] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 766.672107][ T17] usb usb1-port1: attempt power cycle [ 766.856662][ T3424] usb 6-1: USB disconnect, device number 13 01:53:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:15 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0xfffffffe}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000000c0)={r3, 0xffffffff, 0x8, 0x8, 0x1, 0xa3, 0x0, 0x1, 0x0, 0x9, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000140)=""/230) 01:53:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) [ 767.404208][ T17] usb 1-1: new high-speed USB device number 31 using dummy_hcd 01:53:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000080)={0x7, 0x4, 0x3ff, 0xffff, 0x0, 0x40, 0x81}) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000200)={0x6, "b90cb955089624d0876894cbd4ed18a16f9689acc370900f8fb5d7e56e3debae", 0x1, 0x40, 0x2, 0x2, 0x20, 0x4}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000480)={0x1, 0x4, [{0xffffffffffffffff, 0x0, 0x4000, 0x8000}, {0xffffffffffffffff, 0x0, 0x8000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0x2000}, {r0, 0x0, 0x1000000000000, 0x8000}]}) r5 = dup(r4) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x14, 0xf8, 0x7, 0x28, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_sec_ctx={0x6, 0x18, 0x88, 0x7, 0x25, "f3e9aa3b2e85d6525f99837bed9dab9829d5d48d6ebbf03db032019b2d17c5d244951bb93d"}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x10000, @remote, 0x5}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x1}}, @sadb_ident={0x2, 0xa, 0x520, 0x0, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@loopback, 0x2b, 0x14, 0x10}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, [], 0x1}, 0x4}}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@private1, 0x26, 0x10}]}, 0x140}}, 0x20044800) close(r0) 01:53:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) 01:53:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff01, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x82, 0xac500) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000)=@bcast) 01:53:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x3}) 01:53:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff7f, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x4}) [ 767.883163][ T17] usb 1-1: device not accepting address 31, error -71 01:53:16 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x100000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x8000) r4 = dup3(r2, r3, 0x80000) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x201}, {r4, 0x8000}], 0x2, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) faccessat2(r6, &(0x7f0000000000)='./file0\x00', 0x6, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f00000000c0)="5282130408a888d9f5e2ca4557de3e82d0f842f1ac7a3946aee57f2b46246b8d31a1a39909e3e873a1db01fc981ddd6a2f") setrlimit(0xb79ed402dae1bf90, &(0x7f0000000080)={0x40, 0x8}) 01:53:16 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) [ 768.263246][ T17] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 768.373516][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 768.493230][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 768.673375][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.682633][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.691270][ T17] usb 1-1: Product: syz [ 768.695901][ T17] usb 1-1: Manufacturer: syz [ 768.700526][ T17] usb 1-1: SerialNumber: syz [ 768.744507][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 768.952659][ T3423] usb 1-1: USB disconnect, device number 32 01:53:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x5}) 01:53:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:18 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x5, 0x800) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) 01:53:18 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x200000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000000)={0x8, 'veth0_to_bridge\x00', {'veth0_to_bond\x00'}, 0x1}) r5 = dup(r2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x44100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(r7, &(0x7f0000001880)=[{&(0x7f0000000040)=""/21, 0x15}, {&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000001600)=""/126, 0x7e}, {&(0x7f0000001680)=""/218, 0xda}, {&(0x7f0000001780)=""/246, 0xf6}], 0xa, 0x8000, 0x8) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400}}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) 01:53:18 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) 01:53:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:18 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x7}) 01:53:18 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:18 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) [ 770.133204][T24143] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 770.383192][T24143] usb 1-1: Using ep0 maxpacket: 16 [ 770.503974][T24143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 770.687120][T24143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 770.713542][T24143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.721585][T24143] usb 1-1: Product: syz [ 770.751810][T24143] usb 1-1: Manufacturer: syz [ 770.773212][T24143] usb 1-1: SerialNumber: syz [ 770.803676][T24360] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 770.814923][T24143] cdc_ether: probe of 1-1:1.0 failed with error -22 01:53:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 771.052669][ T3423] usb 1-1: USB disconnect, device number 33 01:53:20 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x8000) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5a1200, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) 01:53:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x300}) 01:53:20 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x300000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x500}) 01:53:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x600}) 01:53:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x700}) [ 772.196142][ T3423] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 772.483473][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 772.605226][ T3423] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 772.803367][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 772.816778][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.828716][ T3423] usb 1-1: Product: syz [ 772.832986][ T3423] usb 1-1: Manufacturer: syz [ 772.841185][ T3423] usb 1-1: SerialNumber: syz [ 772.904507][ T3423] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 773.126027][ T3422] usb 1-1: USB disconnect, device number 34 01:53:22 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="7db700e100000000f56810"], 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x124, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "9aa63f500559286a407a642f09e1de5476ecfbe4f67cd431e0584ac71fc8d1"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, [], 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x50}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9a4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf3a}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x81}, 0x4044080) r7 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r0) 01:53:22 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xff00}) 01:53:22 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x400000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1000000}) 01:53:22 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2000000}) 01:53:22 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}) 01:53:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x3000000}) [ 774.263380][ T3423] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 774.513309][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 774.653580][ T3423] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 774.855004][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 774.873229][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.881225][ T3423] usb 1-1: Product: syz [ 774.887733][ T3423] usb 1-1: Manufacturer: syz [ 774.892346][ T3423] usb 1-1: SerialNumber: syz [ 774.941886][ T3423] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 775.144452][T24143] usb 1-1: USB disconnect, device number 35 01:53:24 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0xa000, 0x38, 0xe}, 0x18) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000180)=0xfffd, &(0x7f0000000280)=0x2) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000200)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, {0x1, @remote}, 0x7c, {0x2, 0x4e24, @multicast1}, 'batadv_slave_1\x00'}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400001020319e0254265a92a940000090400000002060000052406000005240000000d240f0100000000000000000000000905030280000000006d50bc62e2ccd990c5403d79f8053349d8635ca7789734f82c669e7ea8"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x4000000}) 01:53:24 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x500000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x5000000}) 01:53:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x6000000}) 01:53:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)) [ 776.283521][ T3423] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 776.573418][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 776.623500][ T3423] usb 1-1: too many configurations: 25, using maximum allowed: 8 [ 776.783494][ T3423] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 776.793508][ T3423] usb 1-1: can't read configurations, error -61 [ 776.953457][ T3423] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 777.203272][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 777.243706][ T3423] usb 1-1: too many configurations: 25, using maximum allowed: 8 [ 777.363363][ T3423] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 777.378983][ T3423] usb 1-1: can't read configurations, error -61 [ 777.393561][ T3423] usb usb1-port1: attempt power cycle [ 778.123359][ T3423] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 778.238673][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 778.288299][ T3423] usb 1-1: too many configurations: 25, using maximum allowed: 8 [ 778.418489][ T3423] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 778.429803][ T3423] usb 1-1: can't read configurations, error -61 [ 778.613342][ T3423] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 778.733382][ T3423] usb 1-1: Using ep0 maxpacket: 16 01:53:27 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b00010100000009040000040206eaf7052406000056b00000000d240f0100000000000000000009058202000000000009050302000b8851446c00000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)) 01:53:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x7000000}) 01:53:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x600000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 778.818344][ T3423] usb 1-1: device descriptor read/all, error -71 [ 778.834735][ T3423] usb usb1-port1: unable to enumerate USB device 01:53:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8000000}) 01:53:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff010000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)) 01:53:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xff000000}) 01:53:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0xff7f0000, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 779.403471][ T3423] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 779.653434][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 779.776763][ T3423] usb 1-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 779.800689][ T3423] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 779.984222][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.000963][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.023370][ T3423] usb 1-1: Product: syz [ 780.027590][ T3423] usb 1-1: Manufacturer: syz [ 780.032827][ T3423] usb 1-1: SerialNumber: syz [ 780.335682][ T3423] usb 1-1: USB disconnect, device number 40 [ 781.083388][ T3423] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 781.333367][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 781.453443][ T3423] usb 1-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 781.473356][ T3423] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 781.643691][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 781.663055][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.683398][ T3423] usb 1-1: Product: syz [ 781.687598][ T3423] usb 1-1: Manufacturer: syz [ 781.692199][ T3423] usb 1-1: SerialNumber: syz 01:53:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:30 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x700000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:30 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 781.925764][ T3423] usb 1-1: USB disconnect, device number 41 01:53:30 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ftruncate(r2, 0x5) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x3, @sdr={0x14046918, 0x3}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) 01:53:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}) 01:53:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:30 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}) 01:53:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 782.433541][ T3423] usb 1-1: new high-speed USB device number 42 using dummy_hcd 01:53:31 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}) 01:53:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}) [ 782.693445][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 782.823949][ T3423] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 782.993796][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.012471][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.046799][ T3423] usb 1-1: Product: syz [ 783.051174][ T3423] usb 1-1: Manufacturer: syz [ 783.067637][ T3423] usb 1-1: SerialNumber: syz [ 783.144594][ T3423] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 783.353963][ T3423] usb 1-1: USB disconnect, device number 42 01:53:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x800000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:32 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6}) 01:53:32 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x7f, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:32 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}) 01:53:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}) 01:53:32 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:32 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x300}) 01:53:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 784.535429][ T17] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 784.773573][ T17] usb 1-1: Using ep0 maxpacket: 16 01:53:33 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0xfeffffff00000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x500}) [ 784.893837][ T17] usb 1-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 784.946930][ T17] usb 1-1: config 1 interface 0 has no altsetting 0 [ 785.126862][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 785.151564][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.180343][ T17] usb 1-1: Product: syz [ 785.195790][ T17] usb 1-1: Manufacturer: syz [ 785.218884][ T17] usb 1-1: SerialNumber: syz [ 785.254275][T24729] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 785.274470][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 785.500929][ T3422] usb 1-1: USB disconnect, device number 43 [ 786.293490][ T3422] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 786.563459][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 786.686826][ T3422] usb 1-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 786.712561][ T3422] usb 1-1: config 1 interface 0 has no altsetting 0 [ 786.903802][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 786.920002][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.937523][ T3422] usb 1-1: Product: syz [ 786.947730][ T3422] usb 1-1: Manufacturer: syz [ 786.961168][ T3422] usb 1-1: SerialNumber: syz [ 786.997985][T24775] raw-gadget gadget: fail, usb_ep_enable returned -22 01:53:35 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)="eee346c8c91de3d11e64039546823418f23665a97ffdc222c7fe93d510ba94dd261bcf22fd7f4674675415ef05cb0363d5c0b000cae7046230eb1f938af092db7267e1a468ac7db3c5d1ed3f597c19bc0a06ab92f5ca59ab04922deb6fe71b13daca04bf233256b2b4bff51cb9968d149b810b81a1eac45e8a0bf67dbeaa5d537ec71e8d7878eed1778848dbac88d9328b9340ac1ae178356d3f396f1e5f321950cee69322393ab036caef8eff172f24116e3d5d664288b56388a660c11c1002c2fe0f1f191b047fca39a6e28c483d8912f6ea5910ea65522cd3014fb8a134", 0xdf}, {&(0x7f0000000200)="eff5f7e0f5122cd89753352cf24fe6e9228977348bdf8a9a9e4045b0270b8214bb32dc47269379d9a5a62290eabafe0bcfaf8933a1d536f48c6aea18297813f7a4d3d701b325b9a8809b08533b736fb306472153e54473081b0407070db6018f18e65035c0d26301aeb8b34b710bd02097348e6c55cb90760524eccc2659098692fac20633510ba6661ef30e6d5b847eaeb9f9591be0b1f790bca7e86aa3", 0x9e}, {&(0x7f0000000440)="a57e6bd179f5cee72e3f8bc380d1f55a57ecbc305aaae2a4f784635bc7b58e69e0f1bc67d34d48ac15ba8ebafcd91287e4787c33378ecd13024933e3c9274ecf5e792f51b16b4ae955c105a246b8602aecfdd8bf2e3bef4b0216dd73ceb859dee2ab27507434afc0a01fa0bdbcd08ee0eff7c4ba2ab9149070d0b5cdd16c2d28860f2450342ffd85976a1fb5c25034241205613a59ec0d328e19edaf551fbe2217e1f8c77a3c2dccac976c9d63ade401074ae628b927", 0xb6}, {&(0x7f0000000500)="18899b48bdc9c0e332de5bddd98287b8755bf733cb035727a0cc2b126d68011780052b5fee16e86151713d7430930b4ba721e419906e3011f88429fb509f7c77d987ec947653a0ab3840cd8335c6e79587ab4c3f63d3e9818d83cd01641561721ed16735e7b399c3036a6ff52c9721fe749e2066ce61215eaa4a676c667b341bfcd6a195c6ded2ab17cf2fe8f683eacd99d6477e4b33d070493d8ddcbd62c8a7ff1f59200dd6eda264ebaa36b684cbf88bf010fe61f806f8c4235dbeb36d1edf0051b90e8bb72202293275", 0xcb}, {&(0x7f0000000600)="a38f8700d9de3faa8a8ec897dab4bdd55d46b37a2277c05f543d2d0ae0059292efbed75677c24c09173301464af34e3e7c844dcb6099019cdaf8e740f85492bee5c3f70bd88132e0533817bdbde67778c3cd689d6779478735336fc75fa4ec130e23a86ac0296abec57294f3477468bcfef664d099f71035420713abaae3a3d13b84ca14fa5c477c9ac2fe1e85418b50cbee9d95614ecf7cb939b64e55310312cd14bd90dc37557f", 0xa8}, {&(0x7f0000000080)="5936006c31bc0eca9bf829ec605ce465de9c7312cd9927296a3125137597cb0432b0e0e0863f92b5037a6a6702d84fdc", 0x30}, {&(0x7f00000006c0)="aaa5900732c29f2a16682dda5f944554195b7c505be7b8c68dcad9f7b52cf7ab075f82d96dbb4e9320139b9a7f5d6903bf09abecc36aca012d0f0803bd194946fea62a1f4b56c1dbd7eb4c5116ec381cf5de95069c4a24301b2aecc25b52bb7ea30ede9c250b883028e18bd1bda26ab269232eb678c5dd45ae5a67625d68f2ece3fc0f", 0x83}], 0x7, &(0x7f0000000800)=[{0xb8, 0x109, 0x8, "271157c0dfe78cd5a76b5b6d83a135689663013347dc123c8cee3b65d175319c540e665db8260860cda059fb5ec41209404a94c92d5126a45906e260c299042a4d1ae9efcb4d3ee1389a6ece6694787d632faeb588981c7254688edaec128f4472af16ffa779b420d00cd2b6e5a7c71cc63d0243de3d508366d2aa1c1a980c17afd899f887ddaf2c3144ce8971ec3a59f0ee7c4e8627af2984411d985d263b7b7faf"}, {0x58, 0x104, 0x4, "5f86a9d644c30be91534fe8051414bf506a8c74d293ea477ceb1c58db03cc023efa1c1d721f6ad4986282123b0e5b8106fecc2eedfeede1913e84ae4b4033293605b0cb3b6"}, {0xd8, 0x1, 0x7, "4043c3a80f94201702a9c64576afb3dea1dd797e88190de8fec0d7eeb54fbbc11ebab662c39b34e3b60b24cce790f7905bf49460e7e78f997940788a5e3f72d787df71ddb10e11b5875a132166874dd6a828d2b8da13598912b1762ce1e23723936ee133c9a6c6bdda2485ff12717dbd4e140f87aa72472414771fee9113413672b6b95c9f50125af78a3ab427db1f2d6620d53fb5d14e07c4d85c8b7acff6a3a849248ce6a53be783938e62dd90ab2bc063a4eae034648a09bec2e5198f25e6c53c"}], 0x1e8}, 0x8804) r4 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) 01:53:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x600}) 01:53:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:35 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0xff00000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 787.073588][ T3422] usb 1-1: can't set config #1, error -71 [ 787.090778][ T3422] usb 1-1: USB disconnect, device number 44 01:53:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x700}) 01:53:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff00}) 01:53:36 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:36 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000}) [ 787.668500][ T3422] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 787.943633][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 788.073640][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 788.263942][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.279881][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.308966][ T3422] usb 1-1: Product: syz [ 788.317833][ T3422] usb 1-1: Manufacturer: syz [ 788.328237][ T3422] usb 1-1: SerialNumber: syz [ 788.395584][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 788.612859][ T3422] usb 1-1: USB disconnect, device number 45 01:53:37 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) write$binfmt_misc(r3, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRESDEC=r5, @ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES16=r6], 0xfffffecc) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x600008}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xac, 0x0, 0x800, 0x1, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6d29e4fc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xb7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0c4) r7 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01000000000000000000090582020000000000b49903020000000000ec4582143c4a1e113209ae73d6510219d9dddd6317cf6e9b5b9a3d71392684e563126c35536906f976218153d12cf83da649437d1b56ec608e1969ea6c0b6353c0b27d93a59174e879c4a3b83437d4c11b29a934f2caa0bbdfc1eaf4c3160600c8c6ff01fa1bbf116d593d2d96ea00dc9ee07c4a23"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r0) 01:53:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000}) 01:53:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:37 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) 01:53:37 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0xffffffff00000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3000000}) 01:53:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000000}) 01:53:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5000000}) [ 789.823601][ T3422] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 790.083556][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 790.228869][ T3422] usb 1-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 790.263014][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 790.500090][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 790.515070][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.536899][ T3422] usb 1-1: Product: syz [ 790.551426][ T3422] usb 1-1: Manufacturer: syz [ 790.567613][ T3422] usb 1-1: SerialNumber: syz [ 790.640684][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 01:53:40 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0xdb, 0x6, 0x80, "b5b1c5ca666e793c1d97b43857ea8e56", "bd6593d2b54bfc46d825cb442a029fe3dae8b959a1e9b385e842573f6904849a918034d7d30c36293eb84e36f615d4f501151e779053e6d0e14eddc4c5d22791695cbbab3d3f5d12fa20aa2a6986ac9ace7d649a34083609456c7bdb42cbfdd149b218c0c8905348707f8d5c508925177061ea5a1b34b78a7e555596fb104a9bbeae3ba4c7630143c8064f52b18e7e379e9e8588c863f1d13b35e99ab9824929dd29b1e31ecea07d7c4e437efba010118dc44c66bbbd24ef5b4b9a48a352ed145c19f90c8c84"}, 0xdb, 0x2) 01:53:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6000000}) 01:53:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x2}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 792.238598][ T3422] usb 1-1: USB disconnect, device number 46 01:53:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7000000}) 01:53:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000}) 01:53:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff000000}) [ 792.763654][ T3422] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 793.013611][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 793.143946][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 793.360923][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 793.381533][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.408264][ T3422] usb 1-1: Product: syz [ 793.417843][ T3422] usb 1-1: Manufacturer: syz [ 793.423068][ T3422] usb 1-1: SerialNumber: syz [ 793.504739][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 793.714789][ T3422] usb 1-1: USB disconnect, device number 47 01:53:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0xffffffffffffff92}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x5}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0xfff, 0x0, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xea}) 01:53:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:42 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x3}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x7fff, 0x200, 0x10000, 0x6, 0x1, 0xfffffffe], 0x6, 0xffffffff, 0x7, 0x2, 0x0, 0x8, 0x299, {0x4, 0x8, 0x1, 0x8, 0x7ff, 0x7ff, 0xff, 0x7fff, 0x1ff, 0x1000, 0x8001, 0xff, 0x28a, 0x4, "1b2a5b81b06f969722bbbcbd4bd2e408de3992890f1f98e65f9941ce0c92f611"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) [ 794.843622][T24143] usb 1-1: new low-speed USB device number 48 using dummy_hcd 01:53:43 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) [ 795.083857][T24143] usb 1-1: Invalid ep0 maxpacket: 16 [ 795.233626][T24143] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 795.483619][T24143] usb 1-1: Invalid ep0 maxpacket: 16 [ 795.492598][T24143] usb usb1-port1: attempt power cycle [ 796.219179][T24143] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 796.318392][T24143] usb 1-1: Invalid ep0 maxpacket: 16 [ 796.473574][T24143] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 796.573646][T24143] usb 1-1: Invalid ep0 maxpacket: 16 [ 796.579218][T24143] usb usb1-port1: unable to enumerate USB device 01:53:45 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b00010100000009040000000206d8dc000000000000240000000d240f010000000000000000000905820200000000da1d9b000996fb0503020000000000591132ee602fb854ae2acf662eb3e4bedc4e67de8ff8584351650698308fab0147964de1cf75da3efac42189f7264058b44266b7ccbd771f61ba8d509cbbf93cbeaf0bec4c5096f27a5ae0612f07ef76f002a9de2f8e3081cd12c77d1ccab41170d85269f69efd642a24963550f45f8db11d8584606ad36798203476eebc53b8de1b1f0746c85c7f25b99edeecba72afe41078"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:45 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:45 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x4}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:46 executing program 5: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:46 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:46 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) [ 797.853607][ T3424] usb 1-1: new high-speed USB device number 52 using dummy_hcd 01:53:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:46 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 798.121476][ T3424] usb 1-1: Using ep0 maxpacket: 16 01:53:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 798.253952][ T3424] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.458402][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.473314][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.498759][ T3424] usb 1-1: Product: syz [ 798.526324][ T3424] usb 1-1: Manufacturer: syz [ 798.547827][ T3424] usb 1-1: SerialNumber: syz [ 798.880904][ T3424] usb 1-1: USB disconnect, device number 52 [ 799.643613][ T3424] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 799.903564][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 800.024066][ T3424] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.213953][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 800.223029][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.257643][ T3424] usb 1-1: Product: syz [ 800.261851][ T3424] usb 1-1: Manufacturer: syz [ 800.285472][ T3424] usb 1-1: SerialNumber: syz 01:53:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400001020301097228bd023b000101000000090400000002060000052406000005240000000d260f01000000000000000000090582020000000000090503020000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:49 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x5}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000200)={0x10a4, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)) write$P9_RREAD(r2, &(0x7f0000000000)={0x21, 0x75, 0x1, {0x16, "ca349de4918d28570f59ce9d86cf94c63a2d3f06544e"}}, 0x21) [ 800.518377][ T3424] usb 1-1: USB disconnect, device number 53 01:53:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff01, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) timerfd_create(0x6, 0x800) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff7f, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x44100, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x2, 0x10001}) 01:53:49 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 801.119994][ T3424] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 801.373781][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 801.550884][ T3424] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 801.561158][ T3424] usb 1-1: can't read configurations, error -61 [ 801.733666][ T3424] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 802.003613][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 802.173953][ T3424] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 802.181762][ T3424] usb 1-1: can't read configurations, error -61 [ 802.193873][ T3424] usb usb1-port1: attempt power cycle [ 802.923739][ T3424] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 803.029883][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 803.198734][ T3424] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 803.210971][ T3424] usb 1-1: can't read configurations, error -61 [ 803.373714][ T3424] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 803.475047][ T3424] usb 1-1: Using ep0 maxpacket: 16 01:53:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101000000e42cbd38ea0b090400fff602060000052406000005240000000d240f01000000000000000000090582020000000000090503"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:53:52 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:52 executing program 3: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'bridge_slave_0\x00', 0x3, 0x7fffffff}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xffffffffffffffc4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004044) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000140)={0x1, 0x100000000, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:52 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x6}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 803.627078][ T3424] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 803.641640][ T3424] usb 1-1: can't read configurations, error -71 [ 803.678892][ T3424] usb usb1-port1: unable to enumerate USB device 01:53:52 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}) 01:53:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:52 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2d, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}}}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r4, 0x0, 0x84ffe0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000280)={0x3, 0x0, [], {0x0, @bt={0x1, 0xfffffffb, 0x0, 0x2, 0x2, 0x7f, 0x8cd, 0x8, 0x81, 0x3, 0x7, 0xfffffff7, 0x7, 0x4, 0x0, 0x0, {0x3, 0x1}, 0x4}}}) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = dup(0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x40040021d) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xa00000, 0x8, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x99096b, 0x23, [], @p_u16=&(0x7f0000000000)=0x9}}) r8 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f00000001c0)={0xd8b2, 0xe, 0x1f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_CLOSE(r7, 0x40086409, &(0x7f0000000180)) 01:53:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 804.243832][ T3424] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 804.493745][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 804.623856][ T3424] usb 1-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 804.642477][ T3424] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 804.817174][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.833835][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.842407][ T3424] usb 1-1: Product: syz [ 804.850011][ T3424] usb 1-1: Manufacturer: syz [ 804.855634][ T3424] usb 1-1: SerialNumber: syz [ 805.120688][ T17] usb 1-1: USB disconnect, device number 58 [ 805.893663][ T17] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 806.143716][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 806.264091][ T17] usb 1-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 806.274822][ T17] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 806.444999][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 806.454177][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.462178][ T17] usb 1-1: Product: syz [ 806.466648][ T17] usb 1-1: Manufacturer: syz [ 806.471269][ T17] usb 1-1: SerialNumber: syz 01:53:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x1) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, &(0x7f0000000140)="9b786c5a09ff4d0d07ec80f4a98f8c950cdf2e0227116ecd87b081e0b7ca91bf6544ef7b693b91de421374e1fc319c697d36a3a3481a2a73ea3cd91f0867347132bc538adfcbf3ae71586f3c110089cccf24ef23dc1dc2d3e83bed27054fccf8bec3240fa0ea9f826118061401e00332dfcf5382795e527198b28aa1e80d682fe805e929107e1e10a4f4288df035277ddc9a9b2adad573f3a3", 0x99, 0x3, 0x0, 0x2, r3}, &(0x7f0000000200)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000000)) 01:53:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:55 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x7}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfffffffffffffffb, 0x1a3180) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x42c340, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000000200)={0x2, 0x1, 0x6}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0)) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fbdbdf2502000000c00008804400078008000500c7eb5f2308000500f90d296308000600b100000008000500bdb2d307080005005b83fc1e080005000e0a1003080005001033a855080005000c0a8d01040007800c0007800800050071794c501c00078008000500efb2a51608000600680000000800050063aabd161400078008000600fb00000008000500de0f9b362400078008000500c3a2f36408000500b1be972a08000500d006ba05080006000a0000001400078008000500c53b4a4608000600d80000000800020002000000240108805400078008000500e75b0c3208000600d40000000800050064bed070080005002583641b080006003a0000000800060037000000080005003650a55508000600d3000000080005007d038059080006000c00000014000780080006001700000008000600650000002400078008000600f8000000080006006e000000080005009aab663808000600f50000004c000780080006001800000008000600d500000008000600aa000000080006002a000000080005008fd25762080006006400000008000500206bcc60080006009f000000080005008f396b070c00078008000600740000003c000780080005009ca8c678080006009e000000080006003f00000008000500c5470f140858f100871b55626d0005000cc8353f08000600360000000c00048005000300050000000800010000000000080002000200000068000c8024000b8008000900f9bea16808000900a4382f45080009005cfc582908000a00e31600000c000b8008000a000bad000034000b80080009001f3a224608000a00ef45000008000a00645c000008000a003dfd00004a880a00efbd000008000900c5dc1d360800020003000000"], 0x28c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 01:53:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000040)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat2(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0xc080, 0x110, 0x1}, 0x18) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x37}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0xad3ba83fd3f385e1}, 0x855caeaddbcf8b8f) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f0000000000)=0x6, 0x4) r9 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1000000}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) close(r0) [ 806.689932][ T17] usb 1-1: USB disconnect, device number 59 01:53:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 01:53:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x111002) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x1, 'bond_slave_1\x00', {}, 0x9}) write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) 01:53:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0xae7e, 0x5c74037c, 0x80000001, 0x9, 0x10000, 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)) 01:53:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x2, 0x80000005}) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x9, @local, 0x2}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x40}, 0x1}, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @rand_addr=0x64010101}, 0x3}, @in={0x2, 0x4e21, @remote}], 0x74) 01:53:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)) 01:53:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000000)={0xfffffffffffffffa, 0x9, 0x1}) [ 807.253891][ T17] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 807.503851][ T17] usb 1-1: Using ep0 maxpacket: 16 01:53:56 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x8}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:56 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 807.624127][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 807.818012][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.842065][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.877109][ T17] usb 1-1: Product: syz [ 807.891225][ T17] usb 1-1: Manufacturer: syz [ 807.906812][ T17] usb 1-1: SerialNumber: syz [ 807.966780][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 808.171653][ T17] usb 1-1: USB disconnect, device number 60 01:53:57 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x8000) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000000)={0x10000, 'syz0\x00'}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000040)={0x3, 0x3, 0x9, 0x20, 0x9, 0x1000, 0x7, 0x5, 0xd25, 0xe1, 0x4, 0xe359, 0xfffeffff, 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r0) 01:53:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$hidraw(r2, &(0x7f0000001180)="90eed67f0aea0766f7f5c2c663fc553aa58fc187b8f4ea437f5f25be326d85042d39078f6d558878922cbbaec33a40db6618802501646645d7a93e0d95c5426da8ae9d413d", 0x45) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x400400) write$P9_RREAD(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x100b) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000080), 0x4) 01:53:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)) 01:53:57 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) fallocate(r6, 0x2e, 0x44, 0x7) 01:53:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x7d, &(0x7f0000000140)={r6}, 0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000080)={r6, 0x3f, "7dfd0806058e68e9b23115780a57efe4522170256da25191667b8c0dd87946493d2a1a2756037c27f93595e7774c8c6c86afa84bb33a8fcda49d14d010761e"}, &(0x7f0000000000)=0x47) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r7, 0x1000, 0x8, [0x0, 0x3, 0x40, 0xff, 0x9b, 0x5, 0x6, 0x4]}, 0x18) 01:53:57 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x300}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400001, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) [ 809.243702][ T3424] usb 1-1: new high-speed USB device number 61 using dummy_hcd 01:53:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0xb, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x0, r4}) 01:53:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 809.413807][ T3422] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 809.503757][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 809.624250][ T3424] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 809.653750][ T3422] usb 6-1: Using ep0 maxpacket: 16 [ 809.823826][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.839836][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.852559][ T3424] usb 1-1: Product: syz [ 809.861098][ T3424] usb 1-1: Manufacturer: syz [ 809.881378][ T3424] usb 1-1: SerialNumber: syz [ 809.887142][ T3422] usb 6-1: unable to get BOS descriptor or descriptor too short [ 809.939964][ T3424] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 809.954595][ T3422] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 809.962238][ T3422] usb 6-1: can't read configurations, error -71 [ 810.138951][ T3424] usb 1-1: USB disconnect, device number 61 01:53:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200000, 0x0) ftruncate(r2, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) 01:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x26) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:53:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @multicast1}, &(0x7f0000000080)=0xc) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000000)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1ef8) 01:53:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) fallocate(r6, 0x2e, 0x44, 0x7) 01:53:59 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x500}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:53:59 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10d) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000140)=""/218) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x7, 0x1f, 0x4ee, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:53:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff010000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:53:59 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028008234d967d6b248a59b68819a0000", @ANYRES32=r1, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000004000000000000920000", @ANYRES32=r4, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01165728000900000004000000200024a6e9ab", @ANYRES32=r7, @ANYRES16], 0x1ec}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000004f80)={'wg0\x00', r7}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000005100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000050c0)={&(0x7f0000004fc0)={0xe4, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r9 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r9, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:53:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000180)={{0x6, 0x7, 0x6, 0x5, 'syz1\x00', 0x9}, 0x1, 0x2, 0x888e, r3, 0x2, 0x8000, 'syz0\x00', &(0x7f0000000140)=['!\x00', '/dev/dri/card#\x00'], 0x11, [], [0x80, 0x1, 0x0, 0xaa]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x141000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000080)={0x1, 0x408, 0x2, 0x3f, 0x2, [0x5, 0x9c8c, 0x5, 0x5], [0x7f, 0x10001, 0x2, 0xb740], [0x4, 0x2, 0x6, 0x6], [0x6, 0x10000, 0x1ff, 0x9]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 01:53:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xff7f0000, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 811.163779][T24143] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 811.239773][ T3422] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 811.403952][T24143] usb 1-1: Using ep0 maxpacket: 16 [ 811.507386][ T3422] usb 6-1: Using ep0 maxpacket: 16 [ 811.524002][T24143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 811.694088][T24143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 811.704998][T24143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.717327][T24143] usb 1-1: Product: syz [ 811.721652][T24143] usb 1-1: Manufacturer: syz [ 811.726999][T24143] usb 1-1: SerialNumber: syz [ 811.740387][ T3422] usb 6-1: unable to get BOS descriptor or descriptor too short [ 811.785645][T24143] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 811.823979][ T3422] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 811.831569][ T3422] usb 6-1: can't read configurations, error -71 [ 811.991927][ T3424] usb 1-1: USB disconnect, device number 62 01:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x800000, 0xf, 0x1f}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000080)={0x1, 0x5, 0x4, 0x3, 0x100, 0x1000, 0x9, 0x8, 0x434}) 01:54:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x1000, 0x0, 0x0, 0x8, 0x4}) 01:54:01 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x600}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:01 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}}) write$binfmt_misc(r4, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRESDEC=r6, @ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES16=r7], 0xfffffecc) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xb0, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8001}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:54:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) fallocate(r6, 0x2e, 0x44, 0x7) 01:54:01 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, 0x20}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) 01:54:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_rdma(0x10, 0x3, 0x14) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_procfs(r3, &(0x7f0000000080)='maps\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r8, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x5, 0x8, {r6}, {r8}, 0x1, 0x5}) sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f00000000c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000780)={0x590, 0x31, 0x200, 0x70bd27, 0x25dfdbfe, {0x13}, [@typed={0x4, 0x88}, @nested={0x4a, 0x7d, 0x0, 0x1, [@generic="5c8b56841c3f1170b98b9c468698f2f5c4160767d11070a53d6aa9c41e2575186b22ab6b0f62b169cd707bbc8d9952963d6b812f7a2004c56f8ad8ced3d62ebc9d35d4526850", @generic]}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x2e, 0x4c, 0x0, 0x1, [@typed={0x13, 0x25, 0x0, 0x0, @str='/dev/dri/card#\x00'}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x5}, @generic="353b1ed1438475d3fad5"]}, @generic="a95f18532316a738e38144c6a57f51e05ab3bdcfc1aaf0b210e84fb1661b262dc563e18f257c7eaeba7d61f84c2798f5ce0ea7b9932d1f7dc4", @nested={0x12f, 0x0, 0x0, 0x1, [@generic="9c45c26f41c40c7653fc9daa7f1ff910315539dda0a913377dbff78535bafb1785", @typed={0x5, 0x72, 0x0, 0x0, @str='\x00'}, @typed={0x87, 0x3a, 0x0, 0x0, @binary="159216354bc19fbbc12988eced86668d0ee2acc551bf4b71e9af4c170e3b7fcadf168eeb24eba742b48559f30d86293c09fe53301307bbb1ad83031a163614d21d38ef8853011a74b9a94150308772b68fa8ba2baf9131c096e43e5dbe7fc53fddd1a2ed68483ec56e28fa8a8ae1c48ecf3272b8e67d86affbdb4bffb2be6f59546ca4"}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r5}, @generic="e9a4df9f3603272bcd74a0465a964a3c00f50cc0f49618d83aa5ec6a18a6eed143eb89408de8f28ebb8d319260bbf38b2d67869ce1a2f8926cabb16eaec0f3aa866d", @typed={0xc, 0xb, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x54, 0x0, 0x0, @fd=r1}, @typed={0x13, 0xb, 0x0, 0x0, @str='/dev/dri/card#\x00'}, @typed={0x6, 0x89, 0x0, 0x0, @str=']\x00'}]}, @nested={0x28e, 0x92, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @u32=0x4}, @typed={0xbf, 0x4d, 0x0, 0x0, @binary="31112fa9a813f048a00dab9f056738ef44c6ff4df796585550e50cfcaa8069ebd5a28f3b705de305cb5ec1be38f50c113eaed3f8e242be4b59862997e8348711d7aa8e86a514e5786316d7043f9b827cac8a4ce267c69004aadcdbd36fb826c1384f57163a39721a470a2b18e519f724633b90d7a2dbd8dcb9101d023ea31521b022a537783256b8be8315395f7c4df0c6daf2790f16a2d59f6a1e25689d11be8c0b226c90b455761f1c70da54823e2face66f370b98bec0147b3c"}, @generic="8ba159df889a501724aecfe2548bd546fdf7977f793432376b9cd554cd007e1abeed390354eb344cb55b34c635bd9126e3f197aa60cfb75fcc842b6757cd6ffd2441632d340dbfebe0f9fb5240f561172fbd5a7dfb8104f6fcdb3e58eb63950d1eccaabedc8038770f039d9450632dd31a3e7efe554d83b0c5174e82c0ce07e79be84854f0daf0078c58e0353c47c48ea35ff0ebeb6169c7d579cd5bcece0747105f88001ded6ef64ed0b10200"/185, @generic="4185952d372b4d568b618fe050ebc5be55c1c7f359e2aebafad8d79a29b4bc30cdc4147994908629ebabf689c3cc64329f3ed749e9b7d437f1f930091cf0d0c32864f56ab3ab09ca96978c8ccdc5fd2773c49eb7e2c93f0031230ae6ff34caeb317a5f5c0526b951b8b4cbbe1e491a3d02040beafe70f9dd8944ad1f49592e109916daa62e5a310c572834c70e390b54457891f8f8509b8e1a3991ef7e669f09f2447e837737897005b5a2c6dd86f395ad49bd1f6188d7945b1db5fd136f761cc6bdd061af20012e44cf7deec26e74677882f74b6fbd8c7740aa36b9e89d0915cfedae7a5935155520980522f7df75067cba740c8ecb800811", @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x17, 0x0, 0x0, @u32}]}, @generic="6a385d16fcdf194ac012ac410755df5550615fc7039dbae721770e03425d670cc9584dd39b818f31cf8f37b8565e48c8735ee323ebdaa80cfac5dd35c84788fc19049f4e8dc71cf94794e825596da852d5703161c8bcd74fb7f8e9979d98aeec5dbda7e8ea", @generic="6a5dba422acaefcf68ddac5d8f6cb653000aa23d0fea4e4835a78ac5b9fbdb53092e4563a2628843954a2e3daaafd81c35c78e908c7c6bbb0e012c43523c0eea1904a36bd1b6d91236d932846b006a6ef9c049e04887501999684ab0635d7b20ec612b09272094a140416d05b1fd465a1a06dd1e964ce847db9e0b", @nested={0xc, 0x28, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @uid=r9}]}]}, 0x590}, 0x1, 0x0, 0x0, 0x4000}, 0x800) semctl$GETZCNT(0x0, 0x4, 0xf, &(0x7f0000000240)=""/211) semop(0x0, &(0x7f0000000740)=[{0x0, 0x1}, {0x1, 0x4, 0x800}, {0x4, 0x2, 0x1c00}], 0x3) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000040)={0x3, 0x4, 0xabba, 0x6, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, 0x8, 0x10001}) [ 812.953776][ T3424] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 813.063699][ T3422] usb 6-1: new high-speed USB device number 18 using dummy_hcd 01:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0xfffffffffffffffe, 0x5, 0xf}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r6 = pidfd_getfd(r4, r5, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, [], {0x0, @bt={0x4, 0x2, 0x0, 0x0, 0x7f, 0x100, 0x1000, 0x6, 0x6e9, 0x100, 0x8, 0x10000, 0x5, 0x287, 0x8, 0x5, {0x3f, 0x1}, 0x1, 0x2}}}) [ 813.203757][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 813.324063][ T3422] usb 6-1: Using ep0 maxpacket: 16 01:54:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000000)=0x9, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 813.344701][ T3424] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 813.556852][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.556876][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.556891][ T3424] usb 1-1: Product: syz [ 813.556906][ T3424] usb 1-1: Manufacturer: syz 01:54:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f, 0xcccccccc}) [ 813.556921][ T3424] usb 1-1: SerialNumber: syz [ 813.593838][ T3422] usb 6-1: unable to get BOS descriptor or descriptor too short [ 813.595075][ T3424] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 813.658389][ T3422] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 813.658415][ T3422] usb 6-1: can't read configurations, error -71 01:54:02 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x700}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) 01:54:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 814.773737][ T3422] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 815.028844][ T3422] usb 6-1: Using ep0 maxpacket: 16 [ 815.174022][ T3422] usb 6-1: unable to get BOS descriptor or descriptor too short [ 815.242990][ T3422] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 815.257735][ T3422] usb 6-1: can't read configurations, error -71 [ 815.286499][ T3422] usb usb6-port1: attempt power cycle 01:54:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x7c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x28}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x997}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x721, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ada}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r6, 0x1000000) sendfile(r0, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) close(r0) 01:54:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 815.610259][ T2735] usb 1-1: USB disconnect, device number 63 01:54:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) 01:54:04 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0xff00}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:04 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) 01:54:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xfff) 01:54:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 816.194371][ T2735] usb 1-1: new high-speed USB device number 64 using dummy_hcd 01:54:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 816.343940][ T3422] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 816.433778][ T3422] usb 6-1: Using ep0 maxpacket: 16 [ 816.444634][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 816.563948][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 816.583941][ T3422] usb 6-1: unable to get BOS descriptor or descriptor too short [ 816.653873][ T3422] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 816.653899][ T3422] usb 6-1: can't read configurations, error -71 01:54:05 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x1000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 816.753865][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 816.797602][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.797618][ T2735] usb 1-1: Product: syz [ 816.797631][ T2735] usb 1-1: Manufacturer: syz [ 816.797645][ T2735] usb 1-1: SerialNumber: syz [ 816.834889][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x9, 0x100) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x7d, &(0x7f0000000140)={r5}, 0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r5, 0xffff}, &(0x7f0000000180)=0x8) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r7, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, r7, 0x1, 0x4}, 0x20, 0x2, 0x1, 0xfffffffffffffbff, r8, 0xffffffffffffffff, 0x800}) 01:54:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 817.060613][ T2735] usb 1-1: USB disconnect, device number 64 01:54:05 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) [ 817.553819][ T3422] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 817.656862][ T3422] usb 6-1: Using ep0 maxpacket: 16 [ 817.863984][ T3424] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 817.933810][ T3422] usb 6-1: unable to get BOS descriptor or descriptor too short [ 817.993784][ T3422] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 818.033735][ T3422] usb 6-1: can't read configurations, error -71 [ 818.040181][ T3422] usb usb6-port1: unable to enumerate USB device [ 818.114805][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 818.263830][ T3424] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 818.479897][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.499865][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.533754][ T3424] usb 1-1: Product: syz [ 818.537965][ T3424] usb 1-1: Manufacturer: syz [ 818.542583][ T3424] usb 1-1: SerialNumber: syz [ 818.604935][ T3424] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01000000ecffffff0000090582020000000000090503020000000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:54:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x4c0b42) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/232) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:07 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) 01:54:07 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x2000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 818.719523][ T3424] usb 1-1: USB disconnect, device number 65 01:54:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = fcntl$dupfd(r1, 0x0, r4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000000)={0x200, 0x4, 0x0, @remote, 'veth0_virt_wifi\x00'}) 01:54:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x200001, 0x2002) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 819.173811][ T3423] usb 6-1: new high-speed USB device number 22 using dummy_hcd 01:54:07 executing program 3: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x3b, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 819.313824][ T3424] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 819.443704][ T3423] usb 6-1: Using ep0 maxpacket: 16 01:54:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x401, 0x8}) [ 819.554422][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 819.593873][ T3423] usb 6-1: unable to get BOS descriptor or descriptor too short 01:54:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x5abb}) [ 819.657184][ T3423] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 819.657211][ T3423] usb 6-1: can't read configurations, error -71 [ 819.674083][ T3424] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:54:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 819.850231][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 819.878500][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.929623][ T3424] usb 1-1: Product: syz [ 819.951706][ T3424] usb 1-1: Manufacturer: syz [ 819.972447][ T3424] usb 1-1: SerialNumber: syz [ 820.050945][ T3424] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 820.268812][ T3422] usb 1-1: USB disconnect, device number 66 [ 821.033748][ T17] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 821.273755][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 821.393931][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 821.564012][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.573235][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.583016][ T17] usb 1-1: Product: syz [ 821.588640][ T17] usb 1-1: Manufacturer: syz [ 821.593336][ T17] usb 1-1: SerialNumber: syz [ 821.645063][ T17] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:10 executing program 3: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102381, &(0x7f0000000080)=0x18fed) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002900270d00"/20, @ANYRES32=r4], 0x1ec}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="677265746170300000000000000000009b9fd91c751395adce89", @ANYRES32=r4, @ANYBLOB="0010008000000001000094f748430060006400001f29907800000000ac14140a443cd951ffffffff00000001ac1414bb000000030a010100000000ffac1e0001000001ffac14142c00000004e0000001000000027f0000010000000000890b5bac1414bbffffffff01000000"]}) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:10 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x3000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:10 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b00010100000009040000000206000005240600000524006cceea5e0c010000000000000000000905820200000000000905030200000000006e49de94b3bff563111d0970eb78e3e799087aac5c479405deeb281476141f1f0e94b0e72d88086f"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.advise\x00', &(0x7f0000000300)=""/251, 0xfb) close(r0) 01:54:10 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) 01:54:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2000001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x414000, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockname$qrtr(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x8}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x10001, 0x2, 0x2, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r4}) [ 821.839947][ T17] usb 1-1: USB disconnect, device number 67 [ 821.910857][T25702] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:10 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0xf, 0x1f, 0x87878787}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000080)=0x81, 0x4) [ 821.989937][T25702] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:54:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x3, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x8000) fstat(r4, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0xd0002) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:10 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@nl=@proc, 0x80, &(0x7f0000001500)=[{&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f0000001300)=""/198, 0xc6}, {&(0x7f0000001400)=""/199, 0xc7}], 0x5}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x0, 0x315f, 0x0, 0x1, 0x10001, 0x3, 0x4, 0xffff7fff, 0x7}) [ 822.283806][ T3423] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 822.383752][ T17] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 822.523764][ T3423] usb 6-1: Using ep0 maxpacket: 16 [ 822.643907][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 822.665096][ T3423] usb 6-1: unable to get BOS descriptor or descriptor too short [ 822.723900][ T3423] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 822.735687][ T3423] usb 6-1: can't read configurations, error -71 [ 822.793976][ T17] usb 1-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 822.998235][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.054252][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.092817][ T17] usb 1-1: Product: syz [ 823.109455][ T17] usb 1-1: Manufacturer: syz [ 823.133864][ T17] usb 1-1: SerialNumber: syz [ 823.214862][ T17] usb 1-1: bad CDC descriptors [ 823.419155][ T3424] usb 1-1: USB disconnect, device number 68 [ 824.203879][ T3423] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 824.443790][ T3423] usb 1-1: Using ep0 maxpacket: 16 [ 824.563865][ T3423] usb 1-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 824.734136][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 824.743195][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.752218][ T3423] usb 1-1: Product: syz [ 824.757024][ T3423] usb 1-1: Manufacturer: syz [ 824.761631][ T3423] usb 1-1: SerialNumber: syz [ 824.804928][ T3423] usb 1-1: bad CDC descriptors 01:54:13 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x8}) 01:54:13 executing program 2: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x5, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000002c0)={0x8b, 0x6, 0x1, "991d46a306293b0531971793af07465bc2d52c75cca5f32636dcf580645a1db2314456bde85bafa6a297ffc73ffa0c34d0a1f27f8a346de55625e3750cc18a867f4720b2112449aa889ff7c0a77ba8235fa5633891bb3bc2059c9f4a3f7979bf6f85c73ee9dbd21fb6614af2ccea26d09e568bd2599bd25184c3495964db50da6a8a38aaf0ebea99be1eaa"}) r5 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x20000005011, r5, 0x0) ftruncate(r5, 0x2000000) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x5, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98091b, 0x7, [], @value64=0xa7e}}) getpeername$ax25(r7, &(0x7f0000000240)={{0x3, @bcast}, [@null, @rose, @bcast, @default, @remote, @rose, @netrom, @null]}, &(0x7f0000000200)=0x48) socket$can_raw(0x1d, 0x3, 0x1) 01:54:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:13 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x4000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:13 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') 01:54:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101040000090400000002060000052406000005240000040d240f01000000000000000000090592020042327fdfaa5abdd581a900000000090503020000000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 824.953530][ T3423] usb 1-1: USB disconnect, device number 69 01:54:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket(0x15, 0x5, 0x81) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x221080, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x1000, 0x5, 0x7, 0xfffffffc, 0x8, 0x800, 0x200}) [ 825.393744][T24143] usb 6-1: new high-speed USB device number 26 using dummy_hcd 01:54:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x20, 0x1, 0x2, 0x8, 0x3f}) [ 825.504229][ T3423] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 825.633948][T24143] usb 6-1: Using ep0 maxpacket: 16 01:54:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 825.743826][ T3423] usb 1-1: Using ep0 maxpacket: 16 01:54:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$packet(r2, &(0x7f0000000000)=""/143, 0x8f, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f00000000c0)) [ 825.864998][ T3423] usb 1-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 825.865030][ T3423] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 825.865051][ T3423] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 825.943864][T24143] usb 6-1: unable to get BOS descriptor or descriptor too short [ 826.013890][T24143] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 826.013939][T24143] usb 6-1: can't read configurations, error -71 01:54:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x9077, 0x0, 0x8, 0x0, 0xfffffff9}) [ 826.025005][ T3423] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 01:54:14 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x5000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 826.199026][ T3423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.228769][ T3423] usb 1-1: Product: syz [ 826.243253][ T3423] usb 1-1: Manufacturer: syz [ 826.260493][ T3423] usb 1-1: SerialNumber: syz 01:54:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) [ 826.554893][ T3423] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 826.556683][ T3423] usb 1-1: USB disconnect, device number 70 [ 826.923901][T24143] usb 6-1: new high-speed USB device number 27 using dummy_hcd 01:54:15 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x1ff, 0x3ff, 0xffffffffffffff17}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r4 = dup(r2) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a10000000000000007023b0001010000000904000000020600592a15b9129211e100090582020000000006000503020000000000e900"/78], 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) getsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000000)={{0x0, 0x2, 0x1ff, 0x0, 0xb0f}, 0x5ea, 0x409a3, 0x101}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x2, 0xc040) close(r0) 01:54:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x200000000007, 0x1aa41) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x8000) pidfd_getfd(r2, r3, 0x0) 01:54:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:15 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x6000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 827.173983][T24143] usb 6-1: Using ep0 maxpacket: 16 01:54:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x8, 0x4}) [ 827.293954][T24143] usb 6-1: unable to get BOS descriptor or descriptor too short [ 827.364096][T24143] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 827.364122][T24143] usb 6-1: can't read configurations, error -71 [ 827.364338][T24143] usb usb6-port1: attempt power cycle 01:54:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0xfffffb13, 0x3c, 0x7, 0x10000, 0x3, 0x8000}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x1, 0x10000000, 0x0, 0x0, 0x8, 0x0, 0x3}) [ 827.576106][T25888] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 01:54:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff01, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 827.703839][ T2735] usb 1-1: new high-speed USB device number 71 using dummy_hcd 01:54:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) 01:54:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff7f, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 827.953805][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 828.000018][ T2735] usb 1-1: no configurations [ 828.006652][ T2735] usb 1-1: can't read configurations, error -22 [ 828.173791][ T2735] usb 1-1: new high-speed USB device number 72 using dummy_hcd 01:54:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:16 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x7000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 828.383887][T24143] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 828.424063][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 828.464199][ T2735] usb 1-1: no configurations 01:54:17 executing program 3: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x8840) openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x581000, 0x204}, 0x18) [ 828.464218][ T2735] usb 1-1: can't read configurations, error -22 [ 828.464428][ T2735] usb usb1-port1: attempt power cycle [ 828.476087][T24143] usb 6-1: Using ep0 maxpacket: 16 [ 828.620067][T24143] usb 6-1: unable to get BOS descriptor or descriptor too short [ 828.703960][T24143] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 828.703985][T24143] usb 6-1: can't read configurations, error -71 [ 829.193872][ T2735] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 829.294149][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 829.354142][ T2735] usb 1-1: no configurations [ 829.358913][ T2735] usb 1-1: can't read configurations, error -22 [ 829.523822][ T2735] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 829.624142][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 829.675041][ T2735] usb 1-1: no configurations [ 829.679709][ T2735] usb 1-1: can't read configurations, error -22 [ 829.693002][ T2735] usb usb1-port1: unable to enumerate USB device 01:54:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x2101) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000280)={0xff, 0x4, 0xa5}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0xa000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000180)={0x7, 0x6, 0x10001, 0xff}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[@ANYBLOB="602efc438774d0a612000000020000102505a1a440000102030109023b0001010000000b0400000002060000052406000005240000000d240f0100000000000000000009058202000000000009050302000000000035730ee466b7a6a355d569bbfb017c4162b36c272be8557021452746cd82405b114ac019133254a3804ff0b2eb30a3bc42b003139f36e0558163d4ee550c825b1187b93741d4e422471c162eabf5cfe02f149534c94fc0648bb4", @ANYRESHEX], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto(r7, &(0x7f0000000340)="255846e3797328b0ce1b97230deff3c55ef0566cecb50721b32c89b041149cfe97d9b0a0b3cf52176b97632e5788ba018b889eb699a3fe8c0059ca7206cf2208a6578e1f8732f8458e5fbbd8b001e1853db5d6754199e2f86f9887f45cceb346de74aba66ca07f1f6cf7d4c0c890dfbf76259bde44068d98e30712ab2a496052f839d2f8b51e386fd41a5e5875c2f836d611c73b09b86d5b5871e78c82ab76401885c600a3c9579417a59e02e35fcb76fcc2b9b00f906476d66a6adef6f6e8aa2c3be3abbc95f1fdb61aeaf4bd79bbf081395287a10d2541629890", 0xdb, 0x4004004, &(0x7f0000000000)=@x25={0x9, @remote={[], 0x1}}, 0x80) close(r0) write$P9_RREADLINK(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000170200000060202c09285ed8afb2239d7af64ce7f3e38ea07e4a77f9a5b00172da2886a02e5904fea130c0c90799f928d3337c0192d6409a76920a70baa35cecfcc8c2"], 0x9) 01:54:18 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x200002, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x9, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000080)={0x3, 0x401, 0x1, 0xfffffffffffffff7, 0x10001, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f00000000c0)={0x2, 0x80000000}) 01:54:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) 01:54:18 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x8000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:18 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) 01:54:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x6, 0x608000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x3, 0x3, 0x6, 0x8, 0xffffffff, 0x1, 0x80000003, 0x8000, 0x232}) 01:54:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000000)) [ 830.633898][ T2735] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 830.643774][T24143] usb 6-1: new high-speed USB device number 30 using dummy_hcd 01:54:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x3, 0x0, 0x2, 0x0, 0x8, 0x3}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 830.894289][T24143] usb 6-1: Using ep0 maxpacket: 16 [ 830.923818][ T2735] usb 1-1: device descriptor read/64, error 18 [ 831.043974][T24143] usb 6-1: unable to get BOS descriptor or descriptor too short 01:54:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2000, 0x141}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec01d1baf5b7f2bededcb683803c00040000ff07000092000000000000000000", @ANYRES32=r3, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf2519000000540001800800030001000000080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e00000000000014000200766c616e3000000000000000000000002c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="040001800c0001800800030001000000"], 0xa4}}, 0x20000810) r4 = syz_open_dev$vcsu(&(0x7f00000002c0)='/dev/vcsu#\x00', 0x4, 0x80000) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec0100002800270d00040400000000000092000037745e55b098edf0851b5c8286afe579d8d11256843375fc5100504786", @ANYRES32=r7, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03985f26f29aeaa81254f39de5ffce41fac7a3e7a642beeb179e"], 0x1ec}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000004000000000000920000", @ANYRES32=r10, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x8c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004015}, 0x800) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 831.104240][T24143] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 831.111876][T24143] usb 6-1: can't read configurations, error -71 [ 831.250906][T25976] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.313898][ T2735] usb 1-1: device descriptor read/64, error 18 [ 831.418301][T25980] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.583780][ T2735] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 831.859796][ T2735] usb 1-1: device descriptor read/64, error 18 [ 832.269471][ T2735] usb 1-1: device descriptor read/64, error 18 [ 832.404889][ T2735] usb usb1-port1: attempt power cycle [ 833.123779][ T2735] usb 1-1: new high-speed USB device number 77 using dummy_hcd 01:54:21 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 01:54:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:21 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0xfeffffff}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:54:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x1) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x1c1001) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfc, 0x2000) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x7fff, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000100)={r3, 0x5}) [ 833.313869][ T2735] usb 1-1: device descriptor read/8, error -71 [ 833.397327][ T27] audit: type=1326 audit(1596506061.932:50): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45fb2a code=0x0 01:54:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x6}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0xfffffffe, 0x0, 0xab, 0x0, 0x8}) [ 833.544099][ T2735] usb 1-1: device descriptor read/8, error -71 01:54:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 833.733888][T24143] usb 6-1: new high-speed USB device number 32 using dummy_hcd 01:54:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 833.983844][T24143] usb 6-1: Using ep0 maxpacket: 16 [ 834.044009][ T2735] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 834.134088][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 834.154097][T24143] usb 6-1: unable to get BOS descriptor or descriptor too short [ 834.192792][ T27] audit: type=1326 audit(1596506062.732:51): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45fb2a code=0x0 01:54:22 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x1, 0x5, 0x5, 0x9, 'syz1\x00', 0x4}) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xffffffff, 0x200000) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PPC_GET_SMMU_INFO(r6, 0x8250aea6, &(0x7f00000001c0)=""/6) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = fcntl$dupfd(r4, 0x406, r1) ioctl$KDADDIO(r7, 0x4b34, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 834.214113][T24143] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 834.214140][T24143] usb 6-1: can't read configurations, error -71 [ 834.264296][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 834.440104][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.440124][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.440137][ T2735] usb 1-1: Product: syz [ 834.440150][ T2735] usb 1-1: Manufacturer: syz [ 834.440164][ T2735] usb 1-1: SerialNumber: syz [ 834.475023][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:23 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:54:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 834.706322][ T3423] usb 1-1: USB disconnect, device number 78 [ 835.333780][T24143] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 835.464001][ T2735] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 835.603820][T24143] usb 6-1: Using ep0 maxpacket: 16 [ 835.743893][T24143] usb 6-1: unable to get BOS descriptor or descriptor too short [ 835.752611][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 835.813966][T24143] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 835.821567][T24143] usb 6-1: can't read configurations, error -71 [ 835.843965][T24143] usb usb6-port1: attempt power cycle [ 835.873915][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 836.074176][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 836.087858][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.103957][ T2735] usb 1-1: Product: syz [ 836.113257][ T2735] usb 1-1: Manufacturer: syz [ 836.123827][ T2735] usb 1-1: SerialNumber: syz [ 836.176354][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 836.376134][ T2735] usb 1-1: USB disconnect, device number 79 01:54:25 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xc0, 0x9, 0x6, 0x3, 0x0, 0x0, {0xc}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @rand_addr=0x64010100}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xf18}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, [], 0x1}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1c040}, 0x8a9af27ab38037a5) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req={0x0, 0x1f, 0x7fffffff, 0x400}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:54:25 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x725342, 0x10) getpeername$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000180)={0xd, 0x2, {0x54, 0x3f, 0x0, {0x6, 0x5}, {0x1, 0xbb5}, @const={0x5, {0x1, 0x2, 0x7fff, 0xffe1}}}, {0x52, 0x0, 0x0, {0x1, 0x9}, {0x9, 0x1}, @const={0x64d, {0x3, 0x7, 0x6, 0x9}}}}) 01:54:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0xff000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 01:54:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3, 0x0, 0x20, &(0x7f0000ffa000/0x4000)=nil, 0x3ff}) 01:54:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 836.873954][ T2735] usb 1-1: new high-speed USB device number 80 using dummy_hcd 01:54:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0xe9) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 837.085173][T24143] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 837.123897][ T2735] usb 1-1: Using ep0 maxpacket: 16 01:54:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$qrtrtun(r2, &(0x7f0000000000)="ff42c02c5a978b2174ba91e8e418a1bf3ffba874b5977151298e6fa08df78ccc", 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000140)={0x7, 0x3, 0x81, 0x0, 0x6}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x24}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xe}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4044001}, 0x10) [ 837.184413][T24143] usb 6-1: Using ep0 maxpacket: 16 01:54:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x341001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readahead(r3, 0x5, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x40f, 0x1f}) [ 837.247155][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:54:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) [ 837.304398][T24143] usb 6-1: unable to get BOS descriptor or descriptor too short [ 837.373923][T24143] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 837.373950][T24143] usb 6-1: can't read configurations, error -71 [ 837.424309][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.479438][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.510512][ T2735] usb 1-1: Product: syz [ 837.523246][ T2735] usb 1-1: Manufacturer: syz [ 837.536943][ T2735] usb 1-1: SerialNumber: syz [ 837.600023][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 837.812085][ T2735] usb 1-1: USB disconnect, device number 80 [ 838.593942][ T8234] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 838.833873][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 838.954107][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 839.123965][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.135190][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.148231][ T8234] usb 1-1: Product: syz [ 839.153452][ T8234] usb 1-1: Manufacturer: syz [ 839.160331][ T8234] usb 1-1: SerialNumber: syz [ 839.204824][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:27 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0xfffffffe}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:27 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000080), 0x10) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x6, 0x2, 0x0, 0x4cd7, 0x0, [0xffffffff, 0xc044, 0x3b, 0xfffffffe], [0x90c, 0xcf, 0x4, 0x3ff], [0x1, 0x2c2f, 0x7, 0x9], [0x3, 0x7fffffff, 0x6, 0x400]}) 01:54:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001280)={@un=@file={0x0, './file0\x00'}, {&(0x7f0000000280)=""/4096, 0x1000}, &(0x7f0000000080), 0x9}, 0xa0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_CREATE(r3, &(0x7f0000000140)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/58, 0x3a, 0x9, 0x7, 0xffffffff, 0x1, 0xfffffffb}}, 0x120) [ 839.407338][ T3421] usb 1-1: USB disconnect, device number 81 01:54:28 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:28 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x9, 0xfffd}, @obex={0x5, 0x24, 0x15, 0x40}, @obex={0x5, 0x24, 0x15, 0x1}]}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:54:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fsmount(r6, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000200)={r4, r7, 0xffffff01}) r8 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_targets\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r10, 0x2468825185d9173d}, 0x34}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r10, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 01:54:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 839.983830][ T3421] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 840.053179][T26203] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 840.203969][T26203] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 840.254049][ T3421] usb 1-1: Using ep0 maxpacket: 16 01:54:28 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:28 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x100000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 840.394605][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 840.574231][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.574255][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.574270][ T3421] usb 1-1: Product: syz [ 840.574287][ T3421] usb 1-1: Manufacturer: syz [ 840.574302][ T3421] usb 1-1: SerialNumber: syz [ 840.624620][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x50000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 840.854367][ T3421] usb 1-1: USB disconnect, device number 82 01:54:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:29 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x200000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:30 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff010000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 841.633860][ T3421] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 841.873859][ T3421] usb 1-1: Using ep0 maxpacket: 16 01:54:30 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) [ 842.010198][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 842.224165][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 842.240794][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.293854][ T3421] usb 1-1: Product: syz [ 842.298912][ T3421] usb 1-1: Manufacturer: syz [ 842.311461][ T3421] usb 1-1: SerialNumber: syz [ 842.365020][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:31 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x300000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 842.529597][ T3421] usb 1-1: USB disconnect, device number 83 01:54:31 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) connect$netrom(r2, &(0x7f0000000000)={{0x3, @default, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x2, 0xaa, 0xffffffffffffcc63, 0x81, 0xfffffff8, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) 01:54:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff7f0000, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_REPORTZONE(r2, 0xc0101282, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000001000000000000000000010000000000a928ffffffffffff0500000000000000013d0801000000000000000000000000000000829de9c48500"/80]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0xcc0, 0x1, 0x820e, 0x0, 0x1000, 0x2, 0xfffffffe, 0x7}, 0x20) 01:54:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_freezer_state(r2, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) 01:54:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000000c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fsmount(r4, 0x0, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) fsync(r8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r9, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12008000}, 0xc, &(0x7f0000000040)={&(0x7f0000001480)={0x124c, 0xf, 0xa, 0x401, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xa}, [@nested={0x1010, 0x43, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @fd=r0}, @typed={0x1004, 0x61, 0x0, 0x0, @binary="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"}]}, @nested={0x145, 0x54, 0x0, 0x1, [@generic="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", @generic="672bccd26458fad6088dda0e19", @typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, [], 0x1}}]}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0xff}, @nested={0x85, 0x2c, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @u32=0x4}, @generic="e31ba955e602776e2d702d91ab9256786b461f4896f0f4679147565beaa93157a6b3a05badb81a6499b8dd68c9b7fbf445f9a3a1f68306e2f0f1966fa07a451f901a6dfde44715e1afd2ee3694eb6b838d0165ba7cd0917e540643cf1224e1fc90f56e5db3467507cc70422dedd3ea67dc6d71970709290f67"]}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0xfff}, @nested={0x4, 0x1b}, @nested={0x3b, 0x6c, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @uid=r9}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@private2}, @generic="676cf7f6345b9a87d02d4e", @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x32, 0x0, 0x0, @fd=r0}]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x24048044}, 0x40) 01:54:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 843.343860][ T3421] usb 1-1: new high-speed USB device number 84 using dummy_hcd 01:54:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x4, 0x0, 0x8, 0x7}) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x8000) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000000)=0x7ff) [ 843.613877][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 843.734201][ T3421] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 843.734246][ T3421] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 843.734268][ T3421] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 843.734290][ T3421] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 843.734315][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 843.924139][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.924161][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.924176][ T3421] usb 1-1: Product: syz [ 843.924192][ T3421] usb 1-1: Manufacturer: syz [ 843.924207][ T3421] usb 1-1: SerialNumber: syz [ 843.950099][T26298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 843.964959][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 844.183185][ T3421] usb 1-1: USB disconnect, device number 84 01:54:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x400000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:33 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:54:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x556d81, 0x0) r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x8000, 0x8, 0x14}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={r3, 0x80000, r0}) ioctl$TUNSETLINK(r1, 0x400454cd, 0xfdeb) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000000}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x42200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, 0x0, 0x8000) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x34, 0x1, "191d9df1c39e4e047a874fa3e66e56d601e5a0c9905827814c256817f8dfd54bfcfba3147d6280d1e26c9b97"}, &(0x7f0000000080), 0x400) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fadvise64(r2, 0x1000, 0x0, 0x3) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x400, 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="f77bc37b00324d1b8e8fd395b7ac", 0xe, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x6000, "80c453", 0x2, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2, 0x0) 01:54:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x401, 0x100, 0x0, 0x1, 0x100008, 0x17f, 0x4001000}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 01:54:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = epoll_create1(0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x40000000}) 01:54:33 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x500000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 845.283937][ T2735] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 845.553832][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 845.674268][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 845.855254][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 845.877912][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.909449][ T2735] usb 1-1: Product: syz [ 845.920863][ T2735] usb 1-1: Manufacturer: syz [ 845.939293][ T2735] usb 1-1: SerialNumber: syz [ 845.995987][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 846.200746][ T2735] usb 1-1: USB disconnect, device number 85 [ 847.003845][ T3421] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 847.273844][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 847.394156][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 847.574108][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.583176][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.593272][ T3421] usb 1-1: Product: syz [ 847.599346][ T3421] usb 1-1: Manufacturer: syz [ 847.604782][ T3421] usb 1-1: SerialNumber: syz [ 847.655107][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:36 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 01:54:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:36 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:36 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x600000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000000)={0xa}) 01:54:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0xc0002) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f00000001c0)) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) alarm(0x6ae) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x5, 0x40002) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 847.810525][ T3421] usb 1-1: USB disconnect, device number 86 01:54:36 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r0, 0x1000000) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:54:36 executing program 3: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:36 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r0, 0x1000000) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:54:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x2, 0x2) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x323, 0x1, 0x2, 0x0, 0x5, @random="080341fc0575"}, 0x10) 01:54:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:36 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'ip6gre0\x00', {0x800}, 0x8}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 848.338830][ T3421] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 848.580182][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 848.704184][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 848.904245][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.915470][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.923557][ T3421] usb 1-1: Product: syz [ 848.929903][ T3421] usb 1-1: Manufacturer: syz [ 848.935348][ T3421] usb 1-1: SerialNumber: syz [ 848.985109][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 849.194614][ T3421] usb 1-1: USB disconnect, device number 87 01:54:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 01:54:38 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r0, 0x1000000) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:54:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0xa16f) 01:54:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:38 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x700000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:38 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000040)={0x5, 0xffffffff}) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, 0x0, 0x8000) ioctl$SNDCTL_SEQ_CTRLRATE(r5, 0xc0045103, &(0x7f0000000000)=0x2) r6 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, 0x0, 0x8000) close(r6) 01:54:38 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x0, 0x420800) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, &(0x7f0000000140)=""/93, 0x5d}, 0x22) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000280)={0x5, 0x800}) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000240)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={r7}) 01:54:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:38 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0x5, 0x80, 0x4, 0x4, 0x81, 0xcc5], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x6, 0xa7e0, 0xe0e0e0e0}) 01:54:38 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x105000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 850.203972][ T2735] usb 1-1: new high-speed USB device number 88 using dummy_hcd 01:54:38 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(0x0, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 850.443962][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 850.564187][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 850.734224][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.748505][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.757395][ T2735] usb 1-1: Product: syz [ 850.761933][ T2735] usb 1-1: Manufacturer: syz [ 850.777914][ T2735] usb 1-1: SerialNumber: syz [ 850.824913][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 851.052598][ T3421] usb 1-1: USB disconnect, device number 88 01:54:39 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x800000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 851.843765][T24143] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 852.083760][T24143] usb 1-1: Using ep0 maxpacket: 16 [ 852.203914][T24143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 852.373912][T24143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.384094][T24143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.392114][T24143] usb 1-1: Product: syz [ 852.396747][T24143] usb 1-1: Manufacturer: syz [ 852.401350][T24143] usb 1-1: SerialNumber: syz [ 852.445093][T24143] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 852.650019][T24143] usb 1-1: USB disconnect, device number 89 01:54:41 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x2) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$capi20_data(r4, &(0x7f0000000200)={{0x10, 0x4, 0x2, 0x83, 0x4, 0x8}, 0x80, "db60a4ed32fc8bade45effda0d2a86d4558eb55702107276ba4f59c00a649c5eea634e124177a24205ccea2bf2b70280667ce9a20e57e19dfee5b511a614e40d1602514e78cf708fe354dc6968dcf23eb351cbbeab5adc9eb52e9204b015f405ca9f521413fd38c2a1f2a1518a2d677068d9655220783400c6c627ee5ded5e29"}, 0x92) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000000)={{0x4, 0x8}, 'port1\x00', 0x8, 0x4, 0x80000000, 0xffffdac7, 0x7, 0x3, 0x7, 0x0, 0x6, 0x6}) r5 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) 01:54:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(0x0, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x40000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r3, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:41 executing program 3: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7db700e100000000f56810"], 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x350, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xca}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60662799}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x12d8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x53e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9f, 0x3, "b3c982f93fd990d5254c2c1593c7c34dfcff5dbe3d0bd290e2a4e4b56437a7d76413a8918aab8f87967f30c7035b69076f989856327bd1e1b342398fdb1a037bda8ece24acbdd2224ddeab47cdb30667c52231418f5030ff2289feec408c13cdb38ed4a26595b6dcb58eec0bb62d466253c50e2dd5958f7b87b303e7dd3f00361146dbbb49e4cb8a1c49417af6f2597ece4a038f1f36a2c16d72de"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "0322999b74062efc7230889e3818d3d0be29688cdff2b2fcf601e7d6ec"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x64, 0x3, "c555d9517ca576a4821ba5b2d15ba8d9f506d1c73cba9cd75e40404144df8c6705b95d3c44201419d24575d68adf1eea6b7af03db3dc3ffe3f45c0f7810955cf634445ff70c246de38273f8080a80926fa43a132019de6f63abf0cd19f02c3bc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x90}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "19d86db3938ea64c314299bf1c503a075e8e2775b7af7d90842dc31b4fe4162110c1"}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2bd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7c}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x10180, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7fff, 0x100, 0x5, 0xac, 0x5], 0x5, 0xb4d1ec4cdca7e12a}) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:41 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0xfeffffff00000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(0x0, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fffffff, 0x218242) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:41 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000000)='/dev/dri/card#\x00', 0xf) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 01:54:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 853.173850][ T3424] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 853.433877][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 853.564060][ T3424] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 853.734096][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 853.743244][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.752347][ T3424] usb 1-1: Product: syz [ 853.757701][ T3424] usb 1-1: Manufacturer: syz [ 853.762304][ T3424] usb 1-1: SerialNumber: syz [ 853.804717][ T3424] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 854.010917][ T8234] usb 1-1: USB disconnect, device number 90 01:54:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000162505a1a440000102030109023b00010100000005240000000d240f010000000000000000000905820200000000000905030200"/77], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x401080, 0x0) 01:54:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x88400, 0x0) read$char_usb(r1, &(0x7f0000000140)=""/133, 0x85) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x55800, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000280)={0x9, 0x101, 0x4, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)={0x173c000, 0x4, 0x80000000, 0xfffffbff, 0x4, 0x7fffffff}) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000200)={0xd, 0x8001}) 01:54:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x3d1a42) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={0xd320, 0xaff, 0x3, 0x6, [], [], [], 0xaa, 0x3, 0x1, 0xfffffffb, "c030e4b206867dd2f25a8af90be090bd"}) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:43 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0xff00000000000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:43 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x4000) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 01:54:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) connect$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x1}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r4, &(0x7f0000000200)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x180000) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 01:54:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:43 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0xff}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r4, &(0x7f00000001c0), 0x0, 0x40010) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="0000020000000000"], 0x20}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 01:54:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) [ 855.154260][ T8234] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 855.433848][ T8234] usb 1-1: device descriptor read/64, error 18 [ 855.823861][ T8234] usb 1-1: device descriptor read/64, error 18 [ 856.107880][ T8234] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 856.347597][ T0] NOHZ: local_softirq_pending 08 [ 856.403884][ T8234] usb 1-1: device descriptor read/64, error 18 [ 856.793792][ T8234] usb 1-1: device descriptor read/64, error 18 [ 856.914761][ T8234] usb usb1-port1: attempt power cycle 01:54:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) clone3(&(0x7f0000001400)={0x8020000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x23}, &(0x7f0000000340)=""/4096, 0x1000, &(0x7f0000001340)=""/170, &(0x7f0000000280)=[0x0], 0x1}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = dup(r3) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001500)={'ip6_vti0\x00', &(0x7f0000001480)={'ip6_vti0\x00', 0x0, 0x2f, 0x1f, 0x3f, 0x342, 0x0, @private0={0xfc, 0x0, [], 0x6}, @mcast2, 0x80, 0x80, 0x7, 0x427}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000015c0)={'sit0\x00', &(0x7f0000001540)={'ip6gre0\x00', r6, 0x4, 0xdf, 0x3f, 0x4, 0x18, @dev={0xfe, 0x80, [], 0x13}, @ipv4={[], [], @loopback}, 0x7828, 0x20, 0x2, 0x1}}) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r5, 0xb35, 0x9, r7) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) 01:54:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0xffffffff00000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="4ba304d499a4d99960b8e45c38d1a07198ee441502c0c4cd15e442213589066db231a59bff0c979dcc12868df65867eb195ab4bd5378a0c35014b3d233a2b0a8c820c2f9cde1dc6e1ba82c3946d1f149607a1edb7c2f5396e3df13714a17fa7f25704d2acf6358168ffd7898cf0d1850", 0x70}, {&(0x7f00000000c0)="83", 0x1}], 0x2, 0x0, 0x0, 0x48480}, 0x8040) dup(r1) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000280)={0x3, 0xfff}) 01:54:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x7}) [ 857.633926][ T8234] usb 1-1: new high-speed USB device number 93 using dummy_hcd 01:54:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@remote, @null, @null, @default, @rose, @bcast]}, &(0x7f0000000040)=0x40, 0x0) 01:54:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x3ff) 01:54:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) syz_usb_connect$cdc_ncm(0x0, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0xf7, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c12275e9d7"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x2b}, [@mbim={0xc, 0x24, 0x1b, 0x20, 0x6, 0x80, 0x20, 0xfff, 0x13}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x5, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x4, 0x9, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x2, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x7, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x3f, 0x1}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xff, 0x6, 0x78, 0x8, 0x7}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x1, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "d94e7839e2955231c3fa66a1343da4aa"}]}, 0x8, [{0x84, &(0x7f0000000200)=@string={0x84, 0x3, "e299f795b117045e021c7532745f9cbbb82e3b6537f85d1f97d5d6a67d4824c0817db2aa4a38678814f4ad6beedfd6e2c6ab232b5058ad138b79ceb17221910975c26e3893d3bb683827f4a41cd963b50a4b4145d901409c8dbfb36b5f688c95c5626cccc42d59a6507a7ecaec67c02cd5aa42f70da785d48565051c3910e4b7b986"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41f}}, {0xc1, &(0x7f0000000300)=@string={0xc1, 0x3, "ee83cfef1b6330668c0f3913d26568c7480127e5153b0d97b47acd70424ceea1cc61fd82c8e90020fd2ab11543420173933172a9aa006cfc613cdc2e4f04b6755e606c5ea76101e0148ee2e2123a40f2a6c94c3b5b5ca7133bfabcded7ee87d4312c56e745ba206fb068eddd1e42c789c70fb82d9c6cd3342f5ec74e54cc85eab475c898e60625823b62e3ee45b0d8ca2ad76cd2d938486af7f4aaea2fb84f63a1d10c5adc71ec2beb26b5a78fb6b43fcbc4e4b2b9a9e17fb7f36b3c883936"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}, {0x82, &(0x7f0000000480)=@string={0x82, 0x3, "d3468f22c12d39b7cf87d873b9124c085dd137696f4a217b8b0ce1cf9c2acfa28f3a5940f0b0f465899048905c0ec89b424c9debf1798cec2413c72d7781f8c4e43dcc6cad17ee02f663ed57c477df10cd0cafac46e78b2464a47da0a7f446d4c5b9a6828f1bbc8143937b1fb8612d0c418835bd87475d15ba3d08861e8166bc"}}, {0xed, &(0x7f0000000540)=@string={0xed, 0x3, "d0b3d14fff5d20a5c476204912e621f7caaa2f903272d7dfcb2299a690113d5a2f4eb5fc08d88526453b90db81dfdfa21efbcc4ebbcc2472ed15c676e4a8abee1eeddd3914f4506df86f476d5f0f0037e39bba98cfa8396107c0f5503ba7383bb14b3aa425094bf9c179afa56df921576429ead37574661f2131cc2368326bac41f42023aae04d0d8e8053a9cca3afb99603df3418ac98f436c4f6529538c07d63f78d696ae3c396474dfaf3e7e86dcb697ea5d8aa2251061e7c002f15070523186e3008fe777d37c3c33e9ee57e69f96ccb5a615ff0821d27e4acd5fa6556fcc0655611cc65aa7652363e"}}]}) 01:54:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 858.113932][ T8234] usb 1-1: device not accepting address 93, error -71 [ 858.480105][T24143] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 858.495198][ T8234] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 858.584243][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 858.704178][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 858.723930][T24143] usb 4-1: Using ep0 maxpacket: 8 [ 858.843918][T24143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 858.872275][T24143] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 858.894228][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.903327][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.925572][T24143] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 858.940893][ T8234] usb 1-1: Product: syz [ 858.958381][ T8234] usb 1-1: Manufacturer: syz [ 858.968852][ T8234] usb 1-1: SerialNumber: syz [ 859.014956][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 859.124447][T24143] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 859.137841][T24143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.146424][T24143] usb 4-1: Product: П [ 859.150611][T24143] usb 4-1: Manufacturer:  [ 859.155741][T24143] usb 4-1: SerialNumber: 菮挛昰ྌጹ旒읨ň㬕霍窴烍䱂ꇮ懌苽 ⫽ᖱ䉃猁㆓ꥲªﱬ㱡⻜я疶恞幬憧踔㨒즦㭌屛Ꭷ層풇ⰱ멅漠械䈞觇࿇ⶸ沜㓓帯仇챔疴飈ۦ舥戻끅쫘휪퉬㣙橈렯捏톡娌燜⯬⛫ꞵ뚏㾴쓋다ꦹ翡㱫㦈 [ 859.241677][ T3424] usb 1-1: USB disconnect, device number 94 [ 859.503976][T24143] cdc_ncm 4-1:1.0: bind() failure [ 859.511393][T24143] cdc_ncm 4-1:1.1: bind() failure [ 859.519538][T24143] usb 4-1: USB disconnect, device number 2 01:54:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={r2, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x22}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x6000, 0x0) 01:54:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:48 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:udev_rules_t:s0\x00', 0x22, 0x5) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000180)={0x4}, 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0x9, 0xffff322e, 0x7, 0xfffffff9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r7, 0x0, 0x100018) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r0) 01:54:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) shutdown(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000000000), 0x400000000000152, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:54:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffff9) recvfrom$inet6(r2, &(0x7f0000000140)=""/221, 0xdd, 0x40002100, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, 0x1c) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDISABIO(r5, 0x4b37) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x80, 0x2}, 0xe) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000240)="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") 01:54:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) [ 860.224310][ T8234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 860.443967][T24143] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 860.479068][ T8234] usb 4-1: Using ep0 maxpacket: 8 [ 860.605688][ T8234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 860.635904][ T8234] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 860.666462][ T8234] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 860.693905][T24143] usb 1-1: Using ep0 maxpacket: 16 [ 860.814268][T24143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 860.844706][ T8234] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.858909][ T8234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.876539][ T8234] usb 4-1: Product: П [ 860.886510][ T8234] usb 4-1: Manufacturer:  [ 860.896940][ T8234] usb 4-1: SerialNumber: 菮挛昰ྌጹ旒읨ň㬕霍窴烍䱂ꇮ懌苽 ⫽ᖱ䉃猁㆓ꥲªﱬ㱡⻜я疶恞幬憧踔㨒즦㭌屛Ꭷ層풇ⰱ멅漠械䈞觇࿇ⶸ沜㓓帯仇챔疴飈ۦ舥戻끅쫘휪퉬㣙橈렯捏톡娌燜⯬⛫ꞵ뚏㾴쓋다ꦹ翡㱫㦈 [ 861.004356][T24143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.028374][T24143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.073384][T24143] usb 1-1: Product: syz [ 861.090823][T24143] usb 1-1: Manufacturer: syz [ 861.103542][T24143] usb 1-1: SerialNumber: syz [ 861.165141][T24143] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 861.267173][ T8234] cdc_ncm 4-1:1.0: bind() failure [ 861.283133][ T8234] cdc_ncm 4-1:1.1: bind() failure 01:54:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x100, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10000000004, 0xa00) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200400, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0xfe, 0x0, 0x8}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x6, 0x4) [ 861.316191][ T8234] usb 4-1: USB disconnect, device number 3 01:54:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:50 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x2}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 862.174887][ T3424] usb 1-1: USB disconnect, device number 95 [ 863.083824][ T8234] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 863.339733][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 863.465143][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 863.551708][ T8234] usb 1-1: string descriptor 0 read error: -71 [ 863.569727][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 01:54:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:54:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:52 executing program 3: getpid() r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x2, 0x82402) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x20}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0x86c, 0x1f}) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080)={r3, 0x68}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000000c0)=0x7) 01:54:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:52 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x3}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 863.609800][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.673817][ T8234] usb 1-1: can't set config #1, error -71 [ 863.703122][ T8234] usb 1-1: USB disconnect, device number 96 01:54:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000040)={0x6b, 0xfffffffd, 0x0, 0x80000000, 0x9f6a, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:54:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7ffc, 0x13bc43) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0xfffffffe, 0x8, 0x7}) [ 864.153798][ T8234] usb 1-1: new high-speed USB device number 97 using dummy_hcd 01:54:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:52 executing program 2: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8003, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8094}, 0x20040000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000fcdbdf250e000000080031000010000008000a00090031a9aee1c5d60000"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x850) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}}, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x305002) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000003c0)={0xe0b, 0x47, 0x1, 'queue1\x00', 0x6ffe}) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000000)={0xa6, 0x0, 0x0, 0x1}) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000080)={r6, 0x3}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000340)={'nr0\x00', @ifru_flags}}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x121000) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000200)={0x1, 0x1ff}) [ 864.403807][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 864.523956][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 864.714148][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.723223][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.753716][ T8234] usb 1-1: Product: syz [ 864.757929][ T8234] usb 1-1: Manufacturer: syz [ 864.762569][ T8234] usb 1-1: SerialNumber: syz [ 864.825087][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 865.032716][ T3424] usb 1-1: USB disconnect, device number 97 [ 865.803766][ T8234] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 866.053800][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 866.173918][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 866.344058][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.353802][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.362126][ T8234] usb 1-1: Product: syz [ 866.367825][ T8234] usb 1-1: Manufacturer: syz [ 866.372418][ T8234] usb 1-1: SerialNumber: syz [ 866.414716][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 01:54:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/192) 01:54:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$fb(r2, &(0x7f0000000080)=""/98, 0x62) [ 866.616870][ T8234] usb 1-1: USB disconnect, device number 98 01:54:55 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x4}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:54:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCXONC(r5, 0x540a, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000340)={0x9, @pix={0x9, 0xef, 0x47425247, 0x2, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x3, 0x0, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004048}, 0x4000) close(r0) 01:54:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:54:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x80, 0x8042) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0xfffffffe, 0x2, 0x3, 0x10000000}) 01:54:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:54:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x20, 0x328800) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100) 01:54:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) [ 867.123827][ T3421] usb 1-1: new high-speed USB device number 99 using dummy_hcd 01:54:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x5, 0x0, 0x8, 0x0, 0x9}) 01:54:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:54:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r3 = fcntl$getown(r2, 0x9) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r3) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r5, 0x2201, 0x7fffffffefff) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x8, &(0x7f0000000000)=[{0x1, 0x4, 0x8, 0x8000}, {0x5, 0x7, 0x200, 0xfff}, {0x3e, 0x7fff, 0x2, 0x3}, {0x7, 0x6, 0xe2a, 0x9}, {0x4, 0x80, 0x41, 0x1ff}, {0x43, 0x9, 0x2907, 0x2}, {0x6, 0x1, 0x3, 0x9}, {0xccd, 0x5, 0x0, 0x5}]}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080)=0x40, 0x1) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x4}) connect$rds(r7, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) [ 867.393766][ T3421] usb 1-1: Using ep0 maxpacket: 16 [ 867.544375][ T3421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:54:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x40, 0x21, 0xf7, {0xf7, 0x6, "9cb87db9807ae78eab9d260f10c2a3768361a3e63908f82e72436c8c33ed705fb93014d9f3b769bca9d2ef723e11a2d762434af588424cc046b82172032aacdf06ad29283eae6514ad248a4e79c7f1ab56390cfe2683f39b65ecc19f5fc0a775f68e70a14bd59118cc9aa44f5f69bbb5892a3539f93b336e10532fce192b6595d05f97729d4b4a80c533aa6953df6c3a3c880d239d702ca0bb01683fce71641bc827b3f5232191ddf566e2ce9ef4bc7e8d123e504cd221f68ab7ff6399d9f15ef816a3207d09d39392a823242bd1b0d30489b8e6191c12dd619b40c53d5592497da1f9cf1f7011f4fc8b9a7e4f704aa31ca3293d73"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x0, 0xc, 0x83, "05f04b5654e8a475568cf1d86ca694591c4a12b7d035537e3d506e3d0fd15287f68505da5afcdc3322a405869b00e8b93eb3d28459ff99a63c32f78705004b0277524d0b8cffab2564bf4fa9217ef2eeb14b7bf8a55f0c1d6b49069a390f4b3a4c46b924ae2ad353961f5ed52f59a1a15ebc9a9975c638620f7fecbe5c49a02e6a548b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x14, {0x12, "6d859cf5eae847407f769dcb736162958e2d"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x8}}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) rt_sigsuspend(&(0x7f0000000000), 0x8) 01:54:56 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x5}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 867.764074][ T3421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.773151][ T3421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.794435][ T3421] usb 1-1: Product: syz [ 867.798809][ T3421] usb 1-1: Manufacturer: syz [ 867.803801][ T3421] usb 1-1: SerialNumber: syz [ 867.872764][ T3421] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 867.973885][ T3422] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 868.080404][ T8234] usb 1-1: USB disconnect, device number 99 [ 868.253790][ T3422] usb 3-1: device descriptor read/64, error 18 [ 868.674295][ T3422] usb 3-1: device descriptor read/64, error 18 [ 868.853817][ T3424] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 868.943744][ T3422] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 869.093748][ T3424] usb 1-1: Using ep0 maxpacket: 16 [ 869.213837][ T3422] usb 3-1: device descriptor read/64, error 18 [ 869.220130][ T3424] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 869.384372][ T3424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.393541][ T3424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.402817][ T3424] usb 1-1: Product: syz [ 869.407481][ T3424] usb 1-1: Manufacturer: syz [ 869.412161][ T3424] usb 1-1: SerialNumber: syz [ 869.455045][ T3424] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 869.603776][ T3422] usb 3-1: device descriptor read/64, error 18 01:54:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='\\vnet0?\'`/{,vi.et1eb0u_er\x00f\xcf\x99`\r\xd6\xa6\xaaX&\x87\"\xc6\xa2AU\x15~S\xb3\xaf\xa8e)\x91\x1e\x95\x12\x0f\f\xcc?\xe6IhW4\xa9_\xa8\x10]\x844\xac\xda}?M\xcd\xab&h\x7f\x8f\xae\xca\x0fe:B\x1d\x80\xbdg\xa6\xf1s\'\'Y\x98P\x96\x87#\xea\x8a\xd2\x13\xf5\xf4\x8e\xb5\xf6\xcb\x96\x87\x01\xe3o\x01n\v\x9b\x90\x11\xa0\xe8\xc1\x01\xa3V\xe4\x1d\xca9\xaa\xb5\x8f\xb9\xec\x97\xac(t\x965C\xe3\xf9_\xbf{y0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201a440000102030109023b00010100000009049be477c200000002060000052406000005240008070d240f0100000000ea000800000905820200000000000905031200"/77], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:54:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 01:54:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:58 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) move_mount(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x24) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x800, 0x100, 0x2, 0x8, 0x3a}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@null, @bcast, 0x87, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 01:54:58 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x6}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 869.661635][ T8234] usb 1-1: USB disconnect, device number 100 [ 869.724085][ T3422] usb usb3-port1: attempt power cycle 01:54:58 executing program 3: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0xd7, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)='veth1_to_hsr\x00', 0x4, 0x8, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x800, 0xfffffffe, 0x0, 0x3, 0x8, 0x4, 0x1, 0x7, 0xffffffc0, 0x6, 0x2, 0x1, 0xffffff00, 0x9, 0x1, 0x11, {0x9, 0x8}, 0x4}}) 01:54:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff01, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:54:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff7f, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 870.237958][ T8234] usb 1-1: new full-speed USB device number 101 using dummy_hcd 01:54:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) [ 870.433856][ T3422] usb 3-1: new high-speed USB device number 14 using dummy_hcd 01:54:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 870.544486][ T8234] usb 1-1: device descriptor read/64, error 18 [ 870.603853][ T3422] usb 3-1: device descriptor read/8, error -61 01:54:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000140)={0xb0b, 0xfaa, 0x0, 'queue1\x00', 0x1000}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x38d}) 01:54:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000080)={0x4, 0xfbb8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000000)=0x1) [ 870.813982][ T3422] usb 3-1: device descriptor read/8, error -71 [ 870.933754][ T8234] usb 1-1: device descriptor read/64, error 18 [ 871.214011][ T8234] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 871.510110][ T8234] usb 1-1: device descriptor read/64, error 18 [ 871.908575][ T8234] usb 1-1: device descriptor read/64, error 18 [ 872.034929][ T8234] usb usb1-port1: attempt power cycle [ 872.759622][ T8234] usb 1-1: new full-speed USB device number 103 using dummy_hcd 01:55:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 01:55:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:01 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x7}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 872.883797][ T8234] usb 1-1: device descriptor read/8, error -71 01:55:01 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ftruncate(r2, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)={r5}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000180)={r5, 0x1ff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r6, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x7}, &(0x7f0000000280)=0x90) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, &(0x7f0000000000)=""/68, &(0x7f0000000340)=""/168, &(0x7f0000000080)=""/40, 0x5000}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x8) close(r0) [ 873.093856][ T8234] usb 1-1: device descriptor read/8, error -71 01:55:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 873.583773][ T8234] usb 1-1: new high-speed USB device number 104 using dummy_hcd 01:55:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) [ 873.684734][ T8234] usb 1-1: Using ep0 maxpacket: 16 01:55:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 873.804198][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 873.997295][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.997317][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.997331][ T8234] usb 1-1: Product: syz [ 873.997344][ T8234] usb 1-1: Manufacturer: syz [ 873.997368][ T8234] usb 1-1: SerialNumber: syz [ 874.037943][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 874.274439][ T8234] usb 1-1: USB disconnect, device number 104 01:55:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:02 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x8}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:03 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) 01:55:03 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x78, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) 01:55:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x5, 0x0, 0x2, 0x0, 0x8}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400200, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 01:55:03 executing program 3: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="7db700e100000000f56810"], 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)={0x3a0, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f55bac6b1a7744cda3c7b0ddc8f9bbb77edb9fd4085da45e"}}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "2cb5886e2dc3ee440058653fbf37b7c7a68e4a3615e2f063c818ddadc03be2fa785ad60d0cec9929e2ba560c3c01fffa3139962b779f47a57d8a891c1e211f7017b6ec9df39ca96170b4e26d7e75d149bde42f4665e23ddc6c3cb19608ae0551a3d72e06cfc974416afcd0a6a6879ca17e2a7984f6dcf48a09b61fa449ae9cb038ee00256a2a065411f6ca67c54f2e85be2d099dc05aa536e58ff6b2a5449c502411d3"}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "f5291c048428f971338dd366ed689e12fcb497a556f15d4dc876a1a6150ae554647c1b4685fc154e7b71abb837e2b0d0d904e2c2426153"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe47}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x73, 0x3, "9fbb82314efcceeb9a73365f2323bb8061fb1b87470cf9ee9d4c06960ae9f9df60b7aeb30409fa8e9882a148c76e61b9074349968ed0beba59b0df443699a6bf678412aee78824b0a734c85d9c673554b4ec9d29b76606c99255d049ac820f1675d8cfde337b6e8ba39464fde4e36f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1b, 0x3, "bb7900335dc4343c4414f649f751bfddac62abb9fd3024"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x613}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @private2, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3d}}, 0xfc8c}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x384b9866}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb86}, @TIPC_NLA_PROP_TOL={0x4, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40004}, 0x20000801) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getpeername$l2tp6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x20) r8 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000040)={0x1, @capture={0x1000, 0x0, {0x1, 0x80000000}, 0xffff, 0x400}}) [ 875.073693][ T8234] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 875.323706][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 875.454177][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 875.650230][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.670024][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.700656][ T8234] usb 1-1: Product: syz [ 875.713667][ T8234] usb 1-1: Manufacturer: syz [ 875.718303][ T8234] usb 1-1: SerialNumber: syz [ 875.774820][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 01:55:04 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) 01:55:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:04 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x300}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x200000, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10000, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioperm(0x100000000000001, 0x7ff, 0x761c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$getflags(r3, 0xb) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20000000, 0x8, 0x0, 0x200}) r4 = getpid() sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2020500}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="08ff0000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ebdbdf250500000005000d00ff00000014001f00fe8000000000000000000000000000180600030008000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000880}, 0x4084051) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x1, {{0x8932, 0x0, 0x0, r4}}}, 0x28) 01:55:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x6, 0xf, 0x1f}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x9, r3, 0x1, 0x401}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{}, {}]}) 01:55:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109023b000101000000090400000002068000052406000005240000000d240f01000000000000000000090582021df89969357500000000000905030200000000000532ab09b3871fe2dd7b65a85b14adea522c0887816689394a2adca6db562679439e373eefa8b01781757b119e1b3b5a4aecc5ce78828dbd0b4b72e05e050f79a1cbeb8b67e182c05c38c13c3d3f133a2ce2c03f24417e296412d644369614bc28694db683620a5b6ecb6b580a29fd7c94f5869f462df1b0ab89a95560adec79a7b954d4e251e9b6"], 0x0) mbind(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x2, &(0x7f0000000080)=0x5, 0xffff, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) close(r0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000040)=0x20c3, 0x4) [ 875.986178][ T8234] usb 1-1: USB disconnect, device number 105 01:55:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={r2, 0x25}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000000)={r2, &(0x7f0000000140)=""/242}) 01:55:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1001, 0x8000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4081, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x3, 0x4, 0x1, 0x0, 0x80, 0x8, 0x0, 0xb6, 0x5f, 0xff, 0x6, 0x9, 0x0, 0x80000001, 0x9, 0xf9, 0x9, 0x1, 0x7e, [], 0x2, 0x7}) 01:55:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 876.526283][ T8234] usb 1-1: new high-speed USB device number 106 using dummy_hcd 01:55:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80d) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:55:05 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0xff}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r4, &(0x7f00000001c0), 0x0, 0x40010) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r3, @ANYBLOB="0000020000000000"], 0x20}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 876.773888][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 876.904191][ T8234] usb 1-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 876.904229][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 01:55:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xffffffff80000001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x80000000000, 0xf, 0x1001f, 0xeeeeeeee}) 01:55:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 877.074768][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 877.084458][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.138636][ T8234] usb 1-1: Product: syz [ 877.160828][ T8234] usb 1-1: Manufacturer: syz [ 877.180518][ T8234] usb 1-1: SerialNumber: syz 01:55:05 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x500}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 877.214186][T27288] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 877.450990][T22173] usb 1-1: USB disconnect, device number 106 [ 878.270114][T22173] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 878.523712][T22173] usb 1-1: Using ep0 maxpacket: 16 01:55:07 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x9a800) r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000040)=0xfffffffb, 0x4) 01:55:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 878.644125][T22173] usb 1-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 878.689583][T22173] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 878.914020][T22173] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 878.914041][T22173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.914056][T22173] usb 1-1: Product: syz [ 878.914070][T22173] usb 1-1: Manufacturer: syz [ 878.914084][T22173] usb 1-1: SerialNumber: syz [ 878.934724][T27354] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 879.143275][ T8234] usb 1-1: USB disconnect, device number 107 01:55:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:07 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:55:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x111100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:55:07 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x600}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8094}, 0x20040000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000427bd7000fcdbdf250e000000080031000010000008000a00090031a9aee1c5d60000"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x850) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x500, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a040000102030109023b000101000000090400000002040000052406000005240000000d240f01000000000000000000090582020000000000090503020000000000"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:55:07 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:55:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f00000001c0)={'dummy0\x00', 0x5}) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0xb, &(0x7f0000000440)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xebe2}, @ldst={0x3, 0x1, 0x0, 0x6, 0x9, 0x0, 0xffffffffffffffff}, @generic={0x8, 0x0, 0x1, 0x494, 0x1000}, @ldst={0x2, 0x0, 0x3, 0x1, 0x9, 0x2, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0x8, 0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0x8, 0x7, 0xffffffffffffffc0, 0xfffffffffffffffa}, @alu={0x7, 0x1, 0x0, 0x9, 0xa, 0x40, 0x1}, @ldst={0x597a8533bece7721, 0x2, 0x1, 0x6, 0xa, 0x2, 0xfffffffffffffffc}], &(0x7f00000004c0)='GPL\x00', 0x3ff, 0x25, &(0x7f0000000500)=""/37, 0x41000, 0x2, [], 0x0, 0x4, r4, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xf, 0x6, 0x80}, 0x10}, 0x78) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r5, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc4}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r5, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x23}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x20009800) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:55:08 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0xaf}) 01:55:08 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:55:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x50000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:08 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:55:08 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000009fc0)={'vxcan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f000000a080)={'syztnl1\x00', &(0x7f000000a000)={'syztnl1\x00', r2, 0x4, 0x7, 0x3f, 0x7fffffff, 0x17, @rand_addr=' \x01\x00', @empty, 0x7, 0x0, 0x4b, 0x4}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000004000000000000920000", @ANYRES32=r6, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRES32=r7], 0x1ec}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000a200)={&(0x7f000000a0c0)={0x11c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4008800) r10 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 879.823704][ T8234] usb 1-1: new high-speed USB device number 108 using dummy_hcd 01:55:08 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:55:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3ad04186f8e1679c0651510e7c307b118d7cefcfc9e800b023d7eada793a158e766cb7cd6fcf6e618da25f1231f0f01b5fbf0cafe055", @ANYRES16=r2, @ANYBLOB="20002bbd7000fedbdf250300000008000200020000000800020002000000080002000200000008000100010000000800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) 01:55:08 executing program 5: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) [ 880.084320][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 880.203995][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 880.418374][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a0a1, bcdDevice= 0.40 [ 880.443779][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.451827][ T8234] usb 1-1: Product: syz [ 880.473655][ T8234] usb 1-1: Manufacturer: syz [ 880.480114][ T8234] usb 1-1: SerialNumber: syz 01:55:09 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x700}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 880.757501][T22173] usb 1-1: USB disconnect, device number 108 [ 881.533699][ T3422] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 881.773678][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 881.893733][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 882.063852][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a0a1, bcdDevice= 0.40 [ 882.073722][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.083058][ T3422] usb 1-1: Product: syz [ 882.089194][ T3422] usb 1-1: Manufacturer: syz [ 882.100632][ T3422] usb 1-1: SerialNumber: syz 01:55:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r4, 0x23f, 0x0, 0x0, {{}, {0x0, 0x4}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) 01:55:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'gre0\x00', 0xc00}) 01:55:10 executing program 5: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:55:10 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0xff00}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 882.352697][ T3422] usb 1-1: USB disconnect, device number 109 01:55:10 executing program 0: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x12) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r5, 0x1}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r0) 01:55:11 executing program 5: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:55:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 01:55:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0x32, 0x80, 0xfff}, {0x7ff, 0x1f, 0xd8, 0x1}, {0xaff, 0x5, 0x32, 0x1}, {0x0, 0x81, 0x4, 0x2}]}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:55:11 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:55:11 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:55:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:55:11 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:55:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff010000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0xffffffff, @mcast2, 0x1f}, {0xa, 0x4e21, 0x7fff, @mcast2, 0x80000000}, 0xf39b, [0x1, 0x9, 0x9, 0x0, 0xe47, 0x0, 0x5, 0xfff]}, 0x5c) 01:55:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x2000000, 0x612, 0x0, 0x0, 0x8}) [ 882.953780][ T3422] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 883.213691][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 883.337481][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:55:12 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x1000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 883.524192][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.541950][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.561786][ T3422] usb 1-1: Product: syz [ 883.572057][ T3422] usb 1-1: Manufacturer: syz [ 883.583501][ T3422] usb 1-1: SerialNumber: syz [ 883.634877][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 883.846100][ T3424] usb 1-1: USB disconnect, device number 110 [ 884.653723][T24143] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 884.913635][T24143] usb 1-1: Using ep0 maxpacket: 16 [ 885.043887][T24143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 885.223940][T24143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 885.233232][T24143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.242295][T24143] usb 1-1: Product: syz [ 885.247290][T24143] usb 1-1: Manufacturer: syz [ 885.251900][T24143] usb 1-1: SerialNumber: syz [ 885.294867][T24143] cdc_ether: probe of 1-1:1.0 failed with error -22 01:55:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$usbmon(r4, &(0x7f0000000340)=""/237, 0xed) 01:55:14 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x2000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:14 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) 01:55:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:55:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff7f0000, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:14 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='$@/-(,\x00', &(0x7f0000000200)='\xff\xa2', &(0x7f0000000240)='/dev/dri/card#\x00'], &(0x7f0000000300), 0x100) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000001c0)={0x7bd9, 0x100000, 0x0, 0x0, 0x1}) r2 = io_uring_setup(0x171e, &(0x7f0000000040)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, 0x0, 0x0, 0x4) syz_io_uring_complete(r3) syz_io_uring_complete(r3) r4 = syz_io_uring_complete(r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x91233b0c11daa00a}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10040, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000000)) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f0000000040)=0x7) [ 885.451794][T24143] usb 1-1: USB disconnect, device number 111 01:55:14 executing program 5: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:55:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/103, 0x67}, {&(0x7f0000000140)=""/177, 0xb1}, {&(0x7f0000000200)=""/163, 0xa3}], 0x3, &(0x7f00000002c0)=""/235, 0xeb}, 0x2000) 01:55:14 executing program 3: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000200)={0x8, "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"}) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'team_slave_1\x00', 0x80000000}) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:55:14 executing program 5: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:55:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xf9, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:55:14 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0xa0800, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x80000, 0x100003}) [ 885.849304][T27596] team_slave_1: mtu less than device minimum [ 885.865842][T27597] team_slave_1: mtu less than device minimum [ 885.953877][T24143] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 886.223801][T24143] usb 1-1: Using ep0 maxpacket: 16 [ 886.343924][T24143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 886.533963][T24143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 886.548946][T24143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.558135][T24143] usb 1-1: Product: syz [ 886.562334][T24143] usb 1-1: Manufacturer: syz [ 886.568292][T24143] usb 1-1: SerialNumber: syz [ 886.634978][T24143] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 886.844032][ T3422] usb 1-1: USB disconnect, device number 112 [ 887.613716][ T2735] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 887.893654][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 888.014004][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 888.184101][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 888.193754][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.201825][ T2735] usb 1-1: Product: syz [ 888.208165][ T2735] usb 1-1: Manufacturer: syz [ 888.212755][ T2735] usb 1-1: SerialNumber: syz [ 888.255455][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 01:55:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x81) 01:55:17 executing program 5: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400) 01:55:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:55:17 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x3000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 888.458985][T22173] usb 1-1: USB disconnect, device number 113 01:55:17 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:55:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 01:55:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x2, 0xf, 0x20, 0xb0b0b0b0}) 01:55:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xf4, 0x4, 0x0, "ea8182e7a6112e59a348778cd9a4b2da", "ca2f94ea1856540ebd64db43199c5fc01f565945834fe7cedd1350259b6186b6b8a028b93b82ffd0e0a99241ad75a0329cc3b998480d2499c884002546201b5f9d3f902923abff96599ad4b8a1f7ceb196424cfe37c3e6c30c086b48f1f79c5a98e9957e8890b2d70c8ef30e063a3633ada48e7a6314649bcd8857c1dabd6fe9c5e38843b0426560e10c243561d4136e6676a37afb9bd5cdb945a1f6739f4387302ca83c322f3a530ea3805bc5adb86597f17944286207e6486554d844565dc4ad0f32de37f1b9750c89757f385e1d714c23a9bc551e7385117be6060ea749"}, 0xf4, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) 01:55:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 01:55:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:17 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x200) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x80000000, 0xe, 0x8024}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f00000000c0)=0x80000001) 01:55:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 01:55:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0x6, 0x1f, 0xe0e0e0e0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x20, 0x101}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x7, @vbi={0x3, 0x5, 0x7ff, 0x50323234, [0x1, 0x401], [0x7f, 0x3], 0x108}}) 01:55:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x8, 0xf, 0x1f}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000080)) 01:55:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) [ 889.103789][T24143] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 889.343803][T24143] usb 1-1: Using ep0 maxpacket: 16 01:55:17 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x4000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 889.464080][T24143] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 889.633938][T24143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.643341][T24143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.654123][T24143] usb 1-1: Product: syz [ 889.658439][T24143] usb 1-1: Manufacturer: syz [ 889.663289][T24143] usb 1-1: SerialNumber: syz [ 889.960312][T24143] usb 1-1: bad CDC descriptors [ 889.979723][T24143] usb 1-1: USB disconnect, device number 114 [ 890.683641][ T2735] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 890.933656][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 891.064003][ T2735] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 891.234014][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.243213][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.252528][ T2735] usb 1-1: Product: syz [ 891.257186][ T2735] usb 1-1: Manufacturer: syz [ 891.261913][ T2735] usb 1-1: SerialNumber: syz 01:55:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x1, 0x3, 0xc59a, 0x84800, r4}) 01:55:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xdffffffffffffffe, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x6, 0x6, 0x3, 0x0, 0x5, 0x0, 0x1f, 0x48, 0x18, 0x80, 0x20, 0x0, 0x0, 0x6, 0xfffffffb, 0x40, 0x0, 0x1, 0xff, [], 0x80, 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x8, 0x324e, 0xfffffffd}) 01:55:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) 01:55:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:20 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x5000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:20 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 891.574213][ T2735] usb 1-1: bad CDC descriptors [ 891.585523][ T2735] usb 1-1: USB disconnect, device number 115 01:55:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) 01:55:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000140)="11d1d8052452d37f8c9300acec72b1e654737f41f90c8a5d0a27a09c59cac00ce4fc0fc396589d8c66aa12b19c09ac6377947741976cddf1c2b7f1ce47f6d93ed360b43f36f637ce7546d54853aa3f0a7d840a2624443a3948efb968774b96449820c8ca4a19f83556b23eed4b704a7b9535102733ca9cee38c14418dbf35bae0ae69887b1b300e21f22fdcc6c614edd7b003a315b69ee865f8592d2b98e1b6d78be47c481c61c9f63699df47fdfa2e367a762d5d47b054e64565a02", &(0x7f0000000000)=""/20, &(0x7f0000000080)="4990a2489d0a027da779dcda33cdeaf255a6f05823617b915b9096a33027771ad342e2e3966cd5e3753958d1e854edadd456bf963f93be3b7d3686ce46a0828740cd83305d1ddc34c192bdf26bb1280d0363278e8baf588f0b", &(0x7f0000000200)="d2df6d8215b77885aa16079d9db5d3f5b71f62568ac3fb5c5e7db616a3dbd8a1a85115566a4f1c0849ff416ae8387662e71400314df35957ffa3a2a570196cc3f479eaa910", 0x6, r1}, 0x38) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000100)) 01:55:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 01:55:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000080)=0x3ff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="c90d0000200072491d1dfacf44e1d52037b8a8728a7d7847a612239f5b6815d71e1f21f43585c716b36a27b946d6dd721b3ad19f789a083d3a3603b1f0dcb87c774258e2ebc729daaf9c30099cfce28e8d982eea81f9864c606a9f3163cc6fef8e89e8418758866d715e5979588dfcf59c9ca24112fbb1583d887aeb85c83807138b814904106bb107"]) 01:55:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 01:55:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 01:55:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) [ 892.133714][ T2735] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 892.383951][ T2735] usb 1-1: Using ep0 maxpacket: 16 [ 892.504103][ T2735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:55:21 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x6000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 892.700168][ T2735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 892.713244][ T2735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.730774][ T2735] usb 1-1: Product: syz [ 892.735573][ T2735] usb 1-1: Manufacturer: syz [ 892.740307][ T2735] usb 1-1: SerialNumber: syz [ 892.774232][T27757] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.794822][ T2735] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 893.012080][T24143] usb 1-1: USB disconnect, device number 116 [ 893.803646][ T3422] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 894.043590][ T3422] usb 1-1: Using ep0 maxpacket: 16 [ 894.163691][ T3422] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 894.334672][ T3422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.344102][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.352138][ T3422] usb 1-1: Product: syz [ 894.358111][ T3422] usb 1-1: Manufacturer: syz [ 894.362734][ T3422] usb 1-1: SerialNumber: syz [ 894.384325][T27757] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 894.404766][ T3422] cdc_ether: probe of 1-1:1.0 failed with error -22 01:55:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 01:55:23 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = semget(0x0, 0x0, 0x0) r2 = semget(0x0, 0x0, 0x0) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000140)=""/211) r3 = semget(0x0, 0x0, 0x0) semctl$GETZCNT(r3, 0x4, 0xf, &(0x7f0000000340)=""/218) semctl$GETZCNT(r3, 0x4, 0xf, &(0x7f0000000240)=""/211) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000080)=""/128) 01:55:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:23 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x7000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom$inet6(r3, &(0x7f0000000000)=""/148, 0x94, 0x2, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={[], [], @local}, 0x4a9}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) [ 894.612928][ T8234] usb 1-1: USB disconnect, device number 117 01:55:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x30d400) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:55:23 executing program 5: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 01:55:23 executing program 5: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2], 0x1}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) signalfd(r0, &(0x7f00000003c0)={[0x2b6]}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x100, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) modify_ldt$read(0x0, &(0x7f0000000400)=""/19, 0x13) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ptype\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg\x00', 0x200, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000004000000000000920000", @ANYRES32=r6, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @rand_addr=' \x01\x00', 0x2, 0x7, 0xff, 0x0, 0x40, 0x110, r6}) 01:55:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) 01:55:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) 01:55:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:23 executing program 5: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) [ 895.163995][ T8234] usb 1-1: new high-speed USB device number 118 using dummy_hcd 01:55:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x9) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) [ 895.423790][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 895.560337][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:55:24 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) [ 895.744148][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 895.758156][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.767003][ T8234] usb 1-1: Product: syz [ 895.771363][ T8234] usb 1-1: Manufacturer: syz [ 895.776195][ T8234] usb 1-1: SerialNumber: syz [ 895.829297][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 01:55:26 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0x15, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r5, 0x200000000114, 0xff, &(0x7f0000019580)=""/102393, &(0x7f0000000080)=0x18ff9) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:55:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:26 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x8000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x40000007, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x3, 0x0, [{0x888, 0x0, 0x5}, {0x852, 0x0, 0x5}, {0xae7, 0x0, 0x5}]}) 01:55:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:26 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) [ 897.740654][ T8234] usb 1-1: USB disconnect, device number 118 01:55:26 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) 01:55:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 01:55:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f00000000c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{}]}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r8, 0x2468825185d9173d}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5f5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1cd}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x52a}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x8, 0x8]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000300)=0xfffffffffffffd67) ioprio_set$uid(0x0, r10, 0x2000) 01:55:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 898.219842][T27944] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 898.256033][T27947] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 898.263720][ T8234] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 898.513640][ T8234] usb 1-1: Using ep0 maxpacket: 16 [ 898.634023][ T8234] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 898.820289][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 898.849212][ T8234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.873783][ T8234] usb 1-1: Product: syz [ 898.882261][ T8234] usb 1-1: Manufacturer: syz [ 898.887637][ T8234] usb 1-1: SerialNumber: syz [ 898.941082][ T8234] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 899.141937][T24143] usb 1-1: USB disconnect, device number 119 01:55:28 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000000)={0x1dd, 0xc, [0x20, 0xb08032c6, 0x571fd259]}) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000200)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000040)) close(r0) 01:55:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 01:55:28 executing program 2: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="04605ba0be23954d7983bda37747e162a265f9929834f32b8bc625dcb74b641438ad2b60ba9ed5eeaa9f81d925b1ea4ee65ba8fe51eacf29374b7468568dff9f0cbd1559e5", 0x45}, {&(0x7f0000000000)="3b6d33a3", 0x4}, {&(0x7f0000000140)="b0bb", 0x2}, {&(0x7f0000000180)="3deb11780deaaf2c", 0x8}], 0x4, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="f9e430de652dda2f56ea9c062c28f2030cf60213750dfd8c7c254f409edb80cf1f3a77dbbe8601918005c948083f915f005b168e701eac7404dbf3bbe7c2b72b0805bbd804ce16d1b3cb93e048d1b6f48d", 0x51}, {&(0x7f0000000280)="90350324081186cbd76203e96082f7fa3140c98df15a43b3ef6c57dd794904d7f888fecf96595727caaa59fde7fe826112c21dfdc800797896538f4c4421148070b596e5aeee9534356df5532438c350853ebacca20f715645ded68313e8f5e679dc931e675891462ac30dde09ac24aa8223d375375998b9b2eafbaf1b0e9a1b1d337c3e24cb7a5f3634510a2b9edb4ebf930a64775034122a21dd348e7546d7aec5ecc1d12ad573e9ce3a1244e71157997ef9b97313f7826248f083eeed2c6ff1cf5f1e55462acc50c4cc67049e731f169d63d73b96211a4a301d6e3ff5da", 0xdf}, {&(0x7f0000000380)="251de8ef2d76e4ce7bbb5ca77a54c960848a840081b25b4d3276deaec3c20495fa28b444698e2efaeae638d4c9719edd547f7cd3418f8e80e5985ee540552185ab5f97af01b66375de47441f8c0c8a39172428a94b0c8a21238c05bcf602edbca4c909c3186ed864f651ab3162aeb6e195d3cd0799c1ba7a878aea4802c9489e254eb1f01d42af637589c5e83b2aa6a08e53446881cfdd99c50e03702793ab09487b7319efdc1f7dfa496ecd2e0461cf3a345a76f5b166deaf92aeb2ac408aadd90fc4d3f1f336bf6e57b84c18bd1e90288f27cabc6da8dd", 0xd8}, {&(0x7f0000000480)="69c4c8a2fd9232669f74b22038379b2270c65221dc1d4679fe447bb61fed04b37907c9ac153c709451ef07e8183558db7399dd8c9789e04d93f76b62f64688a60bd4002d2c3aa1aebe3f342e369e2c5a0e8c28efdec55013514a95b721fdf6dc3ae83e7f9b69d1a4cc14df6b0f5005d3d6c0ffdc22162b6461f709f6f4d4dfa35badfc2b37ad1c001c6532ce414c2c92c094fbd0048d58949da3603f8e5983d44510f3e4ba069ee453d27024be64e80ce142330a122c16a8f5a40daf0641eed3c9c034b2a47025ac9b904b7a3797ad0c85d13955c806107cec", 0xd9}, {&(0x7f0000000580)="afca3e6a834d9ebaf8b5e922efaa2a1f5b31d3ca7203327f447a7c1e362a36d20c438240ad32919ab2ae8fe7b811e7", 0x2f}, {&(0x7f00000005c0)="0472fe1346eb7673ca8bff59279c1ce752a9bd8be3859d1b4212f45d7ab0082a18a38ec7c65db77ab4c0c9631928c54dc4cd214a47a379595a0a2307e13a9c088b70b7636e7e27e5aeb5a540a17d1fb98d19867e7ef84ffc1b973e1d9b59838802954f5afedbe272a467c6e65e10887d90fbaea154d70140ff1b92d8dcd771b031861db0765db0c2321c82cec08000b82ada56839990ca2d419cfd2bd25b2a7491589db7aed03939837225e261f10a57c3cd4c3664b9b571c3c6a9", 0xbb}, {&(0x7f0000000680)="8d4d860d5fd64b6ecac999cef7a71b6d9dc39c690387bff6fa910fd3945b6ae92500756fcd31047f4fcb82f0bbb165a5a7e51b1ccd3c4cd0a4922c6d3c79d99a4796086a7cd8d9322805f2f86987ef80f6c3be749991bf4f33f2e6e37bdb79a49665561fd7c1edb3c0d175b807a6c3585f9ad9cb4fcf517437c63e88b2bd9ad8971d", 0x82}, {&(0x7f0000000740)="df69d8cb088025c790afbe3462e2f53480066b105a4c4e295861dab4badcfedfd8a05b16967619dbb9d4bb47883c7b9c180714185207f556cdce7746e15903948c2dec61e28e9312fd3ad21efa563c5b1edea2975170f05bb7fdf61e2d1239677f7377551b4093e693e2f3582050cc40db364a390ade4f86054e70410f2a998d4b1286cfe1d625beb3a1fc576cf0e1ba5c01831be6cab5342a765dbac9565cfeff57c4835226ad77f59bf842a9d5bb7fc116bf86edafd6c32cd5230a8ff2fd5f01465efdbb3b21114a28dfdb356ad22bb08a7ea34db18e89b5022618a3d04445d3e7875544", 0xe5}], 0x8, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8004}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="4e95eeb3e575b3e98fa71c1a5db24377791c865bf03836afc2647939d5e0097b6b7ddfdbe54ba750f47ec107649989c35e3d7659a86b76566adce5602bcb436276be8ecd13d1596ff694c40aae7b4edc2fa645bcedb19af338d6dba96a0ea0c99c058845071630fd341db0ac4699b8e677c27470b27eb081ed667c5bb5a0263fb719", 0x82}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000800017010000040000000600000000000000200000000000000017010000020000000a000000d83be22314c7effc68fd0000180000000000000017010000040000001e5ab14b00000000"], 0x50, 0x1}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a80)="e5a4ace0978f22f2c5ef24d84950c56dd40173722d", 0x15}], 0x1, &(0x7f0000000b00)=[@op={0x18}], 0x18, 0x20000004}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)="cd19ccb62d6143c9a8761e55473d1ca935a423a0eab40dd4cb05c9e2196517042edfea3029e3449e0b71f5cbb0eb9aaf17c8d76d05a64f33871b53f3281a2121ee8c83d63d2485d98b1caaa221795459c02530b92838ad6e72c8ca9f6fc6be612621f48be318273c5b77761f0fec12b0113aafca77bf2c7b9a94d6ad85cd55c68ef3488eb1c91b945ab8b4fbafc6e1b4424ab26d39bd9f9f8ea635ad60d493306e92d8e8d88caa257258418e59eb898e38853c35efb8d652b92d53d06cc4d3c873045c5cb748d59f6468ce85f655630f66376ca80c03c54f2c70d45003b63e5f0482eac9a4", 0xe5}, {0xfffffffffffffffd}], 0x2, &(0x7f0000000c80)=[@assoc={0x18}, @iv={0xd0, 0x117, 0x2, 0xbb, "3da9e6bea1424fa977cb5ad75ae6da07955eeea667ea8b474a8adda6e63f986f1523231d43fe25a9fa3a3b12f250d3ab02dd6a40110bd323ca4d353f138ff9cad82dd9ff9fc35f21307cb960c25ddcecebe1fdf8a3af34ce7950ae643c326b166c5f0ca7f6b08a159a4defd307de0fc24c485df97df342595020e3df993361314a6360b4f194b2d65ddfc9035275e2d75a39fedd0bfbfde92ac4616a4209af1d9a65a80e7c5f0bd4d43b579ffe186404af2ba60e9da81afa241588"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x100}, {0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)="96b7e7015600e5a36122961b831ab42fece19d80962c386999206766c3237b940f1342e306fe039e0e475277116519c9765c960acd6f5d38a09b75eac1d8f1a3158356efb10957a522b9049c5ec88106c234a9cc7d90cbf0de8330f97fa2ccaf5b115ada0ee3da2282c1ac162cd630de5b3f883e5e77457d2217c30eedf1a36346bc132463ebd84a8f4502db7211f1f172298619357b82f9cc67af5a37d772efca4a112f4a094c38cd9ac150719f27a86be28b0c7d3c83326336fc6acd49f80b3c6986fbe3c8134c617446a552fc05a8", 0xd0}], 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x110, 0x8841}], 0x6, 0x4040040) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000ec0)={0x0, 0x2}, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6, 0x10800) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xf, 0x1f}) 01:55:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:28 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0xfeffffff}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) 01:55:28 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023c0001010050ff090400000002060000052497000005240000000d240f01000400000000050000090582020000000000090503024000000000"], 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x80000, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="c65ec44b2964093e4b3b16ef0958617040847bfd818c", 0x16, r4}, 0x68) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000340)) 01:55:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:28 executing program 3: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) 01:55:28 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 900.333610][ T3424] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 900.333717][T22173] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 900.573579][ T3424] usb 3-1: Using ep0 maxpacket: 16 [ 900.623697][T22173] usb 1-1: device descriptor read/64, error 18 [ 900.773669][ T3424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 900.833754][ T3424] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 900.841435][ T3424] usb 3-1: can't read configurations, error -71 [ 901.043646][T22173] usb 1-1: device descriptor read/64, error 18 [ 901.323552][T22173] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 901.623587][T22173] usb 1-1: device descriptor read/64, error 18 [ 902.023552][T22173] usb 1-1: device descriptor read/64, error 18 [ 902.153678][T22173] usb usb1-port1: attempt power cycle 01:55:31 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a540000102030109023b0001ed000000090400000002060000052406000005240000000d240f0100000000040000000009058202000000009c5e179e30fcf9b465e6"], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 01:55:31 executing program 3: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) 01:55:31 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x800000, 0xf, 0x1f}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000080)={0x1, 0x5, 0x4, 0x3, 0x100, 0x1000, 0x9, 0x8, 0x434}) 01:55:31 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0xff000000}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:31 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000003e, 0x80000000, 0x1}) 01:55:31 executing program 3: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) 01:55:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 01:55:31 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200000, 0x0) ftruncate(r2, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) 01:55:31 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) 01:55:31 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) [ 903.319772][T22173] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 903.400159][ T3423] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 903.425126][T22173] usb 1-1: Using ep0 maxpacket: 16 [ 903.554032][T22173] usb 1-1: config 237 has an invalid descriptor of length 94, skipping remainder of the config [ 903.569803][T22173] usb 1-1: config 237 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 903.653595][ T3423] usb 3-1: Using ep0 maxpacket: 16 [ 903.754357][T22173] usb 1-1: New USB device found, idVendor=0525, idProduct=a5a1, bcdDevice= 0.40 [ 903.765554][T22173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.774580][ T3423] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 903.798110][T22173] usb 1-1: Product: syz [ 903.807501][T22173] usb 1-1: Manufacturer: syz [ 903.831512][T22173] usb 1-1: SerialNumber: syz [ 903.895372][T22173] cdc_ether: probe of 1-1:237.0 failed with error -22 [ 904.003643][ T3423] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 904.013901][ T3423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.025435][ T3423] usb 3-1: Product: syz [ 904.029780][ T3423] usb 3-1: Manufacturer: syz [ 904.036052][ T3423] usb 3-1: SerialNumber: syz [ 904.074920][ T3423] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 904.102734][ T8234] usb 1-1: USB disconnect, device number 122 [ 904.294560][ T2735] usb 3-1: USB disconnect, device number 18 [ 904.873495][T22173] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 905.113491][T22173] usb 1-1: Using ep0 maxpacket: 16 [ 905.233574][T22173] usb 1-1: config 237 has an invalid descriptor of length 94, skipping remainder of the config [ 905.244503][T22173] usb 1-1: config 237 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 905.414484][T22173] usb 1-1: New USB device found, idVendor=0525, idProduct=a5a1, bcdDevice= 0.40 [ 905.423733][T22173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.432210][T22173] usb 1-1: Product: syz [ 905.437163][T22173] usb 1-1: Manufacturer: syz [ 905.441782][T22173] usb 1-1: SerialNumber: syz [ 905.484562][T22173] cdc_ether: probe of 1-1:237.0 failed with error -22 01:55:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 01:55:34 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) 01:55:34 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 01:55:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x12) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc1b0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x400000000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[], 0x12e) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) [ 905.685434][T22173] usb 1-1: USB disconnect, device number 123 01:55:34 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)={r6}, 0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r6, 0x20}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x1000, 0x1, 0x80, 0x9, 0x4, 0x0, 0x1ff, r7}, &(0x7f0000000280)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0x5, 0xffff, 0xffff7fff, 0x0, 0x8, "4fd365047cf1791946bb53bbe9110678b6242a"}) r8 = dup(r2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffff, 0x404201) close(r0) 01:55:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) 01:55:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 01:55:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) 01:55:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x80000000, 0x1}) [ 906.243568][T22173] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 906.357882][T28151] [drm:drm_calc_timestamping_constants] *ERROR* crtc 33: Can't calculate constants, dotclock = 0! [ 906.370426][ C0] ------------[ cut here ]------------ [ 906.376643][ C0] WARNING: CPU: 0 PID: 28151 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x31e/0x3b0 [ 906.388362][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 906.394996][ C0] CPU: 0 PID: 28151 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 [ 906.403785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.413967][ C0] Call Trace: [ 906.417255][ C0] [ 906.420125][ C0] dump_stack+0x18f/0x20d [ 906.424468][ C0] panic+0x2e3/0x75c [ 906.428374][ C0] ? __warn_printk+0xf3/0xf3 [ 906.432979][ C0] ? printk+0xba/0xed [ 906.436965][ C0] ? log_store.cold+0x16/0x16 [ 906.441652][ C0] ? __warn.cold+0x5/0x45 [ 906.446188][ C0] ? __warn+0xd6/0x1f2 [ 906.451339][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 01:55:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) [ 906.456725][ C0] __warn.cold+0x20/0x45 [ 906.461149][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 906.467053][ C0] report_bug+0x1bd/0x210 [ 906.471422][ C0] handle_bug+0x38/0x90 [ 906.476375][ C0] ? find_held_lock+0x2d/0x110 [ 906.481188][ C0] exc_invalid_op+0x13/0x40 [ 906.485698][ C0] asm_exc_invalid_op+0x12/0x20 [ 906.490556][ C0] RIP: 0010:vkms_vblank_simulate+0x31e/0x3b0 [ 906.496543][ C0] Code: 85 9e 00 00 00 48 8b 95 48 02 00 00 4c 89 e1 bf 02 00 00 00 48 c7 c6 40 60 b3 88 e8 4c 2c ad ff e9 e5 fe ff ff e8 72 d3 11 fd <0f> 0b e9 88 fd ff ff e8 e6 38 51 fd e9 11 fe ff ff 4c 89 ef e8 d9 [ 906.516902][ C0] RSP: 0018:ffffc90000007da8 EFLAGS: 00010046 [ 906.522980][ C0] RAX: 0000000000010001 RBX: ffff8880a1aa9888 RCX: ffffffff8461e723 [ 906.530966][ C0] RDX: ffff8880921b4400 RSI: ffffffff8461e99e RDI: 0000000000000007 [ 906.538952][ C0] RBP: 000000000005e10e R08: 0000000000000001 R09: ffff8880921b4cc8 [ 906.547490][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880a1aa8d38 01:55:35 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) [ 906.556014][ C0] R13: 0000000000000000 R14: ffff8880a1aa9888 R15: dffffc0000000000 [ 906.564374][ C0] ? vkms_vblank_simulate+0xa3/0x3b0 [ 906.569944][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 906.575343][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 906.580812][ C0] __hrtimer_run_queues+0x6a9/0xfc0 [ 906.586462][ C0] ? vkms_disable_vblank+0x20/0x20 [ 906.591697][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 906.597718][ C0] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 906.603830][ C0] hrtimer_interrupt+0x32a/0x930 [ 906.608795][ C0] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 906.614902][ C0] asm_call_on_stack+0xf/0x20 [ 906.619577][ C0] [ 906.622530][ C0] sysvec_apic_timer_interrupt+0xe0/0x120 [ 906.628263][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 906.634258][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x8c/0xe0 [ 906.641725][ C0] Code: 48 c7 c0 88 e0 b4 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 37 48 83 3d e3 f2 c9 01 00 74 22 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 35 85 64 f9 65 8b 05 fe 10 17 78 [ 906.661951][ C0] RSP: 0018:ffffc9000541fb00 EFLAGS: 00000286 [ 906.668030][ C0] RAX: 1ffffffff1369c11 RBX: 0000000000000286 RCX: 0000000000000000 [ 906.676015][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000286 [ 906.684027][ C0] RBP: ffff8880a1aa8390 R08: 0000000000000000 R09: 0000000000000000 [ 906.692011][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 906.700001][ C0] R13: 0000000000000286 R14: ffff8880a1aa8390 R15: ffff8880a341d150 01:55:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:55:35 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x100000000000000, 0x11, 0x1f, 0xeeeeeeee}) [ 906.708013][ C0] drm_vblank_get+0x147/0x1d0 [ 906.712716][ C0] drm_wait_vblank_ioctl+0x3bd/0x1980 [ 906.718118][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 906.724204][ C0] ? lock_downgrade+0x820/0x820 [ 906.729667][ C0] ? find_held_lock+0x2d/0x110 [ 906.734445][ C0] ? __might_fault+0x11f/0x1d0 [ 906.739229][ C0] drm_ioctl_kernel+0x220/0x2e0 [ 906.744443][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 906.750522][ C0] ? drm_setversion+0x8a0/0x8a0 [ 906.755387][ C0] ? __might_fault+0x190/0x1d0 [ 906.760452][ C0] drm_ioctl+0x4d2/0x96f [ 906.765494][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 906.771866][ C0] ? drm_version+0x3d0/0x3d0 [ 906.776488][ C0] ? __might_fault+0x190/0x1d0 [ 906.781265][ C0] ? _copy_to_user+0x126/0x160 [ 906.786305][ C0] ? __fget_files+0x294/0x400 [ 906.791025][ C0] ? drm_version+0x3d0/0x3d0 [ 906.795625][ C0] ksys_ioctl+0x11a/0x180 [ 906.799967][ C0] __x64_sys_ioctl+0x6f/0xb0 [ 906.805190][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 906.810841][ C0] do_syscall_64+0x60/0xe0 [ 906.815530][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 906.821714][ C0] RIP: 0033:0x45cce9 [ 906.826772][ C0] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 906.848167][ C0] RSP: 002b:00007f07017ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.848181][ C0] RAX: ffffffffffffffda RBX: 000000000000c200 RCX: 000000000045cce9 [ 906.848188][ C0] RDX: 0000000020000000 RSI: 00000000c018643a RDI: 0000000000000003 [ 906.848194][ C0] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 906.848201][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 906.848209][ C0] R13: 00007ffe955bf1ef R14: 00007f07017ed9c0 R15: 000000000078bf0c [ 906.849557][ C0] Kernel Offset: disabled [ 906.903953][ C0] Rebooting in 86400 seconds..