: config 0 descriptor?? [ 430.520123][ T8572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.545112][ T8532] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 430.565501][ T8532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 430.572280][ T8572] usb 2-1: config 0 descriptor?? [ 430.615658][ T8532] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.631739][ T8572] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 430.638175][ T8532] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 430.657494][ T8532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.687108][ T8572] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 430.706641][ T8532] usb 3-1: config 0 descriptor?? [ 430.771919][ T8532] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 430.838141][ T8532] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 430.839802][ T8572] usb 2-1: USB disconnect, device number 46 [ 430.904007][ T8572] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 430.981626][ T7808] usb 3-1: USB disconnect, device number 50 [ 431.010223][ T7808] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 431.120227][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 431.126231][ T31] usbhid: probe of 1-1:0.0 failed with error -71 [ 431.150779][ T31] usb 1-1: USB disconnect, device number 56 03:39:41 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:39:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 431.629490][ T7808] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 431.829610][ T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 431.939514][ T8532] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 432.009594][ T7808] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 432.020200][ T7808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 432.032706][ T7808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.046741][ T7808] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 432.056558][ T7808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.073583][ T7808] usb 2-1: config 0 descriptor?? [ 432.120870][ T7808] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 432.134227][ T7808] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 432.200177][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 432.211175][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 432.224645][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.238999][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 432.249794][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.272752][ T31] usb 3-1: config 0 descriptor?? [ 432.321435][ T31] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 432.328046][ T8572] usb 2-1: USB disconnect, device number 47 [ 432.349629][ T8532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.363659][ T31] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 03:39:42 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013810104110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0xd772fa02af7df802, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x1440, 0x6, 0x1, {0x22, 0x43c}}, {{{0x9, 0x5, 0x81, 0x3, 0xaf3f3b9d07a6f70d, 0x3, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x2, 0x85}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0xfd, 0x8, 0x8, 0x36}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x20, "2c7e93abcb8c8fc290a6f83c52d0c2dc"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x7, 0x9004}]}, 0x7, [{0x64, &(0x7f0000000100)=@string={0x64, 0x3, "223d8072ef9b60800d9c1612887228e76bd34c347cdea39c396959e872a1e93ed3b00e95702e07874c1058382a489487c88a5f69bdcb7262aa3e9738c667ae6778671d1e9f5b96c1099d1c4329cdf6b3fe04f0b1fdd0f77d0ff98d8b5106ae277b49"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x415}}, {0x101, &(0x7f0000000240)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0x6, 0xba, {0xba, 0x4, "3af8c45c95592430c29b33db2db274230bde8c46ed8266b5e0d9cb768d185e0769fe73e5aa36d9a3e1201ba5b8fe8b1a4067bf67bc7c20468ae56bb08718fb1578e8b1324e105f4bd25baf07af51b48f460627226f1b2f28dfc082e3616dcbe662d7d7087aebcbcbacdce0bbb56cddb0c2780f95850ee81647e213adb5b549e24b8c2f9fab7a10f6b79163150afca4fe0b1890c5fe9e7fdcae0208bfd607316a13c639058b067223a85305618e3cdacda20a569e009a2c03"}}, &(0x7f0000000540)={0x0, 0x3, 0xba, @string={0xba, 0x3, "2a9500469bae28abee6ab01d48063eb7b419d7f97506ea56408f98b9281f76c16db6574ae703e264adfbe3fd54e911791e8e1de17795dfa56a672c909fbf754329ebe0d705496105d9c0b876212deb36ad8bf7ae4395e19fbe261ae3c0a0248c2b826ba11bd71ad13e8914dd5c230e985a61ad653ff944e57fbd98ea30b32b3d2f9c0fda1ebf4ab93f34d49b71f0cc2dba8f6f3f2c1b2f299a4f5d235fd58b3e10ddd05349e72b9098d9d29ee2e36a098842b53e8118b453"}}, &(0x7f0000000600)={0x0, 0xf, 0xe1, {0x5, 0xf, 0xe1, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x2, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "76d2e7ef42ad56efb0b534bafd143cc6"}, @ss_container_id={0x14, 0x10, 0x4, 0x6a, "d91157ef06feadbcd0ae6fd387cae794"}, @generic={0xad, 0x10, 0xb, "bd515a35faed26d004f71e8919ecbeb879770d8b578a72c28093f511bd676302dee7572e6ad8afbab3a82a6264102cab298331031d095087a6545f13095ea85ea39f5334fea4dc871b41d16e66fff1e6813566f369ad26f36182874dff0f8fe3660d4d90fd40d9300529971173ccfe0a4de040d06eaeb48c32ecac39637d8894cc000b1f4baba3f81aa4ecd2a3c34edd9a6a88fefc8da7c9680488b0884dca11f8563a033eb233e9aee0"}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x60, 0x0, 0x4, "80922091", "eeff8265"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xda, 0x1, 0xff, 0x5, 0x81, 0x800, 0x9}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000007c0)={0x40, 0x12, 0x6, "d2ca5999b169"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x140, 0x8}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0xb, 0x2, "d633"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "3afc"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x7}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 03:39:42 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, r2, 0xf, r3, 0x2) 03:39:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 432.364201][ T8572] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 432.397400][ T8532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.461192][ T8532] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 432.502202][ T8532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.526229][ T8526] usb 3-1: USB disconnect, device number 51 [ 432.544099][ T8526] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 432.560049][ T8532] usb 1-1: config 0 descriptor?? 03:39:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020c0000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 432.951091][ T8572] usb 2-1: new high-speed USB device number 48 using dummy_hcd 03:39:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 433.159544][ T8572] usb 2-1: device descriptor read/64, error 18 [ 433.159717][ T8532] usbhid 1-1:0.0: can't add hid device: -71 [ 433.193856][ T8532] usbhid: probe of 1-1:0.0 failed with error -71 03:39:42 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) 03:39:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 433.241343][ T8532] usb 1-1: USB disconnect, device number 57 03:39:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 433.429621][ T8572] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 433.459874][ T7808] usb 3-1: new high-speed USB device number 52 using dummy_hcd 03:39:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 433.633888][ T8572] usb 2-1: device descriptor read/64, error 18 [ 433.769930][ T8572] usb usb2-port1: attempt power cycle [ 433.840131][ T7808] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 433.869079][ T7808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 433.899531][ T7808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.929656][ T7808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 433.938709][ T7808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.963839][ T7808] usb 3-1: config 0 descriptor?? [ 434.021085][ T7808] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 434.075506][ T7808] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 434.129451][ T8526] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 434.179703][ T8572] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 434.226775][ T7808] usb 3-1: USB disconnect, device number 52 [ 434.239403][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 434.255476][ T7808] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 434.280908][ T8572] usb 2-1: Invalid ep0 maxpacket: 4 [ 434.430254][ T8572] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 434.489551][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.501836][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.513499][ T8526] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 434.523545][ T8572] usb 2-1: Invalid ep0 maxpacket: 4 [ 434.529084][ T8572] usb usb2-port1: unable to enumerate USB device [ 434.535576][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.550529][ T8526] usb 1-1: config 0 descriptor?? [ 435.089519][ T8526] usbhid 1-1:0.0: can't add hid device: -71 [ 435.095775][ T8526] usbhid: probe of 1-1:0.0 failed with error -71 [ 435.112621][ T8526] usb 1-1: USB disconnect, device number 58 03:39:45 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000f30300000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) read$char_usb(r0, 0x0, 0x0) 03:39:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:45 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:45 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) 03:39:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:39:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:39:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702180000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 435.879637][ T8532] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 435.919775][ T8526] usb 2-1: new high-speed USB device number 52 using dummy_hcd 03:39:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 436.022062][ T2973] usb 1-1: new high-speed USB device number 59 using dummy_hcd 03:39:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 436.079930][ T8532] usb 3-1: device descriptor read/64, error 18 03:39:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:45 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) [ 436.299882][ T8526] usb 2-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 436.317131][ T8526] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 436.341909][ T8526] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 436.360100][ T8532] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 436.368966][ T8526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.394214][ T8526] usb 2-1: config 0 descriptor?? [ 436.450770][ T2973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.524707][ T2973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.570647][ T8532] usb 3-1: device descriptor read/64, error 18 [ 436.600022][ T2973] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 436.609090][ T2973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.622185][ T2973] usb 1-1: config 0 descriptor?? [ 436.668594][ T8526] usb 2-1: USB disconnect, device number 52 [ 436.703989][ T8532] usb usb3-port1: attempt power cycle [ 437.130510][ T8532] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 437.169455][ T2973] usbhid 1-1:0.0: can't add hid device: -71 [ 437.175478][ T2973] usbhid: probe of 1-1:0.0 failed with error -71 [ 437.196847][ T2973] usb 1-1: USB disconnect, device number 59 [ 437.333130][ T8532] usb 3-1: device descriptor read/8, error -61 [ 437.449326][ T7808] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 437.629470][ T8532] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 437.809568][ T7808] usb 2-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 437.820113][ T7808] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.829125][ T7808] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 437.838673][ T7808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.849580][ T8532] usb 3-1: device descriptor read/8, error -61 [ 437.852535][ T7808] usb 2-1: config 0 descriptor?? [ 437.969532][ T8532] usb usb3-port1: unable to enumerate USB device 03:39:47 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) read$char_usb(r0, 0x0, 0x0) 03:39:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:47 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:47 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, r2, 0xf, 0xffffffffffffffff, 0x2) [ 438.105419][ T7808] usb 2-1: USB disconnect, device number 53 03:39:48 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:39:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:39:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702700000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:48 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0xd, {0xd, 0x31, "cf78f1cbe415f5ebadf74c"}}, &(0x7f0000000100)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "33bd5ec1e223a40dbfcc1ff4690b819ed1e96f5470bf83ef86d3e1aa3cc6e503182b886c85749344220eb01c31c96af617bd658860fe6e54e5666d30613240d473f9f2d4edfd3ea8043e42f65f8318f69c9a543e36c6c1f71e11a040d611d3b8f7337cc73d30447bef4d2097e4b0158aa2962476a5911bd4d8dcb4b5179204826e026c8a278b4e8963aa92b1ccdd1f949431fabf8564a919415383691c8a29863c14cba81a4405b35d782a46f191852f63b3eee7ad6d4bcc426a6f0ceb1ad87f903b0fc33f8371ea63"}}, &(0x7f0000000040)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f224bea7bccfd36cf19d4afdf966bbbf"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xd, 0x8001}, @ptm_cap={0x3}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x5, 0xb0, 'R\t\ne', "f99170e2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x2, 0x8, 0xf7, 0x0, 0x7, 0xa7a2}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0x1e, 0xa7, "b97279dc8c643638367ba482f93165af2efe09027a54720253db2008386b279b73a51664f9e468e5a1b46ca6795ecdefaab7867f702cb5eb9342d105d298d4b6bb6619173168f094a51c3e8ff7c1deaf0b57ad4c92d40513549cc632981f160d5128678b03956bd691e98a2970ee377af8d4453fbf190764507b069a31146eddc4880a118f6349b8581f089747e171264c313ea1ac79866d846342f2f3e34d4473d974dd469d55"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x73}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x160, 0x4}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x97}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "9fa5"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "9702"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x9a}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x6}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 03:39:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702990000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702a00000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 438.969365][ T8526] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 438.999331][ T7808] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 439.026018][ T8572] usb 3-1: new high-speed USB device number 57 using dummy_hcd 03:39:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:48 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 439.219548][ T8572] usb 3-1: device descriptor read/64, error 18 03:39:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:48 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, r2, 0xf, 0xffffffffffffffff, 0x2) [ 439.330728][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.371896][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.389661][ T7808] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 439.420671][ T7808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 439.448868][ T8526] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 439.474234][ T7808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.494449][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.510366][ T8572] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 439.540489][ T8526] usb 1-1: config 0 descriptor?? 03:39:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 439.566451][ T7808] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 439.632301][ T7808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.684432][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.690939][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.699511][ T8572] usb 3-1: device descriptor read/64, error 18 [ 439.732188][ T7808] usb 2-1: config 0 descriptor?? [ 439.803274][ T7808] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 439.819711][ T8572] usb usb3-port1: attempt power cycle [ 439.853803][ T7808] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 440.229312][ T8572] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 440.349589][ T8526] usbhid 1-1:0.0: can't add hid device: -71 [ 440.356758][ T8526] usbhid: probe of 1-1:0.0 failed with error -71 [ 440.373380][ T8526] usb 1-1: USB disconnect, device number 60 [ 440.409768][ T8572] usb 3-1: device descriptor read/8, error -61 [ 440.679275][ T8572] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 440.849523][ T8572] usb 3-1: device descriptor read/8, error -61 [ 440.969421][ T8572] usb usb3-port1: unable to enumerate USB device 03:39:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:39:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:51 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) bind$packet(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:51 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, r2, 0xf, 0xffffffffffffffff, 0x2) 03:39:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:39:51 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100070000000000000010ff9500000001090222000100000000090400000149284800090544335cdb19b9bf459faed9f777130f642de80d18a08e3802fa08dd6830ce437a8c13f94351880ad1daa292e9bb78186f7554e73123f87bb218a46d416022c5a9b54dc8ca334d898f24bcb59a382d7e86f7a741c66fb9cb05637501092d16d49aebf84c967aa441f6b68c32ca0dd4ce66dd02d9e9829ad74ec19df8ded8e5bf003e9da875bbdcdb1f5c01ac2a01534fe8682adc7051d5a39d67dc41812f0e521c7d73103fdc641c3609a259e434e0d49529ef8f4773d2b638f30c05399a5f2bfd678ae24dfd0ff0222b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) [ 441.630449][ T8269] usb 2-1: USB disconnect, device number 54 [ 441.651220][ T8269] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:39:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702b40100000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 442.089459][ T8526] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 442.119203][ T8532] usb 3-1: new high-speed USB device number 61 using dummy_hcd 03:39:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 442.221738][ T8269] usb 2-1: new high-speed USB device number 55 using dummy_hcd 03:39:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 442.333796][ T8532] usb 3-1: device descriptor read/64, error 18 [ 442.459666][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.480887][ T8269] usb 2-1: device descriptor read/64, error 18 [ 442.500133][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.558911][ T8526] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 442.616721][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.619636][ T8532] usb 3-1: new high-speed USB device number 62 using dummy_hcd 03:39:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 442.699630][ T8526] usb 1-1: config 0 descriptor?? [ 442.769192][ T8269] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 442.869108][ T8532] usb 3-1: device descriptor read/64, error 18 [ 442.959307][ T8269] usb 2-1: device descriptor read/64, error 18 [ 442.999526][ T8532] usb usb3-port1: attempt power cycle [ 443.079411][ T8269] usb usb2-port1: attempt power cycle [ 443.439230][ T8532] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 443.439453][ T8526] usbhid 1-1:0.0: can't add hid device: -71 [ 443.453465][ T8526] usbhid: probe of 1-1:0.0 failed with error -71 [ 443.462932][ T8526] usb 1-1: USB disconnect, device number 61 [ 443.491433][ T8269] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 443.601582][ T8269] usb 2-1: Invalid ep0 maxpacket: 0 [ 443.639579][ T8532] usb 3-1: device descriptor read/8, error -61 [ 443.759246][ T8269] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 443.849744][ T8269] usb 2-1: Invalid ep0 maxpacket: 0 [ 443.855406][ T8269] usb usb2-port1: unable to enumerate USB device [ 443.928651][ T8532] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 444.119177][ T8532] usb 3-1: device descriptor read/8, error -61 [ 444.250221][ T8532] usb usb3-port1: unable to enumerate USB device 03:39:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:39:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) bind$packet(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:54 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:39:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:39:54 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x40, 0x6b, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x81, 0x3}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xd2, 0x10, 0x1f, 0xff, 0x3}, 0x26, &(0x7f0000000080)={0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x1, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x9, 0x3ff}, @generic={0x13, 0x10, 0xa, "73184bec0a389d79d299469ca91170f7"}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42c}}, {0xfc, &(0x7f0000000100)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x30, 0x6f, {0x6f, 0xa, "a967f0cbfa15c48c8dd25b8f0349224ad4393ebe4cec690cd1254d9c4a559f5aedad1dad351d7c275fac1e243fa7c6c1648eb74b3b498bbdef970e74d3d6d58ec5f4842235d03d8dae4d197ef695e084ed35b3b75be308379e4146fbd0e277c6eb0fa177c0347b93d746ecf0f8"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "c7db7fdd4a97ef8a883c27781e56dd759627250d90b42de636"}}, &(0x7f0000000300)={0x0, 0xf, 0x100, {0x5, 0xf, 0x100, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x200, 0xf0f, 0x6, [0x1bf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0x5, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e567e5abcfb7ffc7c27ebceab6abb832"}, @generic={0xca, 0x10, 0xb, "40fa75ce8093abbf119a1390f3ee2a599bbfe46c71278e27f089ae6a4651d0d315274572986d108823797b675d126880a37345c8fe36132fd6f647d687ef3fab98295ddd21985aab2a605dab405f9ae5a3e37eaca3606033ededbcc00ac001d5258630ef94762444a45e9f37a7db68bd188b5a4e6b08ad8fa2660fb3b4531dd297046f45f28349e1880b2da36eb6a8fcd37dc4b92d21b8d461145eac1656a71f506b1e9e550629e1fe1aabe3536894c80ab24b49d14b5b48e4f8e31c90b2527f0c5f0cde500ce7"}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0x1, 0x2, "c809f008", "d8acdedc"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x21, 0x83, 0x20, 0x0, 0x8}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x20, 0x18, 0x5b, "c35ada1b1c506facd72c12a55d9a11fe33c251a282db9f83b641afe48f5e191be585c04c0ec3288d01ab83c631bed4860c7efc344242b364034df51df3771a4c61fd404dc851ffe703804d98935d6528cf533969af6203f04a0843"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1000, 0x8}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x94}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "c3da"}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="af68f83e7004"}, &(0x7f00000007c0)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "8d32"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x5}}) 03:39:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 445.200888][ T8526] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 445.239051][ T8269] usb 1-1: new high-speed USB device number 62 using dummy_hcd 03:39:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 445.240742][ T8572] usb 3-1: new high-speed USB device number 65 using dummy_hcd 03:39:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 445.409407][ T8526] usb 2-1: device descriptor read/64, error 18 03:39:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 445.629472][ T8572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.630420][ T8269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.655681][ T8269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.656352][ T8572] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.669037][ T8269] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 445.679084][ T8526] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 445.686169][ T8269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.706245][ T8269] usb 1-1: config 0 descriptor?? [ 445.744408][ T8572] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff 03:39:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 445.788358][ T8572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.815982][ T8572] usb 3-1: config 0 descriptor?? [ 445.899142][ T8526] usb 2-1: device descriptor read/64, error 18 [ 446.026145][ T8526] usb usb2-port1: attempt power cycle [ 446.088873][ T8572] usb 3-1: USB disconnect, device number 65 [ 446.439170][ T8526] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 446.450511][ T8269] usbhid 1-1:0.0: can't add hid device: -71 [ 446.456533][ T8269] usbhid: probe of 1-1:0.0 failed with error -71 [ 446.470573][ T8269] usb 1-1: USB disconnect, device number 62 03:39:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:39:56 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) bind$packet(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:56 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 446.609112][ T8526] usb 2-1: device descriptor read/8, error -61 [ 446.879246][ T8526] usb 2-1: new high-speed USB device number 62 using dummy_hcd 03:39:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 447.059668][ T8572] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 447.079542][ T8526] usb 2-1: device descriptor read/8, error -61 [ 447.199372][ T8526] usb usb2-port1: unable to enumerate USB device [ 447.419349][ T8572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.434570][ T8572] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 447.446072][ T8572] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 447.462375][ T8572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.488738][ T8572] usb 3-1: config 0 descriptor?? [ 447.736103][ T8532] usb 3-1: USB disconnect, device number 66 03:39:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x6, {0x6, 0x0, "4bb97dd9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:39:57 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:39:57 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:39:57 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, &(0x7f00000013c0)={0x0, 0xa, 0xb2, {0xb2, 0x0, "f8b434a5472afff0e4da0edb39ade61290ad5c6707af4741595658eab3692458512892450b30d736a45b508a94de11fb7ec2ae8c235ee9e8973e976e004fd4921cb1b32fa93ee7e3dac5d46d4c2217e6c10058757a9d72b3e7eb9ed5fd4c89ddb057461ce976ec1177159d21c7249b8590b69fbade2194ac66ecb0f527a7f82d898e0b75622a3049e66c38445892e84c4ea5711bfccaa11b9d1227a4decb6c730932cf60c6d08b9f0f713c3fffaabcff"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}, &(0x7f00000014c0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x8, "e3"}]}}, &(0x7f0000001500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xb9c}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001580)={0x0, 0x16, 0xb, "fe74677ea106860fce9acf"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001600)={0x0, 0x8, 0x1}, &(0x7f0000001640)={0x20, 0x1, 0x7b, "bfda5113feb48933f2086e15d35b86a109c4f159fda6ef2acd2b58f49d35763e8b92c7877e3c08007e95b6653217105d4e5da73cc281458ffb65305a90c2a0ba79cdf518ec16e17445cf6c5d459c5f9f6103c1450e3fcb3e63b625b0e822b2d35571513859b20998119493f1a001a1d09e558c21afb5f64e6f969c"}, &(0x7f0000001700)={0x20, 0x3, 0x1}}) read$char_usb(r2, &(0x7f0000000100)=""/4096, 0x1000) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, &(0x7f0000001100)={0x0, 0xe, 0xfe, {0xfe, 0x3, "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"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001380)={0x1c, &(0x7f0000001240)={0x0, 0xb, 0x8b, "38342355a1cf04dc5fc23edd25152c982235a32fd409a23f44a6f053013b02e7f6943cdc5b39a7f68b7db713cc8c9dfcb88795bbf9b7f765064aedb8f359ad2db7fe54720b4947b4dc0a840a14c573cda65d152eb1fd2d6a578f5f548c6c5c609d3af8202132e542c36b11d3c5c906606dd44c16139adf99ccffa1837bf9ef0dddb7b5f75d8fd18001aabe"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001340)={0x0, 0x8, 0x1}}) 03:39:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 448.179085][ T8526] usb 1-1: new high-speed USB device number 63 using dummy_hcd 03:39:57 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:39:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000d00000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 448.299067][ T8572] usb 2-1: new high-speed USB device number 63 using dummy_hcd 03:39:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:58 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:39:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000f00000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 448.569372][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.609190][ T8532] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 448.609997][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 03:39:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 448.679181][ T8572] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 448.712506][ T8572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 448.753591][ T8526] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 448.790406][ T8572] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.819072][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.869594][ T8526] usb 1-1: config 0 descriptor?? [ 448.874670][ T8572] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 448.889455][ T8572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.899872][ T8572] usb 2-1: config 0 descriptor?? [ 448.940441][ T8572] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 448.951989][ T8572] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 449.024818][ T8532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.045946][ T8532] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.063568][ T8532] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 449.078457][ T8532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.098237][ T8532] usb 3-1: config 0 descriptor?? [ 449.347355][ T8532] usb 3-1: USB disconnect, device number 67 [ 449.629056][ T8526] usbhid 1-1:0.0: can't add hid device: -71 [ 449.635590][ T8526] usbhid: probe of 1-1:0.0 failed with error -71 [ 449.654214][ T8526] usb 1-1: USB disconnect, device number 63 03:39:59 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:39:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702001800000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:39:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 450.391277][ T31] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 450.809243][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.824019][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 450.834939][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 450.844161][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.857380][ T31] usb 3-1: config 0 descriptor?? [ 450.901062][ T31] ldusb 3-1:0.0: Interrupt in endpoint not found 03:40:00 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x8, 0x90, {0x90, 0x9, "210d430d0e2f2305aeb0b53b0a5f75a2d99108287667dfa050dcf3ec7d9f5201b4d1b305da338c731ba21af3456493e9dff0dd67ebf7c196091e207be8d73671c4862b1c2b4e88823bf273295fdd720164575bc333be765ba3dd6b5bd404b99926a841b3dc9241f76736825ce3944599446b6f0c58a751b58230822300e626cbcbb8157389c69c172209804e37b0"}}, &(0x7f0000000100)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "5aa91de44ff83841082e21fc8ca0d9f50c60a16fca5214ac285bcdab7093ba54ef1e151f18ddfbbc8220091943572c0cfcc80b708c4f9922964d6a8fd44073db669a7d8110905764e89b2972039c80637f2b79eb0b984c34e5de97ebbe2e44cfe14badb76746e57460f0ddfdde040e2758ce1b1f2ab05c732949e8ac62dfd165892af7a50f1626c5525dd18410276a47a7e35489744cb7c8a4e2a5464b2e3d60bf7a3c5ebdbd010e53389df67c362d964e82"}}, &(0x7f00000001c0)={0x0, 0xf, 0x86, {0x5, 0xf, 0x86, 0x5, [@generic={0x55, 0x10, 0xa, "a2e5ceb8fa7cf21f14224b64af685f872f00ea8e7efde2bc50128d73141999dc2f13848be9c3989b1685be7e2d6837b83cbfb4f0608301f97d7d50eba25b1c39a1ad9f3087f288f77ac5d89bb76324e6bfc3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x8, 0x6f, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "14d3a110edc4f136dc75caf936d1ed22"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3f, 0x4}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x3f, 0x0, "ce49ba2a", "229a3da4"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x8, 0x3, 0x4, 0x9, 0x9}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x57, "426e6a5c596338fb9e696d4884a02effbb43a3368636d13ae537eb3c1b1ca8f8c9c5b028dbc62aa0f7cdc4d7876e0fde0161c1091204e6dd830d2d0679f1b46c9a9000c78a661d500cb6b9a0b2c491fb20972d9d1cdb58"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x16a, 0x2}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "0324"}, &(0x7f0000000580)={0x40, 0xf, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "fe08"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0x21, 0x1}}) read$char_usb(r1, 0x0, 0x0) 03:40:00 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x6, {0x6, 0x0, "4bb97dd9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:40:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:00 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 450.954401][ T31] usb 2-1: USB disconnect, device number 63 [ 450.984106][ T31] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 451.104935][ T8269] usb 3-1: USB disconnect, device number 68 03:40:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702ff2f00000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:00 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 451.328914][ T8141] usb 1-1: new high-speed USB device number 64 using dummy_hcd 03:40:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 451.519349][ T31] usb 2-1: new high-speed USB device number 64 using dummy_hcd 03:40:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 451.699234][ T8141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.721761][ T8141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.741067][ T8141] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 451.750798][ T8141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.762646][ T8141] usb 1-1: config 0 descriptor?? [ 451.919166][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 451.931310][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 451.951853][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.965354][ T8532] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 451.973258][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 451.982506][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.999817][ T31] usb 2-1: config 0 descriptor?? [ 452.040528][ T31] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 452.060057][ T31] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 452.369095][ T8532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.379261][ T8532] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 452.392380][ T8532] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 452.402643][ T8532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.420774][ T8532] usb 3-1: config 0 descriptor?? [ 452.460568][ T8532] ldusb 3-1:0.0: Interrupt in endpoint not found [ 452.499071][ T8141] usbhid 1-1:0.0: can't add hid device: -71 [ 452.505307][ T8141] usbhid: probe of 1-1:0.0 failed with error -71 [ 452.519587][ T8141] usb 1-1: USB disconnect, device number 64 [ 452.670093][ T8526] usb 3-1: USB disconnect, device number 69 03:40:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702004000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:03 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:03 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x6, {0x6, 0x0, "4bb97dd9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:40:03 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 454.037603][ T8141] usb 2-1: USB disconnect, device number 64 03:40:03 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xd, 0x70, {0x70, 0x5, "b91133f4723fe696fc566e639b614cadb8c8099a6615c15a3cf731b7a0047bd6f0fd3e3b2420bffddf9f194bfb21862fe3fbcb5ca1423d8ca9378a16d010d1fc8f769159422055ff4f8843bb29f9454306b23454a2e88d63986be76e22b7ebe70c4278baf15f0f84019bf5979741"}}, &(0x7f0000000100)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "8a36010b4227d14564b821a34dd279affe0d45488aafbc0702eeb8eba1023a6bf67cf8dc06395162d20488dacb957cbca3ce06fa6ea904133d1055626edf942b95e9ad6fae2dd165f0c63313757d5f04f0af50fcd1954f28d93d8c6c0c61947523af04d8e3257f886dfa72fadff5ba91beab6f064011b772124800fa5f5646ebe09ff01102c5e56d6fc352049313b88a1ba8d5bf2fc46b67325fa9136f835413e2c38072979dd5b25708de80efb58a15c534c93d20c70659595acf66dc00f89edbd38b3fbb9198e838c796755df55379cd484b6ed555b139e093c639fe443540ee70"}}, &(0x7f0000000080)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x3f, 0xf000, 0x101, [0xc0c0, 0xc0, 0x0, 0x3f, 0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x8, 0x401}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x4, 0x6}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x25, 0x2, 0x9, 0x20, "952e2103", "f6614d4f"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0x9, 0x28, 0x4, 0x0, 0xc42}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x20, 0x3, 0x67, "13dbe1fa17efa653640a31a4d646e5481aca16540a99651d0600b7349851c5e544a287f30f782ab32e57133a4c228e69db458e348a16a431755fc3655a4dfc07e45ff87a06a6ce8570fe455794fdb32125d0e2104d00d7c3e26861eeefcd530d7e54be3947f8dc"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x60, 0x4}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "16fd"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="c4c631baea91"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "49e0"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x68}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x80}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 454.081569][ T8141] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702015900000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:03 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702006600000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 454.428775][ T8269] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 454.439981][ T8572] usb 3-1: new high-speed USB device number 70 using dummy_hcd 03:40:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:04 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 454.547101][ T8141] usb 2-1: new high-speed USB device number 65 using dummy_hcd 03:40:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702007000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 454.800509][ T8572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.822169][ T8572] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 454.849148][ T8269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.852698][ T8572] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 454.862153][ T8269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.881719][ T8269] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 454.893508][ T8269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.906166][ T8269] usb 1-1: config 0 descriptor?? [ 454.910577][ T8572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.928967][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 454.950632][ T8141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 454.969525][ T8572] usb 3-1: config 0 descriptor?? [ 454.986680][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 03:40:04 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) [ 455.014895][ T8141] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 455.027770][ T8572] ldusb 3-1:0.0: Interrupt in endpoint not found [ 455.074000][ T8141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.092850][ T8141] usb 2-1: config 0 descriptor?? [ 455.140215][ T8141] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 455.157970][ T8141] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 455.229683][ T8532] usb 3-1: USB disconnect, device number 70 [ 455.342784][T19297] udc-core: couldn't find an available UDC or it's busy [ 455.350155][T19297] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 455.364474][ T31] usb 2-1: USB disconnect, device number 65 [ 455.390509][ T31] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 455.678827][ T8269] usbhid 1-1:0.0: can't add hid device: -71 [ 455.685023][ T8269] usbhid: probe of 1-1:0.0 failed with error -71 [ 455.696580][ T8269] usb 1-1: USB disconnect, device number 65 03:40:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x8, {0x8, 0x0, "4bb97dd92025"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:40:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 456.178719][ T31] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 456.438689][ T8141] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 456.618760][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 456.629327][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 456.641302][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.661533][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 456.672812][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.689598][ T31] usb 2-1: config 0 descriptor?? [ 456.729934][ T31] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 456.756154][ T31] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 456.799323][ T8141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.814261][ T8141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.825873][ T8141] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 456.835633][ T8141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.846295][ T8141] usb 1-1: config 0 descriptor?? [ 456.930493][T19297] udc-core: couldn't find an available UDC or it's busy [ 456.937461][T19297] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 456.945866][ T8531] usb 2-1: USB disconnect, device number 66 [ 456.957222][ T8531] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:06 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) write$binfmt_elf32(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xb0, 0x1, 0x0, 0x5, 0x6, 0x3, 0x6, 0x1f, 0x230, 0x38, 0x8a, 0x8, 0x3, 0x20, 0x1, 0x8, 0xffff, 0x9}, [{0x3, 0x6, 0x3, 0x1f4f, 0x80000000, 0x4, 0x817, 0xd563}], "94484adb5e30821033d59b0e4bbc2e1321ddf38c9071bf1cca9b8863c79d0a60d332c32e41bf7f7e8326478777e2f1d46b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x789) 03:40:06 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:06 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:06 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 457.378940][ T8572] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 457.530526][ T8531] usb 2-1: new high-speed USB device number 67 using dummy_hcd 03:40:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 457.589025][ T8141] usbhid 1-1:0.0: can't add hid device: -71 [ 457.596696][ T8141] usbhid: probe of 1-1:0.0 failed with error -71 [ 457.650940][ T8141] usb 1-1: USB disconnect, device number 66 03:40:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 457.739113][ T8572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.760083][ T8572] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 457.815807][ T8572] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 457.840176][ T8572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.854958][ T8572] usb 3-1: config 0 descriptor?? [ 457.949012][ T8531] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 457.977862][ T8531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 457.993580][ T8531] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.008122][ T8531] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 458.029295][ T8531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:40:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x8, {0x8, 0x0, "4bb97dd92025"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:40:07 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 458.049578][ T8531] usb 2-1: config 0 descriptor?? [ 458.110208][ T8531] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 458.112361][ T8572] usb 3-1: USB disconnect, device number 71 [ 458.148102][ T8531] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 458.333817][ T8269] usb 2-1: USB disconnect, device number 67 [ 458.339851][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 458.372952][ T8269] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 458.489187][ T8531] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 458.898739][ T8531] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.912251][ T8531] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.924218][ T8531] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 458.934488][ T8531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.948333][ T8531] usb 1-1: config 0 descriptor?? [ 459.148621][ T8269] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 459.548846][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 459.559390][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 459.572367][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.585460][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 459.594721][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.611662][ T8269] usb 2-1: config 0 descriptor?? [ 459.660146][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 459.683892][ T8269] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 459.715698][ T8531] usbhid 1-1:0.0: can't add hid device: -71 [ 459.722715][ T8531] usbhid: probe of 1-1:0.0 failed with error -71 [ 459.740727][ T8531] usb 1-1: USB disconnect, device number 67 03:40:09 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:09 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 459.876658][ T1265] usb 2-1: USB disconnect, device number 68 [ 459.910351][ T1265] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:09 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055300)={0xfff, [{r3}, {0x0, r4}, {}, {r2}, {r2}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {}, {}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {r3, r4}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}], 0x0, "4de5e83826fe0a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r3, 0x800, 0x3f, 0x6, 0xf9, 0x8, 0x4, 0x4, 0x1, 0x44c, 0x10000, 0xffffffffffff1245, 0x3, 0x9, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) 03:40:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0x0, 0x8, {0x8, 0x0, "4bb97dd92025"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 460.308753][ T8141] usb 3-1: new high-speed USB device number 72 using dummy_hcd 03:40:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 460.469523][ T1265] usb 2-1: new high-speed USB device number 69 using dummy_hcd 03:40:10 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70201cf00000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 460.678746][ T8526] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 460.688976][ T8141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 03:40:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 460.725662][ T8141] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 03:40:10 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 460.767315][ T8141] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 460.806930][ T8141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.828939][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 460.856156][ T8141] usb 3-1: config 0 descriptor?? [ 460.868642][ T1265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 03:40:10 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 460.905971][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.960402][ T1265] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 460.989333][ T1265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:40:10 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 461.033192][ T1265] usb 2-1: config 0 descriptor?? [ 461.093491][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.121148][ T1265] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 461.148308][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.174429][ T1265] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 461.198785][ T8526] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 461.213762][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.229878][ T8141] usb 3-1: USB disconnect, device number 72 [ 461.250176][ T8526] usb 1-1: config 0 descriptor?? [ 461.370991][ T1265] usb 2-1: USB disconnect, device number 69 [ 461.395364][ T1265] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 461.988721][ T8526] usbhid 1-1:0.0: can't add hid device: -71 [ 461.994777][ T1265] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 462.002797][ T8526] usbhid: probe of 1-1:0.0 failed with error -71 [ 462.017947][ T8526] usb 1-1: USB disconnect, device number 68 [ 462.178863][ T8141] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 462.368630][ T1265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.378952][ T1265] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.387945][ T1265] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 462.400016][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.414517][ T1265] usb 3-1: config 0 descriptor?? [ 462.548550][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 462.559583][ T8141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 462.574365][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.588638][ T8141] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 462.597678][ T8141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.613128][ T8141] usb 2-1: config 0 descriptor?? [ 462.649969][ T8141] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 462.665306][ T8141] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 462.677020][ T1265] usb 3-1: USB disconnect, device number 73 03:40:12 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:12 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:12 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:12 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090226000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) read$char_usb(r0, 0x0, 0x0) [ 462.857019][ T8269] usb 2-1: USB disconnect, device number 70 [ 462.914122][ T8269] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 463.019096][T19657] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:40:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:12 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000020000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 463.508584][ T8269] usb 2-1: new high-speed USB device number 71 using dummy_hcd 03:40:13 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:13 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055300)={0xfff, [{r3}, {0x0, r4}, {}, {r2}, {r2}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {}, {}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {r3, r4}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}], 0x0, "4de5e83826fe0a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r3, 0x800, 0x3f, 0x6, 0xf9, 0x8, 0x4, 0x4, 0x1, 0x44c, 0x10000, 0xffffffffffff1245, 0x3, 0x9, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) [ 463.699967][ T1265] usb 3-1: new high-speed USB device number 74 using dummy_hcd 03:40:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:13 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:13 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 463.932900][ T8269] usb 2-1: config index 0 descriptor too short (expected 38, got 34) [ 463.957335][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 464.011996][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 464.024921][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd 03:40:13 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 464.058970][ T1265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.062772][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.080091][ T1265] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.111073][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 464.128462][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.167257][ T1265] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 464.168729][ T8269] usb 2-1: config 0 descriptor?? [ 464.209265][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.238229][ T1265] usb 3-1: config 0 descriptor?? [ 464.280810][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 464.316273][ T1265] ldusb 3-1:0.0: Interrupt in endpoint not found [ 464.324027][ T8269] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 464.438836][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 464.456923][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 464.497793][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.498971][ T1265] usb 2-1: USB disconnect, device number 71 [ 464.519976][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 464.529029][T19670] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -19 [ 464.551825][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.567934][ T1265] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 464.585751][ T31] usb 1-1: config 0 descriptor?? [ 464.604624][ T8526] usb 3-1: USB disconnect, device number 74 [ 464.644778][ T31] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 464.675597][ T31] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 464.881770][ T31] usb 1-1: USB disconnect, device number 69 [ 464.915278][ T31] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 465.288389][ T8526] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 465.648610][ T8526] usb 2-1: config index 0 descriptor too short (expected 38, got 34) [ 465.656714][ T8526] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 465.667728][ T8526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 465.678755][ T8526] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.691749][ T8526] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 465.700897][ T8526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.711788][ T8526] usb 2-1: config 0 descriptor?? [ 465.749857][ T8526] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 465.774299][ T8526] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:40:15 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x57, {0x57, 0xc, "3863a740d62a4fc670cf5554612def07134f00f66e05733e5c8299a78d922d7b7fa1f5b2b3891d3d0865be42e7f79bac46b66f474243df53747ce907a3de41597f58b79b7334a54dd178e860bbe632a3c981f19874"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x3, 0xff, "0bd55064", "3df98173"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x4, 0x6, 0x4, 0x2, 0x0, 0x9}}}, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x6, 0x9d, "dbef9b5dcd4f2a003202a2feae51bbc1a11fe39da6a15ca7c07ce240015ec03843d8fd4fe9c3ab1d65540af13e21a47d5f2c50fd7acc324990d7e1cd6a6b17c0a3c34f995451c8c02a908ba278c9d37e96460c3342c8ac52d8ac3ee87037004fdb9fcc6bd905b52401b9989a32210186ed77f36875c45577ebd48ffd5aee9e92f9c52bf39da7150fa1fc5d8877495d7a153d2a33fe370c1f144cc0204b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x7, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000440)={0x40, 0xb, 0x2, "ca45"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x200}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @random="38dc1d72c0a6"}, &(0x7f0000000500)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x19, 0x2, "23d8"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x80}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, &(0x7f0000000740)={0x80, 0x5, 0x4b, {0x4b, 0x30, "ca4aa387e305fc1c06a1d3cf338271085d0d44440fdefb7e2c1fe8da809b1f2dbf52710bb197a61bf4419c4037863c09134f50b9a9511636a8eb8176422d748f52d74873de0a792c7e"}}, &(0x7f00000007c0)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "769e3c5e062fcdefc57dd845f33e526da04f0af18ced49d5f415c671f1db05f4c5af40bbff64fc95646c490fed047dff1ae896402c810ec76d81ab63935a98c3047f8efd710e345a47ebbfd1b04d68355b64d7d14d5666d12b9979ccdeec3e6e02922f9bc926a5b2cad766422e9aa88a14d149f34be8d1005fd60af5c92aa8c7a018a71bb08232e98c247c0e0ac9411eb66a4d76344e4f688d17c1bad625f9cba102a7a066c4f97c939bf1a4fd6b91fa8d8912"}}, &(0x7f0000000880)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "6acd7635151ce843314409354f76c7f1"}, @ptm_cap={0x3}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x80, 0x2, "f4cdb272", "f69f5d78"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x97, 0x4, 0x1f, 0x3, 0x6c, 0x5, 0x4}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x20, 0x0, 0x36, "4ffd067b30ef8a6a770e500c0582f8f99cfc7e055231ed92882f722ba4861ed556a473371b0dc77d728597d5085a757a1eecb9c5035f"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x94}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1000, 0x2}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x66}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "7ce4"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0xffc6}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "d6b8"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) read$char_usb(r1, 0x0, 0x0) 03:40:15 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1703", 0x2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:15 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055300)={0xfff, [{r3}, {0x0, r4}, {}, {r2}, {r2}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {}, {}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {r3, r4}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}], 0x0, "4de5e83826fe0a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r3, 0x800, 0x3f, 0x6, 0xf9, 0x8, 0x4, 0x4, 0x1, 0x44c, 0x10000, 0xffffffffffff1245, 0x3, 0x9, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) [ 465.956388][ T1265] usb 2-1: USB disconnect, device number 72 [ 465.973957][ T1265] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:15 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 466.378671][ T8526] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 466.400430][ T8141] usb 3-1: new high-speed USB device number 75 using dummy_hcd 03:40:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 466.488653][ T1265] usb 2-1: new high-speed USB device number 73 using dummy_hcd 03:40:16 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000001010000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 466.749435][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 466.768982][ T8141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.788442][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 466.810340][ T8141] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.832920][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.855844][ T8141] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 466.865397][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 466.884230][ T1265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 466.902459][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 466.912570][ T8141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.936465][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.953011][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.968131][ T8141] usb 3-1: config 0 descriptor?? [ 466.976839][ T8526] usb 1-1: config 0 descriptor?? [ 466.988955][ T1265] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 467.001316][ T1265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.011777][ T8141] ldusb 3-1:0.0: Interrupt in endpoint not found [ 467.039833][ T8526] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 467.054496][ T1265] usb 2-1: config 0 descriptor?? [ 467.081206][ T8526] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 467.128737][ T1265] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 467.148782][ T1265] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 467.215973][ T31] usb 3-1: USB disconnect, device number 75 [ 467.317567][ T1265] usb 1-1: USB disconnect, device number 70 [ 467.326536][ T1265] ldusb 1-1:0.0: LD USB Device #0 now disconnected 03:40:18 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000200)="5d02fe31ed1a008d8af286e0acc8b21de0e0daf4c20bdee46e9a6b14f6ef5bd8a044a4f467aa79adc05cdef4aee51477c586978b143c536fcd2002c17404d7592a69553d484c6af4347380fa2d325730154fc9305c0375b19c8d1c069dcbeae75540d1d69f3fbb199ebe514a4da44676eec2b04bac4e9b704b1301", 0x7b) syz_usb_connect$cdc_ncm(0x2, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x9, 0x0, 0xc3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "80b98b"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x3, 0x4, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0xe}, [@obex={0x5, 0x24, 0x15, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x800}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x3, 0x74}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x6, 0x1}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x7f, 0x0, 0x20, 0x9}, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="050f2a00041410041fa00ec5392b6190c4f32f4aa8b915a1b10710021a80080003100b071002189500009f919d8c31a633983e97e5d59c75f06af55cacf1277bb2b2e7acad4a910a4b43aefe421295c323bdcb8cfe0e8ac239668e99863c2cbc0956716f34eebdae2803742c"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}]}) 03:40:18 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:18 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1703", 0x2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:18 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:18 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055300)={0xfff, [{r3}, {0x0, r4}, {}, {r2}, {r2}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {}, {}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {r3, r4}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}], 0x0, "4de5e83826fe0a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r3, 0x800, 0x3f, 0x6, 0xf9, 0x8, 0x4, 0x4, 0x1, 0x44c, 0x10000, 0xffffffffffff1245, 0x3, 0x9, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) [ 469.067290][ T1265] usb 2-1: USB disconnect, device number 73 [ 469.121925][ T1265] ldusb 2-1:0.0: LD USB Device #1 now disconnected 03:40:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:18 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 469.508303][ T8141] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 469.529634][ T8572] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 469.648316][ T1265] usb 2-1: new high-speed USB device number 74 using dummy_hcd 03:40:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 469.879039][ T8141] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 469.899519][ T8572] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.929780][ T8141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 469.947585][ T8572] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.019315][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 03:40:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 470.088225][ T8141] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.111456][ T1265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 470.143202][ T8572] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 470.218066][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.232226][ T8572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.241167][ T8141] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 470.259136][ T8572] usb 3-1: config 0 descriptor?? [ 470.264240][ T8141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.277835][ T1265] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 470.299722][ T8572] ldusb 3-1:0.0: Interrupt in endpoint not found [ 470.314597][ T8141] usb 1-1: config 0 descriptor?? [ 470.333392][ T1265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.365414][ T1265] usb 2-1: config 0 descriptor?? [ 470.389659][ T8141] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 470.436041][ T1265] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 470.461335][ T8141] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 470.477706][ T1265] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 470.503021][ T8531] usb 3-1: USB disconnect, device number 76 [ 470.623276][T19882] udc-core: couldn't find an available UDC or it's busy [ 470.647560][T19882] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 470.702057][ T1265] usb 1-1: USB disconnect, device number 71 [ 470.724324][ T8526] usb 2-1: USB disconnect, device number 74 [ 470.733314][ T1265] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 470.751191][ T8526] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 471.521133][ T8531] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 471.898053][ T8531] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 471.908602][ T8531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 471.921923][ T8531] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 471.936099][ T8531] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 471.945547][ T8531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.955601][ T8531] usb 2-1: config 0 descriptor?? [ 471.999392][ T8531] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 472.015529][ T8531] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:40:21 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:21 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1703", 0x2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000080000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:21 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055300)={0xfff, [{r3}, {0x0, r4}, {}, {r2}, {r2}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {}, {}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {r3, r4}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}], 0x0, "4de5e83826fe0a"}) [ 472.155163][ T8531] usb 2-1: USB disconnect, device number 75 03:40:21 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x9, 0x55, {0x55, 0x22, "df030ac2debf18129830fa8e463fd6b20506e3e6061b8cb2bfe6fd968f4214b032b0e0c47761ceff094d9b91670a5ba8594f63085667567e91d4930b5d934872f3209f31816708c4ee8db14566387951592067"}}, &(0x7f0000000280)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "e0f818cbe7a7c73855ff83ca7a372160b1c856fa2249c6d545c614c4bfa11f5ba682c5e12af6ca08301d4125b9efe2e9d3417361a835142d97f8a5e517b6f6cbefc1b9952d1e2de12e64601c953a0e558c87b4b0948eecb57f776cfdd273ba75e6447be87d2ee3e0e8fe1b385cb8160edc749d69916a18728d178e8942ef9eadba2affd51b561b59d4d61c8fe791c3a7b6afa0627c3ad84475b8341a1d1405635d4727cadc2f0d7dae35df904e"}}, &(0x7f0000000340)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x8, 0x880f, 0xff81, [0x0, 0x0, 0xc09f, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x52, 0x3, 0x8, 0x7, 0x35}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7f, 0xfe, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x22, 0xff, 0x0, 0x4, 0x1f}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x2, 0x4, 0x9}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x3f, 0x0, "fd01da82", "093b001e"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x9, 0x8, 0x9, 0x401, 0x2}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0xb, 0x6f, "3b2ac766ef5cba9d4fefc0ce2e4fd3b3bee2953b0794a40c03d479b9de98c279cc2f2a538262e4b9603deb45f57e29384abd7c0dd2052b1a442898ea560ed5d070ccc4ecfa41a3cc75cbd38b85dc6894cbd8d2bea2dab917435ab825485d1396006b12d3dc9b42a86b5f38615ae172"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x47}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x10, 0x10, [0xf0f0]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0xb, 0x2, '|K'}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "b827"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x47}}) r1 = syz_usb_connect(0x4, 0x15b, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x46, 0x5a, 0x83, 0x8, 0x10c4, 0x813d, 0x2c0e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x1, 0x1d, 0x55, 0x80, 0x1, [{{0x9, 0x4, 0x22, 0x8, 0x4, 0xc8, 0x69, 0x0, 0xff, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'T7'}, {0x5, 0x24, 0x0, 0xf800}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x40, 0x8001, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8a, 0xc1, 0x100}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x2, 0x8, 0x1}]}], [{{0x9, 0x5, 0x8, 0x2, 0x400, 0x5, 0x3, 0x6, [@generic={0xe4, 0x1, "cc4433171952853ddecbca1bc88f7281b0c71f9c500434d6fe1296f06f06da6e8e49b9d9aef6452ba5bd980624dc882b03fdbbe48ad0d1916cd2def20504fa11abc19d28164ba5e2e94f907df79bbffdf94bea3b323d13a6816c1ec45aba5798851ccfe82f6917e1d9ac0a838bf2459ade00cb1fe66ef11d95dca38bd01a2505c2ee41ce6f3d3da15bfb53539e5c9220b2fe205d29b3c9f4bf5e6fb5632e0cd0d93059fc14e2a6513f985d721124b16d41344599904723d1c99d90f69c7194e1028d64ed413c159bdb914de216f7e20acf89a7a82b5d7e9136ff40fd5ed0cb37c49a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xbf, 0x40, 0x6}}, {{0x9, 0x5, 0x52b22bdae5d97422, 0x10, 0x8, 0x1, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x1, 0xfd, 0x3}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x9a, 0x83, 0x4, 0x8, 0x80}, 0x1b, &(0x7f0000000b40)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x3, 0x81, 0x3, 0x1f}, @wireless={0xb, 0x10, 0x1, 0x8, 0x84, 0x2, 0x0, 0x8}]}, 0x5, [{0xb8, &(0x7f0000000b80)=@string={0xb8, 0x3, "9fb24bb09954b94bfb6464a9bebb7e2474412fc206054f7c70854f409312c7d0126024ca5e622bc789b4f56cc3acc1c52a0fd2ee1ee2c653f86aefea1ea5d7ff80e7849b71b4abe863e01f6d1071f7a5879343ece34c62879864adb9e1b9cac7cbbafb99e646a672babd861ed60b934cbaefa812a497f41f7686874f9fa4b4f7b943d272c84190b4c0dfda3feb345791145eab4703413862d9e135445625f1f04147ea8c905a8a45646be10b224025e52945a575482c"}}, {0xa6, &(0x7f0000000c40)=@string={0xa6, 0x3, "0000e25dc87ec89a247b672e438ce7c3c7d30de593489f6212ec9c69aeb35b60ed5fe8bbff2c79614996fac4dcf45cdef600f2f2ac6b8c5e112d95fde84eab8bf9316ee65f7ef569488d8c5f9e6d949f88296bff541ebc4728542524d370012652ea8c2abc62169d2a1559a4ac0f91374e61f13c7b99061f823914c559d4598d26c6c0c1a46b7c4e6a4c90f3ea0565ab232fb8351e2352b0212b67511c7d44e3add2fdb3"}}, {0x8e, &(0x7f0000000d00)=@string={0x8e, 0x3, "39c6625a69a33337618ae428465cf1fadae3a5773df28121d7775bb7dc54d67ad2ed2f47d7be8271edec1b95ba7876df0e8172b6e7ccabb5bda6a88cfd8afa6425bfe9383c34261ccdb3d5f599d55a99c7273a3ecf18905d490db1006f3a833854b7ef4d9a5d010f8d147432072107d6e17f7f26fcaf556f30ee2ad1bdfba47758461f3118b37d6ec4fda3c6"}}, {0x8b, &(0x7f0000000dc0)=@string={0x8b, 0x3, "4becae0c385f82cbe0e76153ce3e99c1176368c204f294a804a78455e4d7ca52f5901c5e38acc8e3ece20e495ecaf08dfede6e889cc3e6f89e14c1345d1b1af6568e0391b9a6ef0ed04a21573e16f025660bd95fb1bb14ddbc27d53408ff573ef8b9edab8dc3f63c15e5d5d06e034a76e5b34c80e1eda16851222775eae675da8942d3dfb8e4c74929"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_control_io(r1, &(0x7f00000010c0)={0x2c, &(0x7f0000000f40)={0x0, 0x30, 0x21, {0x21, 0x31, "4028b1c7a8a116c4eb9c7c3e13e794ba69d5970739bb26b44c301f4076deb0"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000fc0)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x1, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x77, 0x0, 0x85}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xff, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x8000, 0xff00, 0x68, [0xc0, 0x3f00, 0xc0c0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf1, 0x1, 0x5}]}}, &(0x7f0000001040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x1f, 0x8, "a4f3fda7", "215f7f87"}}, &(0x7f0000001080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x5, 0x79, 0x3f, 0x0, 0xf8ae}}}, &(0x7f0000001500)={0x84, &(0x7f0000001100)={0x0, 0xc, 0x2d, "b9c0c0fda18e492385e6d7e77e770edec59436c0c7921f16ff90ae2456939a8dcfd7c6a5ebbaa2518a291c0cb1"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000011c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001200)={0x20, 0x0, 0x8, {0x120, 0x10, [0xffff]}}, &(0x7f0000001240)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001280)={0x40, 0x9, 0x1, 0xc2}, &(0x7f00000012c0)={0x40, 0xb, 0x2, "c645"}, &(0x7f0000001300)={0x40, 0xf, 0x2}, &(0x7f0000001340)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001380)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000013c0)={0x40, 0x19, 0x2, "f17b"}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0xba69}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001480)={0x40, 0x1e, 0x1, 0xff}, &(0x7f00000014c0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x60, 0x59, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x1, 0x3, 0xa2, {0x9, 0x21, 0x8001, 0x12, 0x1, {0x22, 0xd15}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x81, 0x2b}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0xbe, 0x7, 0x10, 0xb6}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1, 0xe02}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x814}}, {0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "117c5105fcd488ccadc3db8dfc7a3fb3722de80676955a8176474f2d5538d80d0158b733ad33f439489e42"}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) read$char_usb(r2, 0x0, 0x0) [ 472.205700][ T8531] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 472.554574][ T8526] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 472.633572][ T8141] usb 1-1: new high-speed USB device number 72 using dummy_hcd 03:40:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 472.757877][ T8531] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 472.949994][ T8526] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.036387][ T8141] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 473.047246][ T8526] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 03:40:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 473.108810][ T8141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 473.147764][ T8526] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 473.156836][ T8526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.177647][ T8141] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.190765][ T8531] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 03:40:22 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="170304", 0x3, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:22 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 473.214896][ T8531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 473.221532][ T8141] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 473.247296][ T8526] usb 3-1: config 0 descriptor?? [ 473.270726][ T8141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.288680][ T8531] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.299112][ T8526] ldusb 3-1:0.0: Interrupt in endpoint not found [ 473.327645][ T8141] usb 1-1: config 0 descriptor?? [ 473.373081][ T8531] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 473.399315][ T8141] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) 03:40:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 473.416885][ T8141] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 473.442311][ T8531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.503517][ T8141] usb 3-1: USB disconnect, device number 77 [ 473.545934][ T8531] usb 2-1: config 0 descriptor?? [ 473.612319][ T1265] usb 1-1: USB disconnect, device number 72 [ 473.648159][ T1265] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 473.702220][ T8531] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) 03:40:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 473.828990][ T8531] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 473.900369][T19988] udc-core: couldn't find an available UDC or it's busy [ 473.908307][T19988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 473.988794][T19988] udc-core: couldn't find an available UDC or it's busy [ 474.050638][T19988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:40:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 474.172650][ T1265] usb 2-1: USB disconnect, device number 76 [ 474.211601][ T1265] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:23 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055300)={0xfff, [{r3}, {0x0, r4}, {}, {r2}, {r2}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {}, {}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {r3, r4}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}], 0x0, "4de5e83826fe0a"}) 03:40:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:23 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 474.687904][ T8531] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 474.695584][ T31] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 474.967612][ T7808] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 475.117891][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.128131][ T8531] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 475.138765][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.151833][ T8531] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 475.162860][ T8531] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.176511][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 475.186344][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.195170][ T8531] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 475.207094][ T31] usb 3-1: config 0 descriptor?? [ 475.215894][ T8531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.227722][ T8531] usb 1-1: config 0 descriptor?? [ 475.279267][ T8531] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 475.290049][ T31] ldusb 3-1:0.0: Interrupt in endpoint not found [ 475.307278][ T8531] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 475.327936][ T7808] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 475.352344][ T7808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 475.364738][ T7808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.379805][ T7808] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 475.391303][ T7808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.408874][ T7808] usb 2-1: config 0 descriptor?? [ 475.459162][ T7808] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 475.470584][ T7808] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 475.512036][ T7808] usb 3-1: USB disconnect, device number 78 [ 475.537839][ T8531] usb 1-1: USB disconnect, device number 73 [ 475.552912][ T8531] ldusb 1-1:0.0: LD USB Device #0 now disconnected 03:40:25 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/77, 0x4d) 03:40:25 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="170304", 0x3, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:25 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 475.623845][ T8269] usb 2-1: USB disconnect, device number 77 [ 475.632614][ T8269] ldusb 2-1:0.0: LD USB Device #1 now disconnected 03:40:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:25 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055100)) 03:40:25 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:25 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 476.187419][ T8269] usb 2-1: new high-speed USB device number 78 using dummy_hcd 03:40:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 476.537977][ T8531] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 476.545808][ T31] usb 1-1: new high-speed USB device number 74 using dummy_hcd 03:40:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="170304", 0x3, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) [ 476.611780][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 476.654480][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 03:40:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 476.739781][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.803314][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 476.826814][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.873832][ T8269] usb 2-1: config 0 descriptor?? [ 476.919113][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 476.946594][ T8269] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 476.977410][ T8531] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.988063][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 477.004607][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.019393][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 477.043702][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.065932][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 477.076832][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.086131][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 477.099520][ T8531] usb 3-1: config 0 descriptor?? [ 477.104668][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.131692][ T31] usb 1-1: config 0 descriptor?? [ 477.160205][ T8531] ldusb 3-1:0.0: Interrupt in endpoint not found [ 477.183666][ T31] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 477.204971][ T31] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 478.711780][ T8531] usb 1-1: USB disconnect, device number 74 [ 478.719829][ T7808] usb 3-1: USB disconnect, device number 79 [ 478.728710][ T8531] ldusb 1-1:0.0: LD USB Device #1 now disconnected 03:40:28 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/118, 0x76) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) read$char_usb(r0, 0x0, 0x0) 03:40:28 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:28 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r1, 0x0, 0x400004ffe0, 0x0) [ 478.799046][ T8141] usb 2-1: USB disconnect, device number 78 [ 478.848811][ T8141] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000200000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:28 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)) 03:40:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:28 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 479.337124][ T8141] usb 2-1: new high-speed USB device number 79 using dummy_hcd 03:40:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:29 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 479.536922][ T8141] usb 2-1: device descriptor read/64, error 18 [ 479.586956][ T1265] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 479.628444][ T8526] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 479.806924][ T8141] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 479.977204][ T1265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.988893][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 479.999884][ T8141] usb 2-1: device descriptor read/64, error 18 [ 480.006098][ T1265] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.019438][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 480.030860][ T1265] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 480.040322][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.053295][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.061466][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 480.071250][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.081109][ T1265] usb 3-1: config 0 descriptor?? [ 480.105259][ T8526] usb 1-1: config 0 descriptor?? [ 480.118473][ T1265] ldusb 3-1:0.0: Interrupt in endpoint not found [ 480.125163][ T8141] usb usb2-port1: attempt power cycle [ 480.148560][ T8526] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 480.162015][ T8526] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 480.324669][ T8531] usb 3-1: USB disconnect, device number 80 [ 480.355260][ T8526] usb 1-1: USB disconnect, device number 75 [ 480.379546][ T8526] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 480.556927][ T8141] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 480.726908][ T8141] usb 2-1: device descriptor read/8, error -61 [ 480.996772][ T8141] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 481.167069][ T8141] usb 2-1: device descriptor read/8, error -61 [ 481.288001][ T8141] usb usb2-port1: unable to enumerate USB device 03:40:31 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0xf7, {0xf7, 0xf, "dfe14d975201e2161b00c516e4eed41518adafda24df5d07f1ac0cbc9a35b8ef3fc9a667fadc5ba6a43c143d1beb040e58879fa84a31488d52832d0142b46c4ddb08c7c87414f164f5cd3c646bf558be4f946192f49a23bb91be175fade9c05a6ef95ed412961c04dfd32949335de015838fd7880b42c684e1e136bcb3ea1591b855b182571d3616c97fa8da3150fafcd22f0e028e50f61e66bf79e83fb5655743b2cb154be771dd267ffffce049b06a603f6f0736d46e6e3a4cd96f4f50f11ee0aef01884540cae4e3bcb646acad4e3c34d70fe9242403b9cb69e61a551f642885c8165f9223333a27a3ad852268c483dd1c2d4f0"}}, &(0x7f0000000200)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "36f06bd3f81dc106fdab74ccf4966911502dadef7aff21a0a9e0b6680173c53f5759b071bdacdcbe99697d756a8623fe5d98688381cc6c08f473cf617f258cd1757e03a254b09613ef2fe942671cedbb2d798fd2285d832632f961b3ca1e085f1176f674e0909396e8287cc64bcaf05e18a9901cea5a97934b829f104246ca241a819854d05abfb1090d3b084430c49ea028383bb476613c420093b306c12728f7272d2279426e5cd177a510c4b013c5ed8ce019f9b00aa60ed43ba1357b1ee6908d29578b05ab42999d138832ef354658e1836453981b12c2882b4bc3076c7e7f989a4bf73954744fdd551a827d6a6f07f18a939017f6"}}, &(0x7f0000000000)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "018ea62f0bc7c329967896c653cd5ce5"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9ba8a774571473540ac65a06a366d06e"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x81, 0x5, "4bc8b8fe", "fef1c00f"}}, &(0x7f0000000080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x7, 0xb9, 0x5, 0xfffe, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x11, 0x8a, "ce3d76fd1ab2df480b29233dfb455ffbb6e782de62366c9d6229e25f5a533f839596b3f1a0e2dda4888f7f2905b6158517fc8f638c631d86e1c8d6cfeec611c9cc566f2b259a76a17368a9697b206b57a5144e4830c4eb096d0e9482cba4e0d90d14d06b020bcb98f60beecd9419a661618c871559b0e89548c9686376de2d4b38e83de35747a6efebd3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "9ff9"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="44811f97f1d8"}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "8294"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xfb}, &(0x7f0000000740)={0x40, 0x1e, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) 03:40:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:31 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:31 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r1, 0x0, 0x400004ffe0, 0x0) 03:40:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:31 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:40:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:31 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:31 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 482.216766][ T8531] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 482.246748][ T8526] usb 1-1: new high-speed USB device number 76 using dummy_hcd 03:40:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:31 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 482.356792][ T8141] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 482.617098][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 482.628486][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 482.642491][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.646864][ T8531] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.658701][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 482.673801][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 482.676363][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.692277][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.694668][ T8526] usb 1-1: config 0 descriptor?? [ 482.736973][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 482.749862][ T8526] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 482.758327][ T8531] usb 3-1: config 0 descriptor?? [ 482.771442][ T8141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 482.791879][ T8526] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 482.808334][ T8531] ldusb 3-1:0.0: Interrupt in endpoint not found [ 482.814498][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.838837][ T8141] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 482.849273][ T8141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.873596][ T8141] usb 2-1: config 0 descriptor?? [ 482.926836][ T8141] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 482.955848][ T8141] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 482.982483][ T8141] usb 1-1: USB disconnect, device number 76 [ 483.000223][ T8141] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 483.011337][ T8531] usb 3-1: USB disconnect, device number 81 03:40:34 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:34 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r1, 0x0, 0x400004ffe0, 0x0) 03:40:34 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:40:34 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0xd, 0x19, {0x19, 0x9, "3218b1caa7de2043b9f85d65d8c04df93cd28e4496a69f"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000100)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0xff00, 0x2, [0x80bf00, 0x3f00, 0x7f8000, 0x3f00]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xd4, 0x6, 0x3, 0x1e00, 0x5, [0x0, 0xc0, 0xc000, 0xff3fff, 0x3f00, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x2, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x79, 0x18, 0x5, 0x6, "2a334190", "5fe4528f"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x1, 0x1, 0x1, 0x4, 0x83b1}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x40, 0x14, 0x4d, "a28bb682ad9fa5af1bc67c1e5aac7a6a2ddd6a388d26ad1e9a2b720e41dd74371dab33c6c3eed2973f4e62f655b8cfccfe455b9b09bace3ab3fec18a1f49f73b4b15e795204e9c9f35667ae547"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1000, 0x2}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x5c3d}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000400)={0x40, 0xb, 0x2, "fa02"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000480)={0x40, 0x13, 0x6, @local}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "9324"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x1a}}) 03:40:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 484.959885][ T8141] usb 2-1: USB disconnect, device number 83 [ 485.026780][ T8141] ldusb 2-1:0.0: LD USB Device #1 now disconnected 03:40:34 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:34 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:34 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 485.326278][ T8531] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 485.334012][ T8269] usb 1-1: new high-speed USB device number 77 using dummy_hcd 03:40:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000003730000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:35 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:35 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 485.526376][ T8141] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 485.742575][ T8269] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 485.753386][ T8531] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.773677][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 485.785656][ T8269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 485.802686][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.810762][ T8269] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.825384][ T8269] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 485.835541][ T8531] usb 3-1: config 0 descriptor?? [ 485.841410][ T8269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.866868][ T8269] usb 1-1: config 0 descriptor?? [ 485.878009][ T8531] ldusb 3-1:0.0: Interrupt in endpoint not found 03:40:35 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) [ 485.896682][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 485.917721][ T8269] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 485.926918][ T8141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 485.974207][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.974749][ T8269] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 486.004759][ T8141] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 486.024199][ T8141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.052662][ T8141] usb 2-1: config 0 descriptor?? [ 486.082648][ T8269] usb 3-1: USB disconnect, device number 82 [ 486.111580][ T8141] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 486.142744][ T8141] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 486.182196][ T8141] usb 1-1: USB disconnect, device number 77 [ 486.195053][ T8141] ldusb 1-1:0.0: LD USB Device #0 now disconnected 03:40:36 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) [ 486.966126][ T8141] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 487.336595][ T8141] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 487.347096][ T8141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 487.360672][ T8141] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.375052][ T8141] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 487.384960][ T8141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.399752][ T8141] usb 1-1: config 0 descriptor?? [ 487.440500][ T8141] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 487.453262][ T8141] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 487.643074][ T8269] usb 1-1: USB disconnect, device number 78 [ 487.667078][ T8269] ldusb 1-1:0.0: LD USB Device #0 now disconnected 03:40:37 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="0013a16e4011dc0a0f3510ff9500000001090222000100000000090400400149284800090500000000000000070593d951"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 03:40:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:37 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:37 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:37 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) [ 488.063477][ T8269] usb 2-1: USB disconnect, device number 84 [ 488.098746][ T8269] ldusb 2-1:0.0: LD USB Device #1 now disconnected 03:40:37 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702ffffff900000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:37 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000001990000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:38 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 488.485910][ T8141] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 488.556119][ T20] usb 1-1: new high-speed USB device number 79 using dummy_hcd 03:40:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 488.606541][ T8269] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 488.806023][ T8269] usb 2-1: device descriptor read/64, error 18 [ 488.897750][ T8141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.916438][ T8141] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 488.927934][ T20] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 488.929677][ T8141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.949249][ T8141] usb 3-1: config 0 descriptor?? [ 488.953894][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 488.996629][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.017459][ T8141] ldusb 3-1:0.0: Interrupt in endpoint not found [ 489.056496][ T20] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 489.075805][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.095925][ T8269] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 489.143707][ T20] usb 1-1: config 0 descriptor?? [ 489.197486][ T20] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 489.221156][ T8141] usb 3-1: USB disconnect, device number 83 [ 489.224291][ T20] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 489.285878][ T8269] usb 2-1: device descriptor read/64, error 18 [ 489.401955][ T7808] usb 1-1: USB disconnect, device number 79 [ 489.415718][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 489.415909][ T8269] usb usb2-port1: attempt power cycle [ 489.424524][ T7808] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 489.855803][ T8269] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 490.045857][ T8269] usb 2-1: device descriptor read/8, error -61 [ 490.315807][ T8269] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 490.505993][ T8269] usb 2-1: device descriptor read/8, error -61 [ 490.636283][ T8269] usb usb2-port1: unable to enumerate USB device 03:40:40 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 03:40:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:40 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:40 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x400004ffe0, 0x0) 03:40:40 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009040000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:40 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) 03:40:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:40 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000004a16e40110f3510ff9500000001090149284800090500000000000000070589cf51000000000000000000000000368e1eb353446a5001ec21dd54c1967f071436c4c4dbf45f14d4b68dd7ab3141b8802f54e99615bbcd0d554ba823d958eb8348ed41afabf6c37054ea627d184081229d762de226c5597c1a0fef27210abdaab3e743027284bf8bbb28"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000100)="40e8b63b573e3d97e6e9204b8abd318c95068420ea83f9928d0a04bf68e5642589c5d4fa90a0d44fd4878028571890ba5ce32fd6a2b2c4241f23706fecfd38d244e182650a2ccec00ea7dbccf7b54b442552b72a8ee9261963c2eb3a16f9fe62c6c8ae2d65bd4e70a54cd7de505170141239bc38fac2e22a362b4e19ac0178f5b37421191b5e87762ac40d9e2e820977e0dbc541a3b450c451050554c7c4ba582529896d7d7f8d4b7878fcf34b897b47d5df043f4b102aaf4c5265e12c2d51c0fe56f9dcd977b7b82ea89463cd536f9c6255c405ba6fff32b6e449b1314ae757df0bc424ccd631c8a2d5c1f6675b8f8bb7277db6a1ec", 0xf6) read$char_usb(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x7ffff000, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x11}], 0x400000000000085, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="8a9f6cc547006c5f822214090b606515081e4956b100943a81322933125efea1cefde659d71e3b1283b57b38047a11cc", 0x30, r1}, 0x68) [ 491.485809][ T7808] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 491.506248][ T8526] usb 1-1: new high-speed USB device number 80 using dummy_hcd 03:40:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:41 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 491.765551][ T8141] usb 2-1: new high-speed USB device number 89 using dummy_hcd 03:40:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 491.855939][ T7808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.866646][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 491.902510][ T7808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 491.915964][ T8526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 03:40:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 492.003881][ T7808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.026154][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.078221][ T7808] usb 3-1: config 0 descriptor?? 03:40:41 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 492.099172][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 492.117913][ T7808] ldusb 3-1:0.0: Interrupt in endpoint not found [ 492.136740][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.164533][ T8526] usb 1-1: config 0 descriptor?? [ 492.170147][ T8141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 492.181600][ T8141] usb 2-1: can't read configurations, error -61 03:40:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702ffffffd00000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x400004ffe0, 0x0) [ 492.237055][ T8526] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 492.263169][ T8526] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 492.326822][ T8526] usb 3-1: USB disconnect, device number 84 [ 492.355853][ T8141] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 492.439787][ T8269] usb 1-1: USB disconnect, device number 80 [ 492.459674][ T8269] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 492.775487][ T8141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 492.783676][ T8141] usb 2-1: can't read configurations, error -61 [ 492.791832][ T8141] usb usb2-port1: attempt power cycle 03:40:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009040000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:42 executing program 0: 03:40:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 493.156952][ T1265] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 493.205429][ T8141] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 493.455648][ T8141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 493.463241][ T8141] usb 2-1: can't read configurations, error -61 [ 493.515630][ T1265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.525920][ T1265] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 493.534954][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.551590][ T1265] usb 3-1: config 0 descriptor?? [ 493.597588][ T1265] ldusb 3-1:0.0: Interrupt in endpoint not found [ 493.615292][ T8141] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 493.798330][ T8526] usb 3-1: USB disconnect, device number 85 [ 493.865624][ T8141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 493.873312][ T8141] usb 2-1: can't read configurations, error -61 [ 493.881285][ T8141] usb usb2-port1: unable to enumerate USB device 03:40:44 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 03:40:44 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:44 executing program 0: 03:40:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000ff0000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x400004ffe0, 0x0) 03:40:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009040000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:40:44 executing program 0: 03:40:44 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:44 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009040000014928480009050000000000b1d1916a89cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="cda9271ee10fd32f053fd5c381c13b085840c78e0392ac532b3e65b985fc68dfdae337cbc23959712c8acea650174e604b4c19285979f1cad094a87095", 0x3d) 03:40:44 executing program 0: syz_usb_connect(0x0, 0x34, 0x0, 0x0) 03:40:44 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 494.815353][ T8526] usb 3-1: new high-speed USB device number 86 using dummy_hcd 03:40:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:44 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 495.025335][ T1265] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 495.185594][ T8526] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.200899][ T8526] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 495.223653][ T8526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.256476][ T8526] usb 3-1: config 0 descriptor?? [ 495.297759][ T8526] ldusb 3-1:0.0: Interrupt in endpoint not found 03:40:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x400004ffe0, 0x0) [ 495.405602][ T1265] usb 2-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 495.424157][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 495.447791][ T1265] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 495.463725][ T1265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.489316][ T1265] usb 2-1: config 0 descriptor?? [ 495.509819][ T8526] usb 3-1: USB disconnect, device number 86 [ 495.543895][ T1265] ldusb 2-1:0.0: Interrupt in endpoint not found [ 495.748453][ T8526] usb 2-1: USB disconnect, device number 93 03:40:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:45 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:45 executing program 0: syz_usb_connect(0x0, 0x34, 0x0, 0x0) 03:40:45 executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0xf7, {0xf7, 0xf, "dfe14d975201e2161b00c516e4eed41518adafda24df5d07f1ac0cbc9a35b8ef3fc9a667fadc5ba6a43c143d1beb040e58879fa84a31488d52832d0142b46c4ddb08c7c87414f164f5cd3c646bf558be4f946192f49a23bb91be175fade9c05a6ef95ed412961c04dfd32949335de015838fd7880b42c684e1e136bcb3ea1591b855b182571d3616c97fa8da3150fafcd22f0e028e50f61e66bf79e83fb5655743b2cb154be771dd267ffffce049b06a603f6f0736d46e6e3a4cd96f4f50f11ee0aef01884540cae4e3bcb646acad4e3c34d70fe9242403b9cb69e61a551f642885c8165f9223333a27a3ad852268c483dd1c2d4f0"}}, &(0x7f0000000200)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "36f06bd3f81dc106fdab74ccf4966911502dadef7aff21a0a9e0b6680173c53f5759b071bdacdcbe99697d756a8623fe5d98688381cc6c08f473cf617f258cd1757e03a254b09613ef2fe942671cedbb2d798fd2285d832632f961b3ca1e085f1176f674e0909396e8287cc64bcaf05e18a9901cea5a97934b829f104246ca241a819854d05abfb1090d3b084430c49ea028383bb476613c420093b306c12728f7272d2279426e5cd177a510c4b013c5ed8ce019f9b00aa60ed43ba1357b1ee6908d29578b05ab42999d138832ef354658e1836453981b12c2882b4bc3076c7e7f989a4bf73954744fdd551a827d6a6f07f18a939017f6"}}, &(0x7f0000000000)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "018ea62f0bc7c329967896c653cd5ce5"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9ba8a774571473540ac65a06a366d06e"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x81, 0x5, "4bc8b8fe", "fef1c00f"}}, &(0x7f0000000080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x7, 0xb9, 0x5, 0xfffe, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x11, 0x8a, "ce3d76fd1ab2df480b29233dfb455ffbb6e782de62366c9d6229e25f5a533f839596b3f1a0e2dda4888f7f2905b6158517fc8f638c631d86e1c8d6cfeec611c9cc566f2b259a76a17368a9697b206b57a5144e4830c4eb096d0e9482cba4e0d90d14d06b020bcb98f60beecd9419a661618c871559b0e89548c9686376de2d4b38e83de35747a6efebd3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "9ff9"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="44811f97f1d8"}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "8294"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xfb}, &(0x7f0000000740)={0x40, 0x1e, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) [ 496.445091][ T8526] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 496.525128][ T20] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 496.825517][ T8526] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 496.836060][ T8526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 496.849178][ T8526] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.863007][ T8526] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 496.875061][ T8526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.885403][ T20] usb 2-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 496.897164][ T8526] usb 3-1: config 0 descriptor?? [ 496.902016][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 496.914581][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 496.930692][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.941872][ T20] usb 2-1: config 0 descriptor?? [ 496.956727][ T8526] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 496.983954][ T8526] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 496.990621][ T20] ldusb 2-1:0.0: Interrupt in endpoint not found 03:40:46 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 03:40:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702d0ffffff0000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:46 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400004ffe0, 0x0) 03:40:46 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:46 executing program 0: syz_usb_connect(0x0, 0x34, 0x0, 0x0) [ 497.188861][ T8526] usb 2-1: USB disconnect, device number 94 03:40:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000300000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:47 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 497.764793][ T8526] usb 2-1: new high-speed USB device number 95 using dummy_hcd 03:40:47 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) 03:40:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 497.974904][ T8526] usb 2-1: device descriptor read/64, error 18 [ 498.255059][ T8269] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 498.255110][ T8526] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 498.454755][ T8269] usb 1-1: device descriptor read/64, error 18 [ 498.464985][ T8526] usb 2-1: device descriptor read/64, error 18 [ 498.584875][ T8526] usb usb2-port1: attempt power cycle [ 498.734820][ T8269] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 498.935533][ T8269] usb 1-1: device descriptor read/64, error 18 [ 498.994844][ T8526] usb 2-1: new high-speed USB device number 97 using dummy_hcd 03:40:48 executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0xf7, {0xf7, 0xf, "dfe14d975201e2161b00c516e4eed41518adafda24df5d07f1ac0cbc9a35b8ef3fc9a667fadc5ba6a43c143d1beb040e58879fa84a31488d52832d0142b46c4ddb08c7c87414f164f5cd3c646bf558be4f946192f49a23bb91be175fade9c05a6ef95ed412961c04dfd32949335de015838fd7880b42c684e1e136bcb3ea1591b855b182571d3616c97fa8da3150fafcd22f0e028e50f61e66bf79e83fb5655743b2cb154be771dd267ffffce049b06a603f6f0736d46e6e3a4cd96f4f50f11ee0aef01884540cae4e3bcb646acad4e3c34d70fe9242403b9cb69e61a551f642885c8165f9223333a27a3ad852268c483dd1c2d4f0"}}, &(0x7f0000000200)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "36f06bd3f81dc106fdab74ccf4966911502dadef7aff21a0a9e0b6680173c53f5759b071bdacdcbe99697d756a8623fe5d98688381cc6c08f473cf617f258cd1757e03a254b09613ef2fe942671cedbb2d798fd2285d832632f961b3ca1e085f1176f674e0909396e8287cc64bcaf05e18a9901cea5a97934b829f104246ca241a819854d05abfb1090d3b084430c49ea028383bb476613c420093b306c12728f7272d2279426e5cd177a510c4b013c5ed8ce019f9b00aa60ed43ba1357b1ee6908d29578b05ab42999d138832ef354658e1836453981b12c2882b4bc3076c7e7f989a4bf73954744fdd551a827d6a6f07f18a939017f6"}}, &(0x7f0000000000)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "018ea62f0bc7c329967896c653cd5ce5"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9ba8a774571473540ac65a06a366d06e"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x81, 0x5, "4bc8b8fe", "fef1c00f"}}, &(0x7f0000000080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x7, 0xb9, 0x5, 0xfffe, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x11, 0x8a, "ce3d76fd1ab2df480b29233dfb455ffbb6e782de62366c9d6229e25f5a533f839596b3f1a0e2dda4888f7f2905b6158517fc8f638c631d86e1c8d6cfeec611c9cc566f2b259a76a17368a9697b206b57a5144e4830c4eb096d0e9482cba4e0d90d14d06b020bcb98f60beecd9419a661618c871559b0e89548c9686376de2d4b38e83de35747a6efebd3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "9ff9"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="44811f97f1d8"}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "8294"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xfb}, &(0x7f0000000740)={0x40, 0x1e, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) [ 499.065272][ T8269] usb usb1-port1: attempt power cycle [ 499.096368][ T8531] usb 3-1: USB disconnect, device number 87 [ 499.120288][ T8531] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 499.164913][ T8526] usb 2-1: device descriptor read/8, error -61 [ 499.434694][ T8526] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 499.514851][ T8269] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 499.564706][ T8531] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 499.605682][ T8526] usb 2-1: device descriptor read/8, error -61 [ 499.695009][ T8269] usb 1-1: device descriptor read/8, error -61 [ 499.725036][ T8526] usb usb2-port1: unable to enumerate USB device [ 499.964763][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 499.975397][ T8269] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 499.983113][ T8531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 499.994176][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.007358][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 500.016568][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.029079][ T8531] usb 3-1: config 0 descriptor?? [ 500.087737][ T8531] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 500.100230][ T8531] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 500.165582][ T8269] usb 1-1: device descriptor read/8, error -61 03:40:49 executing program 1: syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0x0) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x103}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0xe8, {0xe8, 0x23, "0d0bc0369c2423ef08df3038ef170a29e2ed114e970ce8ec25888cbe228b47e188371f089ca4ff4e20585c67215c46b1f2c227d1866a4ca445cb30b5262d80a67dc7f57ec26eee8102b9a3ce4c8aa2b1790708b72351348eb159a877c884667f5fbf0d8fd7e256b26af73f4d2eb91c587332bb01d9dedd15212c0f888e5028fc0c44e776847440f91c50f47c0f78ad8dcf728855499311675ebb69468a143a3cf82c95a488dee9f315ee0aaffb63d4a18dd0cd0ac8c45f003fea16ad8f92cb9d8851c3dba7cc97ea6b9b1bcef1f1fe480711ee5a730465b9666a18e9550204fed9e7fec234ea"}}, &(0x7f0000000140)={0x0, 0x3, 0x19, @string={0x19, 0x3, "b9813d4cc674830171bfdc11401fa60df8ec85a2b0cfa2"}}, &(0x7f0000000180)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x7, 0x99, "8028254f", "70718961"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb7, 0x80, 0x0, 0x2, 0x4, 0x4, 0x1d2}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x16, 0x75, "f6ce77e52ff3e37cccdc4e59d561df5f6993fd4fa700276766096ac167f6ddeba6bb7a5d01257c724de9bf71f4cd1cdc8fc053057903e713e5d7aceb70d79d48bcf55c9705912f66081a7a1139b6edee8c9b4468d4a36022e2e931ddf3e56086a620c78386e5e3fe833cb79b3cf9b33a4dec4dc8a4"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5a}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0xc0, 0x10, [0x0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xe3}, &(0x7f0000000480)={0x40, 0xb, 0x2, "925d"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="fc6f76518f4f"}, &(0x7f0000000580)={0x40, 0x19, 0x2, "c8b1"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x8}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 500.284833][ T8269] usb usb1-port1: unable to enumerate USB device 03:40:49 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400004ffe0, 0x0) 03:40:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000700000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:50 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:50 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:50 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 500.774486][ T8269] usb 2-1: new full-speed USB device number 99 using dummy_hcd 03:40:50 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) 03:40:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 501.013191][ T8269] usb 2-1: device descriptor read/64, error 18 [ 501.115925][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.122248][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.304535][ T8269] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 501.384474][ T8526] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 501.524493][ T8269] usb 2-1: device descriptor read/64, error 18 [ 501.574549][ T8526] usb 1-1: device descriptor read/64, error 18 [ 501.644692][ T8269] usb usb2-port1: attempt power cycle [ 501.844486][ T8526] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 502.034457][ T8526] usb 1-1: device descriptor read/64, error 18 [ 502.074506][ T8269] usb 2-1: new full-speed USB device number 101 using dummy_hcd 03:40:51 executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0xf7, {0xf7, 0xf, "dfe14d975201e2161b00c516e4eed41518adafda24df5d07f1ac0cbc9a35b8ef3fc9a667fadc5ba6a43c143d1beb040e58879fa84a31488d52832d0142b46c4ddb08c7c87414f164f5cd3c646bf558be4f946192f49a23bb91be175fade9c05a6ef95ed412961c04dfd32949335de015838fd7880b42c684e1e136bcb3ea1591b855b182571d3616c97fa8da3150fafcd22f0e028e50f61e66bf79e83fb5655743b2cb154be771dd267ffffce049b06a603f6f0736d46e6e3a4cd96f4f50f11ee0aef01884540cae4e3bcb646acad4e3c34d70fe9242403b9cb69e61a551f642885c8165f9223333a27a3ad852268c483dd1c2d4f0"}}, &(0x7f0000000200)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "36f06bd3f81dc106fdab74ccf4966911502dadef7aff21a0a9e0b6680173c53f5759b071bdacdcbe99697d756a8623fe5d98688381cc6c08f473cf617f258cd1757e03a254b09613ef2fe942671cedbb2d798fd2285d832632f961b3ca1e085f1176f674e0909396e8287cc64bcaf05e18a9901cea5a97934b829f104246ca241a819854d05abfb1090d3b084430c49ea028383bb476613c420093b306c12728f7272d2279426e5cd177a510c4b013c5ed8ce019f9b00aa60ed43ba1357b1ee6908d29578b05ab42999d138832ef354658e1836453981b12c2882b4bc3076c7e7f989a4bf73954744fdd551a827d6a6f07f18a939017f6"}}, &(0x7f0000000000)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "018ea62f0bc7c329967896c653cd5ce5"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9ba8a774571473540ac65a06a366d06e"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x81, 0x5, "4bc8b8fe", "fef1c00f"}}, &(0x7f0000000080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x7, 0xb9, 0x5, 0xfffe, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x11, 0x8a, "ce3d76fd1ab2df480b29233dfb455ffbb6e782de62366c9d6229e25f5a533f839596b3f1a0e2dda4888f7f2905b6158517fc8f638c631d86e1c8d6cfeec611c9cc566f2b259a76a17368a9697b206b57a5144e4830c4eb096d0e9482cba4e0d90d14d06b020bcb98f60beecd9419a661618c871559b0e89548c9686376de2d4b38e83de35747a6efebd3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "9ff9"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="44811f97f1d8"}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "8294"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xfb}, &(0x7f0000000740)={0x40, 0x1e, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) [ 502.154730][ T8526] usb usb1-port1: attempt power cycle [ 502.159677][ T8531] usb 3-1: USB disconnect, device number 88 [ 502.180228][ T8531] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 502.285938][ T8269] usb 2-1: device descriptor read/8, error -61 [ 502.564375][ T8526] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 502.584303][ T8269] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 502.624377][ T8531] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 502.734431][ T8526] usb 1-1: device descriptor read/8, error -61 [ 502.794540][ T8269] usb 2-1: device descriptor read/8, error -61 [ 502.925310][ T8269] usb usb2-port1: unable to enumerate USB device [ 503.004357][ T8526] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 503.054409][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 503.065265][ T8531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 503.077235][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.090490][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 503.100227][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.113686][ T8531] usb 3-1: config 0 descriptor?? [ 503.165938][ T8531] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 503.177027][ T8526] usb 1-1: device descriptor read/8, error -61 [ 503.177402][ T8531] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 503.295531][ T8526] usb usb1-port1: unable to enumerate USB device 03:40:53 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:53 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400004ffe0, 0x0) 03:40:53 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x11, 0xde, {0xde, 0x10, "7a6d80ff5d836e0a5297300a8dacdc28dc6b057d8cd2361e589c30788ea918773feb5fb71fd063b3deffc61f598fe8d77eecfe4687bd1247036c03c3cff0c01e7a0b610e03451e6276f6029c8f2d41b4e40b8e6264488998563070df02bc09e68ed749b1ab2079f90e55e2ab1352b40dd1d2e22f72fe1e3255e718171befcd5f1bf8ab40bf9a161ba26aab627f5d691712cdac35daae79072f5df30e3de356913c3ddd9c46342e984b66dfd2548e26b05a5843501f60a027b2bb46f38e1bd3f6a6b194b06c7d712addec6d0519b6e57860345997e55707e01076dc02"}}, &(0x7f0000000000)={0x0, 0x3, 0x92, @string={0x92, 0x3, "08c838a357e056efc5ca61800c7437c01bff21512ce57bb41b37d6de89bb2f349010cf528c9dd409507b9dc8a2d3220fac0d36ad71e247545b60f584f4ed5c3bc04776e991f4cedc25e17da0abfdf49ea49b77fc35b81388b80212403f72cd233e959f85561dbe71ceeafa0590dab6bd155a6eaa5f3f0f20ea7d92621cfa6aa7a4f0a991b21fd26c85bc3cd0ce5bee73"}}, &(0x7f0000000200)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0xf, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x2, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x67, "cd1806cfcecd4d4bef3337d40a3c1ebe"}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x6, 0x0, 0x20, [0xc0c0, 0x1fe000f, 0xff00cf, 0x0, 0xf0, 0xff00cf]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x5, 0x0, "dd82f14e", "e431d88f"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x80, 0x4, 0x43, 0xca, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0xa, 0x15, "74bd55233d15b7f1186991a751f40a3f3e44d7d6ad"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xda}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000500)={0x40, 0xb, 0x2, "55d6"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, '[)'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x8}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r2, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000f80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x1000, 0x1f, 0x1, {0x22, 0xcaa}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfb, 0x2, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0xff, 0x20}}]}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x300, 0x6, 0x0, 0x80, 0xff, 0x4}, 0x70, &(0x7f0000001000)={0x5, 0xf, 0x70, 0x3, [@generic={0x4d, 0x10, 0xb, "5a6ccd0c2bb7d854c8f149f6d83e8762404c5bc8f266d85826277b46b1f262687c9baabb6f5b38ed0a8de2e0da8386de8c2c3142213d03587160ebc8bc273cd44403a9ee946a8d056490"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "effb3ddb7ee1a777d20fe3df94bf211e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0x6, 0x4}]}, 0x7, [{0xe7, &(0x7f0000001080)=@string={0xe7, 0x3, "ae7a7c8830f44d630f29ae3e44c6310b86724c83502cb9b163645227ddbb3a1eb984b6cd8143cff5a0fdc1ddf31fa82ecb51560f6561e58c5f1157727d0692d427d9125538f1ff04b3142613901b815fc6c557cc7bfc63a85abf34b0912ca165f36af43fef2af9a7d33fa9acb05dbaa8a8948ee0b26d34a01a67cf01ba7657e1936d0c52ad3c0928c84966b74b60057081430b3f6decce7f1afee93d726cbd5be4a11887b8a25ef3994942074e8e7764391fd7c492d1e163c111ef3c7751e6e30b1e48ea0c1b177392fb9ee7e118cdad412c2149960a0262e468acb51d164e1b2e58be9cb4"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x54, &(0x7f0000001280)=@string={0x54, 0x3, "c736d7104db19c0732c3f29ee80ce21dff8a6eb50791e84b720581aa372c4b5bc60261c92d336563ab1c7a3ce5ca38d3c4dee60d66e7569e4f07b7630f91996a64512c16ef88f05ed7f7ce0f4f41bebdfa7f"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x140a}}]}) syz_usb_control_io(r3, &(0x7f00000015c0)={0x2c, &(0x7f00000013c0)={0x40, 0x21, 0x84, {0x84, 0x7, "0b07b50f56579a8db4961e10b54e1e549a1073cd7bd3a9854e66933c27b15a8d5e1178516dc458e683891705645f11b2e78ed852b0879e0d8999a1adc0475b7b7b89efc6de04c54bb57cc1c7b924da184c6fb9e28042ab98fbdb3d6e0db532b6edbfd2c0a256da27422a6b4f67d92b0ea6ebc88e6195f1d2f5c9bdc0d3dd985dff0e"}}, &(0x7f0000001480)={0x0, 0x3, 0x46, @string={0x46, 0x3, "97955db4441112bfb4ac1c2641b5d9a299703814068f8da6b566042e470c3a81ffe11b2a0c965426727ff08813c2775db0446c662c1a7c53b91a0cdf1ae721b93729254f"}}, &(0x7f0000001500)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x8, 0x4, 0x5, 0x1}]}}, &(0x7f0000001540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x3f, 0x1, "34ff0b44", "ad26df28"}}, &(0x7f0000001580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x60, 0x6, 0x1, 0x7f, 0x4, 0x9}}}, &(0x7f0000001a00)={0x84, &(0x7f0000001600)={0x0, 0x11, 0x38, "9680e17079ade5a5ceadea476849ce513eece8c06fe57d2eb509fe6c1ef5256e7816df82c1e1fe9a94ed764bb263aa3f29830c144a5acb24"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001700)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf00]}}, &(0x7f0000001740)={0x40, 0x7, 0x2}, &(0x7f0000001780)={0x40, 0x9, 0x1, 0x64}, &(0x7f00000017c0)={0x40, 0xb, 0x2, "52f4"}, &(0x7f0000001800)={0x40, 0xf, 0x2, 0xc45}, &(0x7f0000001840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000001880)={0x40, 0x17, 0x6}, &(0x7f00000018c0)={0x40, 0x19, 0x2, "e873"}, &(0x7f0000001900)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001940)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000001980)={0x40, 0x1e, 0x1, 0xe7}, &(0x7f00000019c0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r2, &(0x7f0000000a40)={0x2c, &(0x7f0000000800)={0x40, 0x31, 0x4e, {0x4e, 0xa, "45a0fafe5c54b61700985e21c119d487388a215ecee872271907386974fe3a3c950fb5b87501fab409eda03118609b6575be7459cd37a5775ac97a9f99735ce1272cf975c7b62fd1c91a3a80"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f00000008c0)={0x0, 0xf, 0xe5, {0x5, 0xf, 0xe5, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x0, 0x6}, @generic={0x6, 0x10, 0xf, "140eb0"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "dce2aac9a00cd78519b1ceb8cf0e62e9"}, @generic={0xbf, 0x10, 0x3, "56176520a89e171b7432c5851880f7146efdb6a92afa9b5fc5d425def89ce3e0fd3e5420e8eb1d3b10424bab7969930853633e2588012a41bf280ab67f30e59ec6dc06919e4ec8ceb9cff7cca4d690267438f633a155a5cec9274e6c34a058bc83933f49a3904f2a05ea88287e543e65826545fe6b6b3f9c8482e4833f38bd953517ed34ed94976d439bc41acd02a8bb81dcf4ee2e55f03fd7dba943f39d93b6ff67b02b92f6f2b9bb9cb37e266da65852d0fc74d93f8af9e50d6a96"}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x6, 0x2, 0xe9, "0bd4f4ca", "dde6d77c"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x1, 0x84, 0xdf, 0x1ff, 0x8}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a80)={0x20, 0x30, 0x79, "d2e27053908e590a9ac5c4d41dd99a75e239756c581a7739041a2ae355967ce3acc634cb647c9a2ae8208432e69d1c1fbf835fefc4b687534c56845e58de252e65308c0ce29d5abc1eafdff69713268a6bcdb70aac8224520c82641a4596e09df025244f25c349dedae7ce6083ea825844543eb344b4327ef0"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000c80)={0x40, 0xb, 0x2, 'PA'}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "1834"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x5}}) 03:40:53 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:53 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 503.824386][ T8526] usb 2-1: new high-speed USB device number 103 using dummy_hcd 03:40:53 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) 03:40:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 504.194389][ T8526] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 504.205051][ T8526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 504.218276][ T8526] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.232280][ T8526] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 504.242237][ T8526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.253844][ T8526] usb 2-1: config 0 descriptor?? [ 504.306914][ T8526] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 504.322218][ T8526] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 504.474295][ T8531] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 504.507892][T20935] udc-core: couldn't find an available UDC or it's busy [ 504.517869][T20935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 504.530855][T20935] udc-core: couldn't find an available UDC or it's busy [ 504.537922][T20935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 504.549126][T20935] udc-core: couldn't find an available UDC or it's busy [ 504.562883][T20935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 504.575307][ T8526] usb 2-1: USB disconnect, device number 103 [ 504.583105][ T8526] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 504.694209][ T8531] usb 1-1: device descriptor read/64, error 18 [ 504.964147][ T8531] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 505.164194][ T8531] usb 1-1: device descriptor read/64, error 18 03:40:54 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 03:40:54 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 505.225224][ T1265] usb 3-1: USB disconnect, device number 89 [ 505.254753][ T1265] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 505.294530][ T8531] usb usb1-port1: attempt power cycle [ 505.354118][ T20] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 505.734044][ T8531] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 505.741865][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 505.752471][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 505.754246][ T1265] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 505.763643][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.784863][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 505.794025][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.819313][ T20] usb 2-1: config 0 descriptor?? [ 505.865484][ T20] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 505.899564][ T20] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 505.964338][ T8531] usb 1-1: device descriptor read/8, error -61 [ 506.079633][T20935] udc-core: couldn't find an available UDC or it's busy [ 506.088505][T20935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 506.095259][ T20] usb 2-1: USB disconnect, device number 104 [ 506.112056][ T20] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:40:55 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f35fcfe95000000010902220001000000000975cb0001492848000905000000000000000700000000"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, &(0x7f0000000b00)={0x20, 0x4, 0x50, {0x50, 0x30, "8f69a7eb713227c08aee677e9c9c18b8e8055c3e7bc8d7ca80f579d70b8bdba1bbcf3e2579cce3e73daebbfadfeff703df72b49e194e0cd91b8c2d4f7481dd9d614166c14cd2897a448215117749"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000000bc0)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x1100, 0x5, [0x3f00]}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x3, 0xfd, 0x9, "ca64ffa9", "5332052e"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x2c, 0x0, 0x3f, 0x40, 0x8}}}, &(0x7f0000001140)={0x84, &(0x7f0000000cc0)={0x40, 0x17, 0xa9, "1421363027606a0b7708a2d7fe5a97ea0f105c28772f82a939c35e92a46f8f9071f29492fb423e251e37b725fb536f6bb228c51bff04be7be9a5200f1ec13d4a05f88c8c75d1e63fb9adaef6ecec4904c58cde791951a0755da650436a9645f016e4545735d845e3d2a8a504bdb24d48dc6c3d5c93c77e5028fff7b0866974904242040cf13f3f937d6903c05ff6085bec40946e96f59e2f7eaee2c6846c19c6c73ed03c8f85922f6f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0xc0, 0x4}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000f00)={0x40, 0xb, 0x2, '7o'}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0xa8}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @random="95b7f228d7e6"}, &(0x7f0000001000)={0x40, 0x19, 0x2, "9ab3"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0xb5a8}, &(0x7f0000001080)={0x40, 0x1c, 0x1}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x40}}) recvmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000680), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000000740)=""/109, 0x6d}, {&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/106, 0x6a}], 0x5, &(0x7f0000000a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x300) syz_usb_control_io$uac1(r1, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="40080d0000edab2c1fc079a64f939f16143a000d0884615c9fa8f54e9c000000fd2e8fcc6425d2edc02332"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000080)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x441c9ca9e10a1387, 0x0, 0x40, 0x9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x5, 0xf0f, 0xaa7, [0xc0e8]}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x7, 0x3f, "9fb64414", "803cb35a"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0xff, 0x81, 0x0, 0x7fff, 0x4}}}, &(0x7f00000005c0)={0x84, &(0x7f00000001c0)={0x20, 0x7, 0x23, "24d8c96ad1caaf889b58207649006c19871d4a03e2b1a1254bfdaf2e8e5f6440069a2f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x20, 0x4}}, &(0x7f0000000300)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000340)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000380)={0x40, 0xb, 0x2, "8544"}, &(0x7f00000003c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000400)={0x40, 0x13, 0x6, @local}, &(0x7f0000000440)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000480)={0x40, 0x19, 0x2, "c419"}, &(0x7f00000004c0)={0x40, 0x1a, 0x2, 0x1d71}, &(0x7f0000000500)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000540)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0x21, 0x1, 0x7}}) read$char_usb(r0, 0x0, 0x0) 03:40:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:55 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) [ 506.151437][ T1265] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 506.177551][ T1265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 506.209331][ T1265] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.249301][ T1265] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff 03:40:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 506.264222][ T8531] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 506.276794][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.299477][ T1265] usb 3-1: config 0 descriptor?? 03:40:55 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 506.345562][ T1265] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 506.380865][ T1265] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:40:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 506.484552][ T8531] usb 1-1: device descriptor read/8, error -61 [ 506.573575][ T1265] usb 3-1: USB disconnect, device number 90 [ 506.591487][ T1265] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 506.614242][ T8531] usb usb1-port1: unable to enumerate USB device [ 506.694304][ T20] usb 2-1: new high-speed USB device number 105 using dummy_hcd 03:40:56 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 03:40:56 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:56 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 03:40:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 507.144451][ T20] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 507.158084][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=fc35, bcdDevice=95.fe [ 507.224263][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.279200][ T20] usb 2-1: config 0 descriptor?? 03:40:56 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x920c}], 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 03:40:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 507.558402][T21031] udc-core: couldn't find an available UDC or it's busy [ 507.569637][T21031] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 507.602522][ T2973] usb 2-1: USB disconnect, device number 105 [ 507.633897][ T8531] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 507.641627][ T20] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 507.865306][ T8531] usb 1-1: device descriptor read/64, error 18 [ 508.066522][ T20] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 508.077303][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 508.090200][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.110104][ T20] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 508.129249][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.144379][ T20] usb 3-1: config 0 descriptor?? [ 508.163119][ T8531] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 508.189862][ T20] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 508.202523][ T20] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 508.383833][ T8531] usb 1-1: device descriptor read/64, error 18 [ 508.409718][ T20] usb 3-1: USB disconnect, device number 91 [ 508.416144][ T2973] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 508.423952][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 508.440363][ T20] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 508.524114][ T8531] usb usb1-port1: attempt power cycle [ 508.823771][ T2973] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.832873][ T2973] usb 2-1: New USB device found, idVendor=0f11, idProduct=fc35, bcdDevice=95.fe [ 508.843505][ T2973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.859302][ T2973] usb 2-1: config 0 descriptor?? [ 508.943681][ T8531] usb 1-1: new high-speed USB device number 95 using dummy_hcd 03:40:58 executing program 1: syz_usb_connect(0x1, 0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001fe5f88498ff51a5a0000000000070589cf51c9831fa19b880738e24378c60b46e1e9c2d3c0b25d75b4625675e23ea5a543b7699f9bf79b9c948c56ea21a666fa3f50cc306c8a8edb584b666f60fedabedf266d350d45a2817ad1397d21ebfe38fcad05ec8b366f7489334fbf5c7302d196583bb9402f0de0a9bce4adf09ff719f8b0ccbff0235c2d52e0e31373a37fe2ff20e4c7d1a36d7b76ad763e9313933d5f45b19ad2c46f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000100)=""/213, 0xd5}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/211, 0xd3}], 0x5, 0xffffff1f, 0x1) 03:40:58 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) 03:40:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:58 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:40:58 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 509.106185][T21128] udc-core: couldn't find an available UDC or it's busy [ 509.113203][T21128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 509.127289][ T8526] usb 2-1: USB disconnect, device number 106 [ 509.173873][ T8531] usb 1-1: device descriptor read/8, error -61 03:40:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 509.453749][ T8531] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 509.524017][ T2973] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 509.676912][ T8531] usb 1-1: device descriptor read/8, error -61 [ 509.683613][ T8526] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 509.793714][ T8531] usb usb1-port1: unable to enumerate USB device [ 509.923599][ T8526] usb 2-1: Invalid ep0 maxpacket: 64 [ 509.953722][ T2973] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 509.964276][ T2973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 509.977606][ T2973] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.992422][ T2973] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff 03:40:59 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 03:40:59 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) 03:40:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 510.002570][ T2973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.027821][ T2973] usb 3-1: config 0 descriptor?? [ 510.074529][ T8526] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 510.096257][ T2973] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 510.133158][ T2973] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:40:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:40:59 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) [ 510.316344][ T20] usb 3-1: USB disconnect, device number 92 [ 510.323640][ T8526] usb 2-1: Invalid ep0 maxpacket: 64 [ 510.331762][ T8526] usb usb2-port1: attempt power cycle [ 510.345095][ T20] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 510.463932][ T8141] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 510.483540][ T2973] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 510.694602][ T8141] usb 1-1: device descriptor read/64, error 18 [ 510.753542][ T8526] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 510.843634][ T8526] usb 2-1: Invalid ep0 maxpacket: 64 [ 510.903748][ T2973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.919604][ T2973] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 510.934697][ T2973] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 510.944618][ T2973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.959415][ T2973] usb 6-1: config 0 descriptor?? [ 510.977314][ T8141] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 511.004059][ T8526] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 511.015091][ T2973] ldusb 6-1:0.0: Interrupt in endpoint not found [ 511.093586][ T8526] usb 2-1: Invalid ep0 maxpacket: 64 [ 511.099105][ T8526] usb usb2-port1: unable to enumerate USB device [ 511.173483][ T8141] usb 1-1: device descriptor read/64, error 18 [ 511.234178][ T2973] usb 6-1: USB disconnect, device number 10 [ 511.293910][ T8141] usb usb1-port1: attempt power cycle [ 511.703401][ T8141] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 511.873887][ T8141] usb 1-1: device descriptor read/8, error -61 [ 512.143410][ T8141] usb 1-1: new high-speed USB device number 100 using dummy_hcd 03:41:01 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:01 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) 03:41:01 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:41:01 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x20, 0x21, 0x51, {0x51, 0x9, "fb5e0222ec26ca8c689b36c477f08d0f1ba63e3fdd040ee3cba6424fd3f6f487d76fb7ef9caeb9fa448453a9b3940fad35ab300a9bc55b168a5c66d8705f802d783ef6ce7ee29269869e0e700ee05a"}}, &(0x7f0000000240)={0x0, 0x3, 0x50, @string={0x50, 0x3, "78d5127e101702d214942cd0634c9cbc6811814f95b159cd5cd9834f65f814059083d4a36eaecce09f90d7f50174ebab60f11f987411035a22e70d4a499d09fe33ca8f6fd1189f93cd7f039ffa17"}}, &(0x7f0000000100)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x67, 0x3f, 0x52}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x3, 0x5, "835d2ccd", "af988d99"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x3f, 0x48, 0x7b, 0x8, 0xfff9}}}, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x15, 0x96, "d0181bb3e2df19432d50afb445a3d552ac7f501168201916ef38b6e986062333eaa559dae8e419dd3aca3bd28eea471138acd1b8af5155f00533f0e0bd7b79ef62ce1b4bf83eec541e5c2b8bef0f56088dd74973d33b735592a1a14a47aac61dcfa8ae23374e3122f5379b9ee6d64cbed29160018edb849b0bb9732340c297a5cab84cb8cd01bbe7b8fdc45a420eee0f6e389a309134"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xc0}, &(0x7f0000000640)={0x40, 0xb, 0x2, "60f7"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7f}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'id'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x6}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r2, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_ep_write(r2, 0x8, 0x97, &(0x7f0000000000)="75534360dc7d97a0861fa0264301daface40356a36791bbe26772efa013774a2f7bb1e94e3a8f62cf1764e541ba4e16782641fe4d0cd0038f2ad140db9c715686d3dded5ca77376fba742ee2a17ffe59ca744636858398c0fdeb5a14fe5481113d9fdc2500109af883f39d2e5ab6899918ba7b1fc1d26201f9b505242be09bffd56dc37e98b2b0b6736a54fd625c7cab4900a59dec9ab9") [ 512.313823][ T8141] usb 1-1: device descriptor read/8, error -61 03:41:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 512.434843][ T8141] usb usb1-port1: unable to enumerate USB device [ 512.583384][ T8526] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 512.665350][ T1265] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 512.973697][ T8526] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 512.996200][ T8526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 513.032018][ T8526] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.046445][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 513.058530][ T8526] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 513.069757][ T1265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 513.082596][ T8526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.092469][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.108712][ T8526] usb 3-1: config 0 descriptor?? 03:41:02 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 03:41:02 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055300)={0xfff, [{r3}, {0x0, r4}, {}, {r2}, {r2}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {}, {}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {r3, r4}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}], 0x0, "4de5e83826fe0a"}) 03:41:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:02 executing program 5: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x9, 0x55, {0x55, 0x22, "df030ac2debf18129830fa8e463fd6b20506e3e6061b8cb2bfe6fd968f4214b032b0e0c47761ceff094d9b91670a5ba8594f63085667567e91d4930b5d934872f3209f31816708c4ee8db14566387951592067"}}, &(0x7f0000000280)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "e0f818cbe7a7c73855ff83ca7a372160b1c856fa2249c6d545c614c4bfa11f5ba682c5e12af6ca08301d4125b9efe2e9d3417361a835142d97f8a5e517b6f6cbefc1b9952d1e2de12e64601c953a0e558c87b4b0948eecb57f776cfdd273ba75e6447be87d2ee3e0e8fe1b385cb8160edc749d69916a18728d178e8942ef9eadba2affd51b561b59d4d61c8fe791c3a7b6afa0627c3ad84475b8341a1d1405635d4727cadc2f0d7dae35df904e"}}, &(0x7f0000000340)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x8, 0x880f, 0xff81, [0x0, 0x0, 0xc09f, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x52, 0x3, 0x8, 0x7, 0x35}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7f, 0xfe, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x22, 0xff, 0x0, 0x4, 0x1f}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x2, 0x4, 0x9}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x3f, 0x0, "fd01da82", "093b001e"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x9, 0x8, 0x9, 0x401, 0x2}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0xb, 0x6f, "3b2ac766ef5cba9d4fefc0ce2e4fd3b3bee2953b0794a40c03d479b9de98c279cc2f2a538262e4b9603deb45f57e29384abd7c0dd2052b1a442898ea560ed5d070ccc4ecfa41a3cc75cbd38b85dc6894cbd8d2bea2dab917435ab825485d1396006b12d3dc9b42a86b5f38615ae172"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x47}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x10, 0x10, [0xf0f0]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0xb, 0x2, '|K'}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "b827"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x47}}) r1 = syz_usb_connect(0x4, 0x15b, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x46, 0x5a, 0x83, 0x8, 0x10c4, 0x813d, 0x2c0e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x1, 0x1d, 0x55, 0x80, 0x1, [{{0x9, 0x4, 0x22, 0x8, 0x4, 0xc8, 0x69, 0x0, 0xff, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'T7'}, {0x5, 0x24, 0x0, 0xf800}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x40, 0x8001, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8a, 0xc1, 0x100}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x2, 0x8, 0x1}]}], [{{0x9, 0x5, 0x8, 0x2, 0x400, 0x5, 0x3, 0x6, [@generic={0xe4, 0x1, "cc4433171952853ddecbca1bc88f7281b0c71f9c500434d6fe1296f06f06da6e8e49b9d9aef6452ba5bd980624dc882b03fdbbe48ad0d1916cd2def20504fa11abc19d28164ba5e2e94f907df79bbffdf94bea3b323d13a6816c1ec45aba5798851ccfe82f6917e1d9ac0a838bf2459ade00cb1fe66ef11d95dca38bd01a2505c2ee41ce6f3d3da15bfb53539e5c9220b2fe205d29b3c9f4bf5e6fb5632e0cd0d93059fc14e2a6513f985d721124b16d41344599904723d1c99d90f69c7194e1028d64ed413c159bdb914de216f7e20acf89a7a82b5d7e9136ff40fd5ed0cb37c49a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xbf, 0x40, 0x6}}, {{0x9, 0x5, 0x52b22bdae5d97422, 0x10, 0x8, 0x1, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x1, 0xfd, 0x3}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x9a, 0x83, 0x4, 0x8, 0x80}, 0x1b, &(0x7f0000000b40)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x3, 0x81, 0x3, 0x1f}, @wireless={0xb, 0x10, 0x1, 0x8, 0x84, 0x2, 0x0, 0x8}]}, 0x5, [{0xb8, &(0x7f0000000b80)=@string={0xb8, 0x3, "9fb24bb09954b94bfb6464a9bebb7e2474412fc206054f7c70854f409312c7d0126024ca5e622bc789b4f56cc3acc1c52a0fd2ee1ee2c653f86aefea1ea5d7ff80e7849b71b4abe863e01f6d1071f7a5879343ece34c62879864adb9e1b9cac7cbbafb99e646a672babd861ed60b934cbaefa812a497f41f7686874f9fa4b4f7b943d272c84190b4c0dfda3feb345791145eab4703413862d9e135445625f1f04147ea8c905a8a45646be10b224025e52945a575482c"}}, {0xa6, &(0x7f0000000c40)=@string={0xa6, 0x3, "0000e25dc87ec89a247b672e438ce7c3c7d30de593489f6212ec9c69aeb35b60ed5fe8bbff2c79614996fac4dcf45cdef600f2f2ac6b8c5e112d95fde84eab8bf9316ee65f7ef569488d8c5f9e6d949f88296bff541ebc4728542524d370012652ea8c2abc62169d2a1559a4ac0f91374e61f13c7b99061f823914c559d4598d26c6c0c1a46b7c4e6a4c90f3ea0565ab232fb8351e2352b0212b67511c7d44e3add2fdb3"}}, {0x8e, &(0x7f0000000d00)=@string={0x8e, 0x3, "39c6625a69a33337618ae428465cf1fadae3a5773df28121d7775bb7dc54d67ad2ed2f47d7be8271edec1b95ba7876df0e8172b6e7ccabb5bda6a88cfd8afa6425bfe9383c34261ccdb3d5f599d55a99c7273a3ecf18905d490db1006f3a833854b7ef4d9a5d010f8d147432072107d6e17f7f26fcaf556f30ee2ad1bdfba47758461f3118b37d6ec4fda3c6"}}, {0x8b, &(0x7f0000000dc0)=@string={0x8b, 0x3, "4becae0c385f82cbe0e76153ce3e99c1176368c204f294a804a78455e4d7ca52f5901c5e38acc8e3ece20e495ecaf08dfede6e889cc3e6f89e14c1345d1b1af6568e0391b9a6ef0ed04a21573e16f025660bd95fb1bb14ddbc27d53408ff573ef8b9edab8dc3f63c15e5d5d06e034a76e5b34c80e1eda16851222775eae675da8942d3dfb8e4c74929"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_control_io(r1, &(0x7f00000010c0)={0x2c, &(0x7f0000000f40)={0x0, 0x30, 0x21, {0x21, 0x31, "4028b1c7a8a116c4eb9c7c3e13e794ba69d5970739bb26b44c301f4076deb0"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000fc0)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x1, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x77, 0x0, 0x85}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xff, 0xff, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x8000, 0xff00, 0x68, [0xc0, 0x3f00, 0xc0c0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf1, 0x1, 0x5}]}}, &(0x7f0000001040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x1f, 0x8, "a4f3fda7", "215f7f87"}}, &(0x7f0000001080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x5, 0x79, 0x3f, 0x0, 0xf8ae}}}, &(0x7f0000001500)={0x84, &(0x7f0000001100)={0x0, 0xc, 0x2d, "b9c0c0fda18e492385e6d7e77e770edec59436c0c7921f16ff90ae2456939a8dcfd7c6a5ebbaa2518a291c0cb1"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000011c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001200)={0x20, 0x0, 0x8, {0x120, 0x10, [0xffff]}}, &(0x7f0000001240)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001280)={0x40, 0x9, 0x1, 0xc2}, &(0x7f00000012c0)={0x40, 0xb, 0x2, "c645"}, &(0x7f0000001300)={0x40, 0xf, 0x2}, &(0x7f0000001340)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001380)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000013c0)={0x40, 0x19, 0x2, "f17b"}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0xba69}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001480)={0x40, 0x1e, 0x1, 0xff}, &(0x7f00000014c0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x60, 0x59, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x1, 0x3, 0xa2, {0x9, 0x21, 0x8001, 0x12, 0x1, {0x22, 0xd15}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x81, 0x2b}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0xbe, 0x7, 0x10, 0xb6}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1, 0xe02}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x814}}, {0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "117c5105fcd488ccadc3db8dfc7a3fb3722de80676955a8176474f2d5538d80d0158b733ad33f439489e42"}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) read$char_usb(r2, 0x0, 0x0) [ 513.143439][ T1265] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 513.153107][ T1265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.175280][ T8526] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 513.203962][ T1265] usb 2-1: config 0 descriptor?? [ 513.235296][ T8526] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:41:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 513.284968][ T1265] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 513.317744][ T1265] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 513.391643][ T8526] usb 3-1: USB disconnect, device number 93 [ 513.410977][ T8526] ldusb 3-1:0.0: LD USB Device #0 now disconnected 03:41:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 513.496172][T21228] udc-core: couldn't find an available UDC or it's busy [ 513.504174][T21228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.515351][T21228] udc-core: couldn't find an available UDC or it's busy [ 513.522610][T21228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.538856][ T8141] usb 2-1: USB disconnect, device number 111 [ 513.550288][ T8141] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 513.583290][ T2973] usb 5-1: new high-speed USB device number 20 using dummy_hcd 03:41:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 513.604419][ T20] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 513.613571][ T1265] usb 1-1: new high-speed USB device number 101 using dummy_hcd 03:41:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702009901000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 513.803233][ T1265] usb 1-1: device descriptor read/64, error 18 03:41:03 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 03:41:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200b401000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 513.971405][ T2973] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 513.983391][ T20] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 513.999888][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 514.014612][ T2973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 514.059319][ T20] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.083130][ T1265] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 514.083536][ T2973] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.122081][ T20] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 514.134313][ T2973] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 514.151904][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.175480][ T2973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.190589][ T20] usb 6-1: config 0 descriptor?? [ 514.226832][ T2973] usb 5-1: config 0 descriptor?? [ 514.251564][ T20] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 514.265204][ T2973] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 514.283160][ T1265] usb 1-1: device descriptor read/64, error 18 [ 514.293474][ T7808] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 514.303192][ T8141] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 514.303399][ T20] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 514.324522][ T2973] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 514.403259][ T1265] usb usb1-port1: attempt power cycle [ 514.467124][T21261] udc-core: couldn't find an available UDC or it's busy [ 514.474545][T21261] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 514.491595][T21261] udc-core: couldn't find an available UDC or it's busy [ 514.498747][T21261] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 514.521414][ T8361] usb 6-1: USB disconnect, device number 11 [ 514.547155][ T8361] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 514.587872][ T8526] usb 5-1: USB disconnect, device number 20 [ 514.608889][ T8526] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 514.663490][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 514.674935][ T7808] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 514.685667][ T8141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 514.700332][ T7808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 514.721889][ T7808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.741014][ T8141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.760294][ T7808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 514.769536][ T8141] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 514.778817][ T7808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.787710][ T8141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.798466][ T7808] usb 3-1: config 0 descriptor?? [ 514.806415][ T8141] usb 2-1: config 0 descriptor?? [ 514.824016][ T1265] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 514.844500][ T8141] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 514.855507][ T7808] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 514.882562][ T8141] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 514.892148][ T7808] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 515.013143][ T1265] usb 1-1: device descriptor read/8, error -61 [ 515.044668][T21228] udc-core: couldn't find an available UDC or it's busy [ 515.051637][T21228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 515.089627][ T7808] usb 3-1: USB disconnect, device number 94 [ 515.096622][T21358] udc-core: couldn't find an available UDC or it's busy [ 515.105806][T21358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 515.135861][ T8141] usb 2-1: USB disconnect, device number 112 [ 515.163588][ T7808] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 515.171989][ T8141] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:41:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:41:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 515.283123][ T1265] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 515.463337][ T1265] usb 1-1: device descriptor read/8, error -61 [ 515.563116][ T8526] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 515.594625][ T1265] usb usb1-port1: unable to enumerate USB device [ 515.933716][ T8526] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.963039][ T8526] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.999554][ T8526] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 516.017675][ T8526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.038731][ T8526] usb 5-1: config 0 descriptor?? [ 516.092907][ T8526] ldusb 5-1:0.0: Interrupt in endpoint not found 03:41:05 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) 03:41:05 executing program 5: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) 03:41:05 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000dc0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x1f, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x10, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x5, 0x9}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xd4, 0x0, 0x12, 0x10, 0x4}, 0x55, &(0x7f0000000100)={0x5, 0xf, 0x55, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x2, 0x7fff}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x9, 0xf00, 0x85, [0xc000, 0xff0000, 0xc0c0, 0x3f30, 0xff3f00]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6ffb590776c59da5bbf493fc1b187ccd"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x4, 0x3, 0x400, 0x4}]}, 0x6, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xef, &(0x7f0000000180)=@string={0xef, 0x3, "9225b9e903e72a8552011385882f67ed599a5f4eed1865144f09ca1d93b41327735c977e4b3229b35dca14ee470da020c0e33b6ae6acdbbd21a19352975e5d17422471ed15e6e7c81d0b0bfd71b6f094d553a7159e192ff04038b964b6e56bae07f82a9c4f99143000728ef62e995bc271d8d6f223d876fc5b21c0807963fdafd65a645b269da1335309df46abdd2e04791e55498a3a397fc105a921c777bccb8d66fd43c85300359f3d4dd3b478e46d67137399b3a6adda89fe02dfc0e7e9f9d2612111b0dd556907699698a9b6b46df1ca5fe9cc954c1ba8f6a890c12ed8db7828af182b0cdba1c6995bebe9"}}, {0x70, &(0x7f0000000280)=@string={0x70, 0x3, "7609499b615c186a3c601467705f0ffdd1dd2a9700d6c561e4b015a011bcdf493dc2b447a2b16685a2eb6b49cd71417e19130e6dd93ec14b4a9f92765deabae10534fb6c836eb97cf58a470abc3ab6e41a6622a29abd8346ee32304b0351f4aad49c7388a260d42a290d2efcba3f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1cfe}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "fbad"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_connect(0x0, 0x7ca, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xc3, 0x50, 0x31, 0xdf, 0x403, 0xfc0c, 0xf07b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b8, 0x3, 0x5, 0x6, 0xd37831454be3e2db, 0x7f, [{{0x9, 0x4, 0xfd, 0x6, 0x3, 0x60, 0x8c, 0x85, 0x1, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, 'Yo,'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9a7, 0x3, 0x5, 0x4d}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x1f, 0x2, 0x8, 0x3a3b, 0xc1}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x6, 0xe7}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x8001, [0xff01, 0x3, 0x4, 0x0]}, @mdlm={0x15, 0x24, 0x12, 0x6}, @obex={0x5, 0x24, 0x15, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x7f, 0xd4, 0x20}]}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0xbf, "5e607b87fa0bc150ad"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x6, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0xb3, 0x1, "", "81eb"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x200, 0x30, 0x3f, "2701aa70"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff9, 0x80ee, 0x60, "0e23f58e31"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7f, 0x40, "ec545e", 'w'}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0xfb, 0x2c, 0x7, [@generic={0xf6, 0x21, "e9de9f42e8aa9c7c3a0e422d0d0923338288a9329714ca3795a1f42143ec8f110507b604e26d33d6ea3e424a2438c052067d2c144baa2da814266470341864dfb471481f274f747a04d21bfb0a072b92f48c8baa39e2829d1d24f1d5bd6542dc11f54c1a33452ca24f3471c7c39bd153be5056dfa94d0a726fa048157b686ba977d54b25ef70aec9161caa5b1c20db7e79c92a57381b34f741ae11147f2e5ff5418327ccb9106b71ff20c2a61ef4e09815338d50f4f32f9080d3fb08dc91c8af7c7a8e888f05f90c1e38e506f480cfad6bd5a7db6d1678539d0edaccf0598e5dabe0b3918a75479fd64eec319cabaf4b4abf770e"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x2}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x5, 0xa5, 0x0, [@generic={0xba, 0x30, "26d012ee6b8b575cafb1d81957e9e2b7c33f4b3162cc71e925aefd8cd39528c2a259b1610cd713ade1f2fb030849a615da9a101948fdaed71c38a73b6f7c8cf0f33f497a765d35a0f30ad031e84a7719d071553b9a2a48ef7c80c13fc3a49a10e0193d4f59e933e5d29679c85940462ffa55fbb629ce188aeeb856a00e8c9c7a3a2146ee33fe3fdf69159bbc2724c18c98cacc52421dd820749da84a4b137edb3401881ac79e622ef208887d9ac5c944aa5099160bfa5523"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x58, 0xfd, 0x6a, 0xfd}}]}}, {{0x9, 0x4, 0x16, 0x11, 0x7, 0xe7, 0xf8, 0xe6, 0x7f, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x6c, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @generic={0x78, 0x1, "ac70d1f5399cd6d7f037c7fdbb3432d21b8c3850a3f481af2a1b013e311552c9495c23ba4be011780eb2d99c5db2691b02f846007f58cb6977de49137c0c82386cd7ef8250e6d4769791a726b0f7bcfff0948a866f8138a85fd76994c4644871c1efe1866063b19b280bdd4875ccf1de574b17920867"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x40, 0x80}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x4b, 0xf8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x20}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x81, 0x5}}, {{0x9, 0x5, 0xa, 0x0, 0x428, 0x40, 0x39, 0xd2, [@generic={0xbf, 0x3, "24b3c56951aae7f0a1e009de72944f82520d5cd87bc88fec15e7b28bd6b47a1a4ff8a1fd5fc44577b708524ec1d0fa25951e7bbbd8ba5e58a1f5975e822e1a9a5bda71de6a79220cd2082a830f3bcdd4d0474dc502bce51ea1c68ef03e07377652ea3257fb0390043592b54e7bdbe76354240195fbd75c03c3fb31bd739ce2a671d27f731ee6e0fabeda439287ce0443726e379b0301c28450684bfec26aaee7cdbab686e969ac0fd0d2f7cff9bff331045781ecd8d74ddf012aa609a7"}, @generic={0x7e, 0x6, "636704a9829808a132f773ed0f0d3c0f70c800d5e6cf563e23b88af966c12a9aa15e21f2173eae3a464646adce1308c7ff8b3ca0aeb91bc05091d3f5331098d1aad6ea1daad50a20cf9575f9641efb47f12e065de6b94db02ca204a057a7a4c9fec56497dc642ec509886d27eb28fb86ad70b548ac42ee2598c031ec"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x3e, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0x218, 0xff, 0x1, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}, @generic={0x72, 0x23, "dc52d86ff5b84768c25cf9b6d56a5e18b7e238879a06cf9a83268b1e6df1db1e2b4ec59cfb7594c4727a4118d569599a1055b6195c8e9e3edfa4ddd6a438dc2ccea2537c86281021a5799b1b0bf3755719304151e449305685ba42772cf5e47418bf537bdd717b8bb4ee5c047fbc1c06"}]}}]}}, {{0x9, 0x4, 0x8f, 0x8, 0x7, 0x69, 0x3c, 0x2d, 0x6, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d90561a89c"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x1f, 0x9, 0x1, 0x77}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x7, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}, @ncm={0x6, 0x24, 0x1a, 0x3}]}], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0x1, 0x9, 0x32}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x20, 0x4e, 0x7}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x8, 0x7f, 0x80, [@generic={0x1b, 0xb, "c033d396799687f6cba964d42cc449f82371d0e37708ebef75"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x10, 0x1, 0x6, [@generic={0x29, 0x23, "6c8bad62891981eb53b4c342d3d5fb3fbe5580eec9d5297ff68bbf233667ec2730f086d375b063"}, @generic={0x69, 0xd, "107e887a1a29e051cc5d0c7ebaf550b29b96d31ce2075c4a4f601f814b19861bf342e9abf435ae0d1f8d22a1b12946f22524a4e9b9365cea7374d6f4d4b3352c3d2d4e049b70372458899ce45b7fb0881f3a4651f2a0081533205dcd072c115ed22c90a633fc6d"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x9, 0x3, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe7, 0x7f}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x1, 0x0, 0xe3, [@generic={0x99, 0x5, "b1af0feef9709c6445dcc344683c50301f2c5242c00233763834aaba4aa7d1b5ec54c3643227a9d81ddef36694cd99ac2d700b95756fdc7c68130824d362645b1394bbc9846c0cfc85d209d51bb81d0372a0e641bfd95f635936d687a083abb0d9c5cb5bea4ff95482e7fe3dbc230008368ce779caf15683134777eb991a5b630a2f9cfe2906925693504ae5d61921e17322e0c213664b"}, @generic={0xd2, 0xd, "ed4bb1e742b82eb2f5ff3a2e5785bd0772f3b142ddc91eb0771d366d0e54167dc935acc718069cc3097fa52c183db0bc3c1de8818a3a32d257801e8e014e9c78124d7a99b05047f03da147a753d7225ff3eceb5493678afdfcfd98965bea6abc82c9d090ffef038d30e9170176cf85f9aa3570d24f95f6e1281864a188645e24e40e1a26b095cb09419beeae289eb009d12e9677322566fa4051b365ea313e316ed9f1b904b8e740c0f470fef7998330d88eafb5bb70306a7ffd6d418f50e17a329dd22761d92f43f88aecf55feb6494"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x6, 0x3}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x200, 0x1f, 0x3, 0xa4, 0x8, 0xe}, 0x58, &(0x7f0000000c80)={0x5, 0xf, 0x58, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x20, "d31ff3f21a020c1263f2685b16d08fd5"}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x7fff, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa2, 0x1, 0x0, 0x33d, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "2e57ccb2bebe6d0812da09ee61f70a51"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "37aac2a17dd263aca3fa7ddf59488534"}]}, 0x3, [{0x18, &(0x7f0000000d80)=@string={0x18, 0x3, "496a94c898f454e00c3907b862220f2b0e3ab2a5231c"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x280a}}, {0x8f, &(0x7f0000000e00)=@string={0x8f, 0x3, "7c2c35a73f07bd1a80340a55647db125f5f1c9d4cf809bab25460f0ac0add634233fb5b711660e1864570bfbe4f991fa0115c3c5ec9f16e9890a95c560439b91e96341e6bcd5e4028c406b41320958efb8f63e8c5771d9d80d1a7560bd1ddf4266a6fd275dab0b694af3585afa72931766703dd8f01c2ef4d614491d2936dbf036c9c09340e7109767db82af6d"}}]}) read$char_usb(r0, 0x0, 0x0) 03:41:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:05 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 516.362931][ T2973] usb 5-1: USB disconnect, device number 21 03:41:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702005d02000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 516.622983][ T8141] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 516.644243][ T1265] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 516.653076][ T8526] usb 1-1: new high-speed USB device number 105 using dummy_hcd 03:41:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 516.673203][ T20] usb 2-1: new high-speed USB device number 113 using dummy_hcd 03:41:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:41:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 516.993728][ T8141] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 517.005298][ T1265] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 517.016542][ T8526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.035004][ T8526] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.053113][ T8141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 517.065222][ T1265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 517.078078][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 517.083833][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 517.089200][ T8141] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.111644][ T1265] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.114374][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 517.133998][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.165291][ T1265] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 517.189425][ T8526] usb 1-1: config 0 descriptor?? [ 517.197240][ T8141] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 517.212050][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.224731][ T8141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.232601][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.236538][ T1265] usb 3-1: config 0 descriptor?? [ 517.268579][ T8141] usb 6-1: config 0 descriptor?? [ 517.272089][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 517.302254][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.330336][ T8141] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 517.341570][ T1265] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 517.342251][ T20] usb 2-1: config 0 descriptor?? [ 517.372108][ T1265] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 517.387585][ T8141] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 517.455799][ T20] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 517.482556][ T8269] usb 1-1: USB disconnect, device number 105 [ 517.493447][ T2973] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 517.510737][ T20] ldusb 2-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 517.550635][ T8141] usb 3-1: USB disconnect, device number 95 [ 517.570936][ T8141] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 517.610384][ T20] usb 6-1: USB disconnect, device number 12 [ 517.639078][ T20] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 517.663349][T21407] udc-core: couldn't find an available UDC or it's busy [ 517.670305][T21407] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 517.683850][T21407] udc-core: couldn't find an available UDC or it's busy [ 517.691000][T21407] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 517.720663][ T1265] usb 2-1: USB disconnect, device number 113 [ 517.731385][ T1265] ldusb 2-1:0.0: LD USB Device #2 now disconnected [ 517.892912][ T2973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.903202][ T2973] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.916617][ T2973] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 517.928540][ T2973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.942447][ T2973] usb 5-1: config 0 descriptor?? 03:41:07 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) [ 517.994608][ T2973] ldusb 5-1:0.0: Interrupt in endpoint not found 03:41:07 executing program 5: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) [ 518.211021][ T8141] usb 5-1: USB disconnect, device number 22 [ 518.342732][ T2973] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 518.472865][ T8269] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 518.502786][ T1265] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 518.742871][ T2973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.761587][ T2973] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.771398][ T2973] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 518.781341][ T2973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.793842][ T2973] usb 1-1: config 0 descriptor?? [ 518.863280][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 518.874018][ T1265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 518.888275][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.892820][ T8269] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 518.903203][ T1265] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 518.920021][ T8269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 518.922302][ T1265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.939549][ T8269] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.939590][ T8269] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 518.939617][ T8269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.946430][ T8269] usb 6-1: config 0 descriptor?? [ 518.995407][ T1265] usb 2-1: config 0 descriptor?? [ 519.034252][ T8269] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 519.034252][ T1265] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 519.038401][ T8141] usb 1-1: USB disconnect, device number 106 [ 519.063131][ T1265] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 519.064096][ T8269] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 519.253700][T21407] udc-core: couldn't find an available UDC or it's busy [ 519.260673][T21407] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 519.269009][T21546] udc-core: couldn't find an available UDC or it's busy [ 519.276027][T21546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 519.302426][ T8269] usb 6-1: USB disconnect, device number 13 [ 519.333245][ T8269] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 519.369573][ T2973] usb 2-1: USB disconnect, device number 114 03:41:08 executing program 1: syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="ac13fd491607f08520b585a0aab26d4d416bdb5d46ef118e4916ab3c7aca78f176a956b4050eb20985160013c3a8ed9729943eac"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8610af71432d326d, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x21, 0x1, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0xff, 0x81, 0x4, 0x40, 0x5}, 0x163, &(0x7f0000000640)={0x5, 0xf, 0x163, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x3, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x81, 0xd5, 0x3, 0xd}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0xfc, 0x9, 0x1ff, 0x1}, @generic={0xb9, 0x10, 0x3, "00dc280d5083e977be299a8f836c509d407998f544ad2528afca8f2637ac14d352407332d90bab80154223cd3bee300c86791734ab8a75aab56bcf260ffe5843f00d4968cb463a66a716ddc3bcb25a9b2d08a08cfab1ca861cb6067d0aa3e2a1a52c0b5a0da77819c65d4101634c9d4701cb093c874f23adb8926aa8bcde2c01346730aa383c2ecd56bb57d052d858953e014f104e7f064b7f5ca7b64c1328dcfb03d5a3bc53664fefe902c6e2a1fa863b13c7c1b55d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0x3, 0x6d}, @generic={0x7e, 0x10, 0x1, "a84927784af728a1c4b71e72463fae6422a41f87eba2532438d626110a79f8279acf7ba996143e01aa2011391b4e9463e611dbd9cf53565aece77c1d872b08cefcb9a4fe6a4d4d93f957119ea23042df9f83b5af0fa71f4b60f145f2b6659c24ec7c0ea7299a7fbb2b041f40dec15e75c43b251264cf3829eff0c3"}]}, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000ff25930ae21dd8ed15051dd005a8a440000102030109021b0001019400060904000102070103"], &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x81, 0x7f, 0x5, 0x60}, 0x191, &(0x7f00000000c0)={0x5, 0xf, 0x191, 0x3, [@generic={0xdf, 0x10, 0x2, "3d020d1549463ad08f47922eef6c7b7d549baa777560c3b24478882211c0af42107e7c79eee7baa40b087ee4a2b7c7026b520dfd174e973abc2a4b7d82e1c916e90675432235982729ea25d7f72e4b977081bb17f3c788ea6e593a735e5526e5c6aef329c75fc0981f615892b7d5de0f4124a2134e56fe1c484b55234c5131e467fa8fb9b96a417a3f9f8212562bbe53cd776f44b3bbf277a9146db920001eb7e0b4a77670195bac3503c1507d97a88f3ce9f954d2d63ffba4d75d8efb017229028ff6eb8e266031aafc4aa3b1f567e1316126c57738de71f2efec94"}, @generic={0x99, 0x10, 0x1, "2014f5f5e8af6b9e7ba2e7b09526cca390564666f7fdbab6c32741df96a7d0548bd3dd06e3bdf09508c256cbdb88f5667044b8cee7f6b7d007df88aa712aaff4949e979ea27b4149b551a7c0da7859fe285bf66fddf33cff118f79ef53af74a19af951814d61cc658deede0867a37f507b31f1bfc665c08e46621ff5d98ce14c4bd068f6f8b7c3cf3cf6497ac5d2e8fbe12981cfc42d"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "0b71ed8bbebac4b54f2bdbb66a478a14"}]}, 0x1, [{0xf8, &(0x7f0000000280)=@string={0xf8, 0x3, "bf696f71e89ec9003cc9c932e76000ac55286b0337080e3d00692c171accc9fa766f9daec386b91d8500a4914da0b8ed1b80b4420010253387a6f6fe51ce4dc8d3918850038bfdc8d875338ce24c4383ea5e43e732fbde304718d52fbfa47c8a0385c33f4dc45175e0a23e65dad628d2bc24eca8517daa8e722a3607e549b612d1b7d496dbdb529a9504494b4f3ca7a5b84cf8f5d8b6bb42148564a6eef65da6ff10275b82e4414c12c77d3b35633b33552a0bce164d12a532d98a61c19aa8cbe54231104e601c0a75b8c997b50281075993affac1df7390840356ac0f82ad6e81dad48feb395af8424bd6e29bce8cd843123ec1ffdd"}}]}) read$char_usb(r0, 0x0, 0x0) 03:41:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:08 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 03:41:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 519.387336][ T2973] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:41:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:09 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) 03:41:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 519.742680][ T8531] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 519.750454][ T20] usb 5-1: new high-speed USB device number 23 using dummy_hcd 03:41:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:09 executing program 5: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) [ 519.913069][ T2973] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 519.982938][ T8269] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 520.112621][ T2973] usb 2-1: device descriptor read/64, error 18 [ 520.143005][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.153307][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 520.171321][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.184497][ T8531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 520.200752][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.218411][ T20] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 520.227557][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.235932][ T8532] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 520.243964][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 520.260081][ T20] usb 5-1: config 0 descriptor?? [ 520.270142][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.286581][ T8531] usb 3-1: config 0 descriptor?? [ 520.329213][ T20] ldusb 5-1:0.0: Interrupt in endpoint not found [ 520.349358][ T8531] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 520.377903][ T8531] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 520.402695][ T8269] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.413073][ T2973] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 520.442864][ T8269] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.451837][ T8269] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 520.465482][ T8269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.483722][ T8269] usb 1-1: config 0 descriptor?? [ 520.549192][ T8269] usb 5-1: USB disconnect, device number 23 [ 520.564214][ T1265] usb 3-1: USB disconnect, device number 96 [ 520.585462][ T1265] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 520.638554][ T2973] usb 2-1: device descriptor read/64, error 18 [ 520.702868][ T8532] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 520.713538][ T8532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 520.727012][ T8532] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.734252][ T8141] usb 1-1: USB disconnect, device number 107 [ 520.746028][ T8532] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 520.746054][ T8532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.748062][ T8532] usb 6-1: config 0 descriptor?? [ 520.768926][ T2973] usb usb2-port1: attempt power cycle [ 520.839028][ T8532] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 520.858590][ T8532] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 521.060859][ T8532] usb 6-1: USB disconnect, device number 14 [ 521.069848][ T8532] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 521.192499][ T2973] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 521.382597][ T2973] usb 2-1: device descriptor read/8, error -61 [ 521.652544][ T2973] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 521.822437][ T2973] usb 2-1: device descriptor read/8, error -61 [ 521.942964][ T2973] usb usb2-port1: unable to enumerate USB device 03:41:12 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1221000013a16e40110f3510ff950000000109022200410001010009040000011f8a0e582b9e6007d54ee9010576607249284800490500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0xd2, 0x1}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x250, 0x7, 0x5, 0x8, 0x0, 0x5}, 0xfd, &(0x7f0000000940)={0x5, 0xf, 0xfd, 0x1, [@generic={0xf8, 0x10, 0xa, "46a41dd5c12d67453f6bad760f837c4c88eb678d4699ed80e9f820f1cc15f4e9f69a3c4f0865bb8be58722a78b30276fc0664115ad45e1d763239e9a8734373346a2cc71031403effc03d12f06c5843ee1f4913760f2dd03d3db357a8ecb1fa99215f7eb1c8cc908b116154632746328199940e62d36b070097166781ab057d0bdf93f4f66d611d9f3bba5c8af6465a631bc854c031384ce178717535b126a0a6ef19c63d19bc14b59349c65e4b4799fbc69b71cbf347536f930df841821da55ad1bf337c644e02b4c2945448e37ab858e0cabea3fe79963bee2df62365cf5aa6b61be396e20d2f46ebcfb8ec0e1b35c41da98f43c"}]}, 0x2, [{0xf0, &(0x7f0000000a40)=@string={0xf0, 0x3, "fe641cc2783f7228cb7ef6ed9ed40180499ffc7ed442e55611e925fad8b1002c3d0fa1a3d4f5b6f5db7855ad7b61be46ed88981a9ff8ea99a3fc0d2bbbcaf0289f12108190f8fd83d421b2940371f6511b748b1406403fc4fb7187b774015cd5fa5f67b44dc78e1de51a573f00518c0f15947fbdd3fbd3e3cf95cdc85e96a0f00f99164780325451038c58e3176268ce35cfd6bbef3f8e6b50213b8c168ff0b91c5032daaaf94dd12958d6b8b3b133d293b4567e35512411a80ed16e8405a15201f11a2e73ddd9a032e6c4095063c2ded15d144e59290adf8cd9c2b4876f675a3a5dc95450547b5a5defe936392e"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x7, 0xde, {0xde, 0x23, "bb36962fc4b68fd016907f6ac10924aa9d627dc9cfbb31f50ab49d09f5629da836c4855c10e2de6c752d24ca5239798dbaee2dddd833bcb795b0c71ebc6cc9af64c1c4a06a4485e110ddf2a3fd45f14d2c0d9753212ffe080aea4b701aa14db812d538dbe338c4cf08aa25c6f48254c50cbd94e7940af2cd83583879f95c34cfcf16ef177d9ecb38ef6560aee8b2d51a94fe4fd25b2f0fcde5efdc70d09dd979ee94be17d25ef2a040f618d30dfe58a0cbcd417a15c7aafd511d89888dbbaca3f5a41b832874b5bc768511879c54cfc244179a17c0dc35f1808629c6"}}, &(0x7f0000000180)={0x0, 0x3, 0x77, @string={0x77, 0x3, "9a40f7a6e0317794d97aea14d90507f8e506fbedad1c44b0be536231e5bf0f45926529644dafd826cc51bd6759384689a5395d1166b0150b2a5741201ecdbb2b81f09dc70f6a39d58511a735aa4166ec1c8af2b20c67c49669148298c07e93828f22c9fe71247a47512c2d3bd5dbab43399e9e2ffe"}}, &(0x7f0000000200)={0x0, 0xf, 0x111, {0x5, 0xf, 0x111, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x7, 0xfa, 0x3f, 0xfd}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xf, 0x4}, @generic={0xe6, 0x10, 0x4, "96f2d3bee10a44fcf0d6c4b50f88eda9c472b3f7cab54024f43466d510dc9ffd67c19cfa9b163d5b4ceb9922dee01c450a899cd5d2399735dbf803e6ea0e3a8d11d9a9f294b8b037d48bee4937dbf5813babb6bcac3c2a65e0783b0a5da09102301b46fe1b31084efdbb6baf3e1b4c4ed1302eac525e444ebead254ab035fc7f1e08de535cfe1410d8f19fa002c9f5bbe66b359638af6dbe7ed4907a6bf1a23e70dc831461ad7d6e4c6c1518b65eb6617e24c8e84b7a3b5c85b451f5a75c50fa9cedf561fc31fe326f97e2da686354becf03706cd1ba2e7253526c27d0919236d1be0a"}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "f8418a0962c49c1c24d78a7965e4b7a1"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x9d, 0xfc, "4f36491c", "31b8ecb1"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x0, 0x1, 0x4f, 0x0, 0x7ff}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x40, 0x10, 0x26, "0aa17c6a855168893d1c920b044f219a922d7dd903dfce0cf9212fff84a271115fd1282f60ee"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "d2a5"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="d3c2b9471e64"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "3d1c"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x80}}) 03:41:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) 03:41:12 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 03:41:12 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905"], 0x0) 03:41:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 03:41:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 522.802531][ T2973] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 522.832468][ T8526] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 522.843028][ T8532] usb 5-1: new high-speed USB device number 24 using dummy_hcd 03:41:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 522.850752][ T8269] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 522.873503][ T8531] usb 2-1: new high-speed USB device number 119 using dummy_hcd 03:41:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 523.093058][ T8531] usb 2-1: device descriptor read/64, error 18 [ 523.202862][ T8526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.213184][ T8526] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 523.225238][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 523.235255][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.247196][ T8526] usb 1-1: config 0 descriptor?? [ 523.253404][ T2973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.269733][ T2973] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.284679][ T8269] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 523.293947][ T8526] ldusb 1-1:0.0: Interrupt in endpoint not found [ 523.295744][ T8532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.322858][ T2973] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 523.334054][ T8269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 523.350353][ T8532] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.369904][ T2973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.378368][ T8269] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.395876][ T2973] usb 6-1: config 0 descriptor?? [ 523.401670][ T8532] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 523.415435][ T8531] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 523.424004][ T8269] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 523.435209][ T8532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.445745][ T2973] ldusb 6-1:0.0: Interrupt in endpoint not found [ 523.452390][ T8269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.474129][ T8532] usb 5-1: config 0 descriptor?? [ 523.496934][ T8269] usb 3-1: config 0 descriptor?? [ 523.505383][ T8526] usb 1-1: USB disconnect, device number 108 [ 523.515278][ T8532] ldusb 5-1:0.0: Interrupt in endpoint not found [ 523.534620][ T8269] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 523.580818][ T8269] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 523.658747][ T8141] usb 6-1: USB disconnect, device number 15 [ 523.670061][ T8531] usb 2-1: device descriptor read/64, error 18 [ 523.717455][ T1265] usb 5-1: USB disconnect, device number 24 [ 523.743173][ T7808] usb 3-1: USB disconnect, device number 97 [ 523.763741][ T7808] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 523.813042][ T8531] usb usb2-port1: attempt power cycle [ 524.243960][ T8531] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 524.462284][ T8531] usb 2-1: device descriptor read/8, error -61 [ 524.732285][ T8531] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 524.922788][ T8531] usb 2-1: device descriptor read/8, error -61 [ 525.042182][ T8531] usb usb2-port1: unable to enumerate USB device 03:41:15 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1f, 0x20, 0x77, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xcba}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0xff, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81, 0xf7, 0x5a}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x4, 0x7, 0x0, 0x8, 0x20}, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="050f1000010b1001083e00f0060200079e0e585b8cc0507e046a478ab0dc71a23e8c1c76e17e0d4b42550771f61d982be5ee5b7f2796213849bc6f9e895b362b199efc42df1da6fbe42e17a5fbfe356fc08b2a809cbdd5759c5e214c264cae967b90ff09d03ea4249aee002c98fc32803c786d69d3de021f3429276981b325e7e80cf3e4e58669a51d7f2d32faa0618545514c94fec84d61090e00000000"], 0x2, [{0x57, &(0x7f0000000100)=@string={0x57, 0x3, "c0cd68973413c1c93af982b4e50c5368594662ea9ca74215300a9ec370860dd9c75e7073b74dc045ea5da6b297e8e23bd6b4fa2118deda31088532126878ab6218044311a54c2ad91662f260bd0ad1901c6b7bb916"}}, {0x68, &(0x7f0000000180)=@string={0x68, 0x3, "39e8f7b63d2b1e229c3a4dde227a51975badfd94afb1b45a4df5112a6d2c4913da092b000189391b84372bcd239ce8682bdae6ac09d65d4184fd8ffe989c1fdebb3b160540016fffaa22b17ef70debe18621b0a8f42e0a93b92c8238e73f5f06744528609e07"}}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r1, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_disconnect(r1) read$char_usb(r0, 0x0, 0x0) 03:41:15 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) 03:41:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:15 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x8, 0x90, {0x90, 0x9, "210d430d0e2f2305aeb0b53b0a5f75a2d99108287667dfa050dcf3ec7d9f5201b4d1b305da338c731ba21af3456493e9dff0dd67ebf7c196091e207be8d73671c4862b1c2b4e88823bf273295fdd720164575bc333be765ba3dd6b5bd404b99926a841b3dc9241f76736825ce3944599446b6f0c58a751b58230822300e626cbcbb8157389c69c172209804e37b0"}}, &(0x7f0000000100)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "5aa91de44ff83841082e21fc8ca0d9f50c60a16fca5214ac285bcdab7093ba54ef1e151f18ddfbbc8220091943572c0cfcc80b708c4f9922964d6a8fd44073db669a7d8110905764e89b2972039c80637f2b79eb0b984c34e5de97ebbe2e44cfe14badb76746e57460f0ddfdde040e2758ce1b1f2ab05c732949e8ac62dfd165892af7a50f1626c5525dd18410276a47a7e35489744cb7c8a4e2a5464b2e3d60bf7a3c5ebdbd010e53389df67c362d964e82"}}, &(0x7f00000001c0)={0x0, 0xf, 0x86, {0x5, 0xf, 0x86, 0x5, [@generic={0x55, 0x10, 0xa, "a2e5ceb8fa7cf21f14224b64af685f872f00ea8e7efde2bc50128d73141999dc2f13848be9c3989b1685be7e2d6837b83cbfb4f0608301f97d7d50eba25b1c39a1ad9f3087f288f77ac5d89bb76324e6bfc3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0x8, 0x6f, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "14d3a110edc4f136dc75caf936d1ed22"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3f, 0x4}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x3f, 0x0, "ce49ba2a", "229a3da4"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x8, 0x3, 0x4, 0x9, 0x9}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x57, "426e6a5c596338fb9e696d4884a02effbb43a3368636d13ae537eb3c1b1ca8f8c9c5b028dbc62aa0f7cdc4d7876e0fde0161c1091204e6dd830d2d0679f1b46c9a9000c78a661d500cb6b9a0b2c491fb20972d9d1cdb58"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x16a, 0x2}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000540)={0x40, 0xb, 0x2, "0324"}, &(0x7f0000000580)={0x40, 0xf, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "fe08"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0x21, 0x1}}) read$char_usb(r1, 0x0, 0x0) 03:41:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) 03:41:15 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 03:41:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 525.882179][ T7808] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 525.912290][ T8531] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 525.922712][ T8141] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 525.942184][ T8269] usb 1-1: new high-speed USB device number 109 using dummy_hcd 03:41:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 525.992476][ T8532] usb 2-1: new high-speed USB device number 123 using dummy_hcd 03:41:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 526.242729][ T7808] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 526.265876][ T7808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 526.280279][ T7808] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.295066][ T8141] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.305736][ T7808] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 526.316467][ T8141] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.322742][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 526.331785][ T7808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.339985][ T8269] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.350212][ T8141] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 526.358393][ T8531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 526.379303][ T8269] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 526.380442][ T8141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.388790][ T8269] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 526.399992][ T7808] usb 6-1: config 0 descriptor?? [ 526.405989][ T8532] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 526.426132][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.440479][ T8141] usb 5-1: config 0 descriptor?? [ 526.460081][ T8269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.464864][ T7808] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 526.469618][ T8532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 526.483358][ T8141] ldusb 5-1:0.0: Interrupt in endpoint not found [ 526.490482][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 526.512650][ T8269] usb 1-1: config 0 descriptor?? [ 526.527340][ T8532] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.542117][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.556297][ T7808] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 526.574745][ T8532] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 526.586773][ T8532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.609500][ T8531] usb 3-1: config 0 descriptor?? [ 526.623133][ T8532] usb 2-1: config 0 descriptor?? [ 526.663558][ T8531] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 526.685342][ T8532] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 526.691949][ T8141] usb 5-1: USB disconnect, device number 25 [ 526.721100][ T8531] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 526.735078][ T8532] ldusb 2-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 526.776763][ T7808] usb 1-1: USB disconnect, device number 109 [ 526.876302][ T8532] usb 3-1: USB disconnect, device number 98 [ 526.887531][T21785] udc-core: couldn't find an available UDC or it's busy [ 526.899200][T21785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 526.912145][ T8532] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 526.938460][T21785] udc-core: couldn't find an available UDC or it's busy [ 526.958486][T21785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 527.173156][ T8532] usb 2-1: USB disconnect, device number 123 [ 527.186852][ T8532] ldusb 2-1:0.0: LD USB Device #2 now disconnected [ 527.951797][ T8532] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 528.341852][ T8532] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 528.352539][ T8532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 528.365778][ T8532] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.379673][ T8532] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 528.393882][ T8532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.411461][ T8532] usb 2-1: config 0 descriptor?? [ 528.468083][ T8532] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 528.480016][ T8532] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 528.620104][ T7808] usb 6-1: USB disconnect, device number 16 [ 528.652609][ T7808] ldusb 6-1:0.0: LD USB Device #0 now disconnected 03:41:18 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) 03:41:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:18 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) 03:41:18 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 03:41:18 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) 03:41:18 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7ffff000, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x11}], 0x400000000000085, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="76e9a52140989558d7fc0f8ac5ab651e93745c854b62ccb25f5d85fbdcdafcdced57994e65f0de1c8a2fc94de4617db2e1c8e9d9627d5a83d9bcc5c92fa89d4892f8a1f2670b1fbabc3eb4282bb24c2604cb14b44876019fa4d8b8a57cf91e50200defea4549c4ff69a9a3e9059db4e8e327de79a7d0"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) [ 528.684624][ T8532] usb 2-1: USB disconnect, device number 124 [ 528.717971][ T8532] ldusb 2-1:0.0: LD USB Device #1 now disconnected 03:41:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000066000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 529.062140][ T8141] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 529.069862][ T8526] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 529.084412][ T8531] usb 3-1: new high-speed USB device number 99 using dummy_hcd 03:41:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 529.242437][ T8532] usb 2-1: new high-speed USB device number 125 using dummy_hcd 03:41:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:18 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) [ 529.442186][ T8526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.453125][ T8141] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.462001][ T8532] usb 2-1: device descriptor read/64, error 18 [ 529.472878][ T8141] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.486943][ T8526] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 529.502011][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 529.511054][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.521369][ T8141] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 529.531884][ T8141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.532151][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 529.558606][ T8526] usb 1-1: config 0 descriptor?? [ 529.569369][ T8531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 529.585609][ T8141] usb 5-1: config 0 descriptor?? [ 529.604825][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.627678][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 529.634092][ T8141] ldusb 5-1:0.0: Interrupt in endpoint not found [ 529.643379][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.685685][ T8531] usb 3-1: config 0 descriptor?? [ 529.742490][ T8531] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 529.752853][ T8532] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 529.789143][ T8531] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 529.849001][ T8141] usb 1-1: USB disconnect, device number 110 [ 529.892033][ T8531] usb 5-1: USB disconnect, device number 26 [ 529.981647][ T8532] usb 2-1: device descriptor read/64, error 18 [ 530.001785][ T8269] usb 3-1: USB disconnect, device number 99 [ 530.036922][ T8269] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 530.108854][ T8532] usb usb2-port1: attempt power cycle 03:41:20 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:20 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) 03:41:20 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:20 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) [ 530.552381][ T8532] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 530.782119][ T8532] usb 2-1: device descriptor read/8, error -61 [ 530.841678][ T7808] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 530.853639][ T2973] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 531.061733][ T8532] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 531.201714][ T7808] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 531.212256][ T7808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 531.225364][ T7808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.239691][ T7808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 531.249517][ T7808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.251916][ T2973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.260939][ T7808] usb 3-1: config 0 descriptor?? [ 531.269834][ T8532] usb 2-1: device descriptor read/8, error -61 [ 531.287276][ T2973] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.296884][ T2973] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 531.308087][ T2973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.325123][ T7808] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 531.326007][ T2973] usb 1-1: config 0 descriptor?? [ 531.349893][ T7808] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 531.411936][ T8532] usb usb2-port1: unable to enumerate USB device [ 531.531561][ T8532] usb 3-1: USB disconnect, device number 100 [ 531.540683][ T8532] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 531.596204][ T7808] usb 1-1: USB disconnect, device number 111 03:41:21 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220000c0000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 03:41:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000099000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:21 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, r2, 0xf, r3, 0x2) 03:41:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020000a0000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:21 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) 03:41:21 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:21 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) 03:41:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 532.291445][ T2973] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 532.341611][ T7808] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 532.512096][ T8141] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 532.631685][ T8532] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 532.691936][ T2973] usb 2-1: config 192 has an invalid interface number: 0 but max is -1 [ 532.701524][ T7808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.704992][ T2973] usb 2-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 532.717956][ T7808] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.728482][ T2973] usb 2-1: config 192 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 532.739221][ T7808] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 532.745423][ T2973] usb 2-1: config 192 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 532.754795][ T7808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.776057][ T2973] usb 2-1: config 192 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.781197][ T7808] usb 5-1: config 0 descriptor?? [ 532.806875][ T2973] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 532.819248][ T2973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.833562][ T7808] ldusb 5-1:0.0: Interrupt in endpoint not found [ 532.882612][ T2973] ldusb 2-1:192.0: Interrupt out endpoint not found (using control endpoint instead) [ 532.891782][ T8141] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 532.903674][ T8141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 532.922674][ T8141] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.936392][ T2973] ldusb 2-1:192.0: LD USB Device #0 now attached to major 180 minor 0 [ 532.964300][ T8141] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 532.985515][ T8141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.006460][ T8141] usb 3-1: config 0 descriptor?? [ 533.037238][ T2973] usb 5-1: USB disconnect, device number 27 [ 533.043764][ T8532] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.052842][ T8141] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 533.079327][ T8141] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 533.101939][ T8532] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.139849][ T8532] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 533.154046][ T8532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.178265][ T8531] usb 2-1: USB disconnect, device number 3 [ 533.189740][ T8532] usb 1-1: config 0 descriptor?? [ 533.196786][ T8531] ldusb 2-1:192.0: LD USB Device #0 now disconnected [ 533.256736][ T8532] ldusb 1-1:0.0: Interrupt in endpoint not found [ 533.269890][ T8269] usb 3-1: USB disconnect, device number 101 [ 533.301991][ T8269] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 533.458614][ T8532] usb 1-1: USB disconnect, device number 112 [ 533.871430][ T8269] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 534.261542][ T8269] usb 2-1: config 192 has an invalid interface number: 0 but max is -1 [ 534.269816][ T8269] usb 2-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 534.280324][ T8269] usb 2-1: config 192 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 534.292129][ T8269] usb 2-1: config 192 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 534.304376][ T8269] usb 2-1: config 192 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.319012][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 534.328638][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.382850][ T8269] ldusb 2-1:192.0: Interrupt out endpoint not found (using control endpoint instead) [ 534.400140][ T8269] ldusb 2-1:192.0: LD USB Device #0 now attached to major 180 minor 0 03:41:24 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xf, 0x91, {0x91, 0x22, "8c11925fce12a8c11617a814f3a365edd630edd08b627ae756898fa0f3775b75e7b738d859b290b010922a8fe47e6462734f04e33b779855522f7d9032f7de24c5c6df97f3b727277c4f428fa2ee1078f4f7bb7f9c02db443e7f295b2edc546f847e0b5bb83ce0e250680081111a6cd089152e71cf9a26a7b2f09189782c536a446bc30a815698cdd47e726db108cd"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, &(0x7f0000000140)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0xa8, 0x5, 0x5, 0xffff, 0xfb}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x78, 0x92, 0x5, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x68, "e84e27837098f17c6a407903eb923aac"}, @ss_container_id={0x14, 0x10, 0x4, 0x95, "37e9296670e4de48b94e6c40b721d02c"}, @ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x20, 0x3f, "6c0c2319", "e69e4db1"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa3, 0x10, 0x0, 0x6, 0x0, 0x1, 0x3}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0x18, 0x84, "905b903b71ded1816c623596d5f8343d690a5f491789931779985e418ce9b442d092b0ab3923d1b333c6d50f19b0c0d20c804c154348157ca80b89d3cd306d50ead1aa7f52d496b265a5a39652517eb8a68e3d8d34a8f670d519b8b05ebc9298d18a3f98bac7121d4befd8a7a2825b541de8e3369bd4595c431c5359cd86bd6a635c4454"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1000, 0x10}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "b6ee"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "0ccd"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x11}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) read$char_usb(r1, 0x0, 0x0) 03:41:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:24 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001"], 0x0) 03:41:24 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, r2, 0xf, r3, 0x2) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 03:41:24 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:24 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) [ 534.594792][ T8532] usb 2-1: USB disconnect, device number 4 [ 534.648956][ T8532] ldusb 2-1:192.0: LD USB Device #0 now disconnected 03:41:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020001b4000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020001cf000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 534.981260][ T8531] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 534.988968][ T8269] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 535.001632][ T2973] usb 1-1: new high-speed USB device number 113 using dummy_hcd 03:41:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 535.111355][ T8532] usb 2-1: new high-speed USB device number 5 using dummy_hcd 03:41:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:24 executing program 5: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 535.451634][ T8531] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.462138][ T8269] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 535.472738][ T2973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.489391][ T2973] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 535.504048][ T8531] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.518968][ T8269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 535.538427][ T8532] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 535.556365][ T2973] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 535.566928][ T8269] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.581342][ T20] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 535.588977][ T8531] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 535.599787][ T8532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 535.612275][ T2973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.620821][ T8531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.631472][ T8532] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.644576][ T8269] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 535.655372][ T2973] usb 1-1: config 0 descriptor?? [ 535.664591][ T8269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.674436][ T8531] usb 5-1: config 0 descriptor?? [ 535.680461][ T8532] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 535.696138][ T8532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.707215][ T8269] usb 3-1: config 0 descriptor?? [ 535.720850][ T8532] usb 2-1: config 0 descriptor?? [ 535.743602][ T8531] ldusb 5-1:0.0: Interrupt in endpoint not found [ 535.772520][ T8269] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 535.784002][ T8532] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 535.821219][ T8532] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 535.835651][ T8269] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 535.907793][ T7808] usb 1-1: USB disconnect, device number 113 [ 535.950333][ T8141] usb 5-1: USB disconnect, device number 28 [ 535.983992][ T8526] usb 3-1: USB disconnect, device number 102 [ 536.006834][ T20] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 536.008399][ T8526] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 536.023466][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 536.061255][ T20] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.076339][ T20] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 536.086827][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.098893][ T20] usb 6-1: config 0 descriptor?? [ 536.142628][ T20] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 536.159954][ T20] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 536.363844][ T20] usb 6-1: USB disconnect, device number 17 [ 536.382318][ T20] ldusb 6-1:0.0: LD USB Device #1 now disconnected 03:41:27 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r0, &(0x7f0000001ac0)=[{&(0x7f0000000740)="0cbd5104b8e97a0d158153bbc781f8ca82ead4e36b683e8a832934049115ff41ccb78d258a61aed7e87bf1daf3eaabb565713725f583b9307f7daab8ba3c3922ac768a2759a20b26f6587da29f12a36566841e965fef47aedd40d60f4facd64a38041a881e443dbb", 0x68}, {&(0x7f00000007c0)="53fe81432ef671f57df822587e0bf18e830806e517983881e664025b82d759234b7ab95fdac2168fdf028bd02737eefec7bb6fe2c49c96f362b42f19e08908664ed4f8b1be164e59b7224a3c1e0ba23f5e12dcb90ab82be343f34afcc4cdd24012a9c2e3ad1794bd692a62bda5ac0f761416c2c0b2c1e2b2707a8767e89fb2d1ca6d439879feca52044a37512bfb04eac1a96e349a962ca5e4118ab1e7b6f3e57031bbab46bb81688ff2b941afedaf9474b4fbee0e73c88dfd202d2d3f2cad313495467206751d9081578ec50c06647b4dec475e92c08c3d7863b7207e81d8388d", 0xe1}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="383fbe6b0c07981fd0cb9dc8b5665c36773f4994abc42f929d2698b4847401ac2b63c57cbdf4a42c531a21e36e4896ca2e4f08c8688b70052e268f449f21dba943adc302da58cb70f3cf0f45747fc12003000fc4ec93c9adfb64cce6965f44e026076f22861c0864d1f7b78095e1a174851fff7db1e20701a445ec5886ab4811e1045e3685cafa14c24b200ce323308b98fcb6e9827bf9d0477d28c2d3de8867a92e15c659c816dbd751681cfcb0416d7c99011cb47b83b49113065db7da54c2914ce55f734ef3ddace9dd8445b720e5bbe473c47a42c9a5172647703953494880d521c449f43c44fc911486128dbd3e46", 0xf1}, {&(0x7f00000019c0)="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", 0xfc}, {&(0x7f0000000200)="98e1dc7aa28515d812d93c108f12f62089e4406128840762160e3516080a7210aa03639a6635437c57746062424ed075d9", 0x31}], 0x6) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x20, 0x30, 0x20, {0x20, 0x24, "832fd5902bca2da395957a8713e23c235afc1a5c455dc1bb2f3d6d89d32b"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000000080)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0xea57e2956b0be22d, 0x6, 0x2, 0xfff, 0x7}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x4, 0x100}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1e, 0x7f, 0x40, 0xf965, 0x1}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0x9, 0xff, "a22908ff", "073451d9"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x4, 0xb5, 0x2, 0x7000, 0x7ff}}}, &(0x7f0000000600)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="40144d000000036890216f6727024b34465a1d1705735c80e67c07f9b10343b88ff7624dcd34cfc02ed03907430cf0b062e8ad673be114cb1163a67ce13a78a39227c7cc6cff861df17801671f031fed1c4b6aae4b5b559890b6d0"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000300)={0x20, 0x0, 0x8, {0x10, 0x1, [0xf]}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000380)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "ffdc"}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000480)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "aa79"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x979}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x49}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0x80}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x19) read$char_usb(r1, 0x0, 0x0) 03:41:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:27 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) 03:41:27 executing program 4: syz_usb_connect(0x0, 0x34, 0x0, 0x0) 03:41:27 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:27 executing program 5: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 537.677370][ T8269] usb 2-1: USB disconnect, device number 5 [ 537.717189][ T8269] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:41:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000200000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 538.040918][ T8526] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 538.062064][ T20] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 538.069920][ T8532] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 538.220853][ T8269] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 538.421212][ T20] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 538.432125][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 538.446357][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.459938][ T8532] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 538.470471][ T20] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 538.479897][ T8532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 538.481909][ T8526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.492520][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.510114][ T8532] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.527245][ T20] usb 3-1: config 0 descriptor?? [ 538.538046][ T8532] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 538.543038][ T8526] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.550294][ T8532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.572553][ T20] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 538.585219][ T8532] usb 6-1: config 0 descriptor?? [ 538.592431][ T20] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 538.604009][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 538.621275][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 538.633424][ T8532] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 538.645555][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.656862][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 538.672578][ T8532] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 538.688025][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.693679][ T8526] usb 1-1: config 0 descriptor?? [ 538.707560][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 538.718360][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.732595][ T8269] usb 2-1: config 0 descriptor?? [ 538.779381][ T8532] usb 3-1: USB disconnect, device number 103 [ 538.787233][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 538.798737][ T8532] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 538.827783][ T8269] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 538.884059][ T8269] usb 6-1: USB disconnect, device number 18 [ 538.896919][ T8269] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 538.990963][ T20] usb 2-1: USB disconnect, device number 6 [ 539.011594][ T8526] usb 1-1: USB disconnect, device number 114 [ 539.013572][ T20] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 539.770839][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 540.130759][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 540.141327][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 540.155052][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.169340][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 540.178550][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.189866][ T20] usb 2-1: config 0 descriptor?? [ 540.232461][ T20] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 540.244514][ T20] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:41:30 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 03:41:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:30 executing program 4: syz_usb_connect(0x0, 0x34, 0x0, 0x0) 03:41:30 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:30 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffffffc}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x113101, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x2, 0x2, 0x81, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe0000000, 0x0, @perf_config_ext={0x6, 0x4}, 0x5914, 0x3f, 0x2, 0x2, 0xdea, 0xff, 0xe, 0x0, 0x8000, 0x0, 0x1f}, r2, 0xf, r3, 0x2) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000080)="3647e6dbdd0b611c641141c419dd08cf6b952ec6ba071d68577dee4b58866f4fbbd39b134d", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="36debc8ad535796cee7aedc7aaf1113025400429a95ca1427f37fa4342f4552119e10a") 03:41:30 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) [ 540.434392][ T8526] usb 2-1: USB disconnect, device number 7 [ 540.462610][ T8526] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:41:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000000200bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 540.811216][ T7808] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 540.850993][ T20] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 540.960821][ T8526] usb 2-1: new high-speed USB device number 8 using dummy_hcd 03:41:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000000400bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:30 executing program 4: syz_usb_connect(0x0, 0x34, 0x0, 0x0) [ 541.221038][ T7808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.221097][ T20] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 541.244865][ T7808] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.255615][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 541.266874][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.281024][ T20] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 541.291030][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.302020][ T20] usb 3-1: config 0 descriptor?? [ 541.303698][ T7808] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 541.342116][ T20] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 541.348995][ T7808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.370832][ T8526] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 541.373464][ T20] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 541.387633][ T8526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 541.408878][ T7808] usb 1-1: config 0 descriptor?? [ 541.433261][ T8526] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.457297][ T8526] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 541.482308][ T8526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.517852][ T8526] usb 2-1: config 0 descriptor?? [ 541.552731][ T20] usb 3-1: USB disconnect, device number 104 [ 541.569293][ T20] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 541.582198][ T8526] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 541.616144][ T8526] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 541.674139][ T8526] usb 1-1: USB disconnect, device number 115 [ 541.788081][ T7808] usb 2-1: USB disconnect, device number 8 [ 541.815865][ T7808] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 542.610438][ T8269] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 542.980557][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 542.991075][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 543.002396][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.015680][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 543.025101][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.035882][ T8269] usb 2-1: config 0 descriptor?? [ 543.082117][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 543.094094][ T8269] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:41:32 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x14000, 0x10) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x15, 0xee, &(0x7f0000000100)="8e951b58131b5dc0aaed05f54168de2b62c39e93a495ea29eda15d85513aecd79cfb8cb96eb075f553cf8309b307c21a60f47c3f0d92ac892afcf63c3f41c442660bc02cc9605d155a49061ab586c51b55ca60023f7ef7802b638c448d7a67e9b3b7af12d2822d9951a95e19c32b1a9f4d7cb71fc87d63725f62280145b7023037d2f05e7ae335f88f840da88a2991ee94db3cd67ba29e38a7ec47ae3ca7ceb9ec13cbdd34e93c15dc79800ee1b03cb4cd19d5efeb623c2dddb4464a11af53711601bb7563abc97a128b3cb3a003c9f2a1f07304f3fe668b42e96bae4026d64cda12e2b459defa7ad62c0125f3c2"}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 03:41:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:32 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) 03:41:32 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:32 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) [ 543.286150][ T8269] usb 2-1: USB disconnect, device number 9 [ 543.319564][ T8269] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:41:32 executing program 1: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x627, 0xd4c5, {0xffffffffffffffff}, {0xee00}, 0x8, 0x3f}) waitid(0x1, r0, &(0x7f0000000500), 0x40000000, &(0x7f0000000580)) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x664, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x42cb, &(0x7f00000006c0)={0x0, 0xf5a3, 0x2, 0x0, 0xe1, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000740), &(0x7f0000000780)=0x0) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) syz_io_uring_submit(r2, r4, &(0x7f0000000840)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000800)={r5, r6+10000000}, 0x1, 0x1}, 0x1) r7 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r7, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000880)={0x14, &(0x7f0000000100)={0x20, 0xd, 0x102, {0x102, 0xc, "472a0eddc02c7b16e5adfa97902b005bb61ded41be5fc7848a70b533def418351351fbaa8dc46eea75379edf3fedd659eee6c27cb468a50edce8b89b817e42b52c5f66419408636beb6c13c4a1e3af9e8dbc164192f8a3c4921cef1ca078804cfa9edd0a2a1ff4a396d0e54d0bb01b38719cffb6fd08a1fc8ea3c883a892bdcc512db51447badd81c1cf7f0311198e70477a8c97bebbaf023fbbf3d80027571ac2228145318a7c68c8351c97ffae13bc64ae45fef5b332fef7eba7f22710938c691f10a227ff53499e7407a83c961078aff5e2faa31aa01e1b4aa828aa7ef79af4002c2e975efb772b74208010aef5d843f564bee3dcf1987e7a5c9cac6a4da4"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0x7, 0x6d, "dc11acee7eb44d162417804c381d8357102b00e6c4eed2c83912ffc45166f6890769aaa07ab29969cc64d826f49b16746a6b776729bffe10b33e3fc1fe845f6d488bbba374b8bf1c1829a4063f595eddc2fa6aa670d4515fe9b88c94db679ffbb932f68b070e62aed99f8f399d"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x4d}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x81, 0x3, "bf9648"}, &(0x7f0000000340)={0x20, 0x82, 0x1, "8f"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "ecd3a6"}, &(0x7f00000008c0)=ANY=[@ANYRESDEC], &(0x7f0000000400)={0x20, 0x85, 0x3, "bf78d3"}}) read$char_usb(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) write$char_usb(r1, &(0x7f0000000640)="de7c93134c52ba2107dab672900cf72ef62b6f10487b26d9baefff565b35f04647a04a3dd1c0eed56f29197e08078ec85d56b62b3de4150c718de9fff094edb33bc11b120829923c2d7407d28821b357ad442900bd5c47a09b22c2ee31e189843eddd1c1a8", 0x65) 03:41:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 543.660364][ T8526] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 543.670551][ T1265] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 543.678215][ T7808] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 543.690617][ T20] usb 1-1: new high-speed USB device number 116 using dummy_hcd 03:41:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000000900bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 543.860402][ T8269] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 543.860409][ T1265] usb 5-1: device descriptor read/64, error 18 [ 544.040406][ T7808] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 544.051140][ T8526] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 544.062693][ T7808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 544.085143][ T8526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 544.100574][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.100721][ T8526] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.119542][ T20] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 544.126172][ T7808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.133460][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.158005][ T20] usb 1-1: config 0 descriptor?? [ 544.170092][ T7808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 544.180884][ T1265] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 544.197766][ T8526] usb 6-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 544.208554][ T7808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.212117][ T20] ldusb 1-1:0.0: Interrupt in endpoint not found [ 544.240331][ T8526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.259859][ T7808] usb 3-1: config 0 descriptor?? [ 544.265930][ T8526] usb 6-1: config 0 descriptor?? [ 544.280940][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 544.304669][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 544.311753][ T7808] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 544.316026][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.326499][ T8526] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 544.338333][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 544.356531][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.372950][ T8269] usb 2-1: config 0 descriptor?? [ 544.406152][ T7808] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 544.420605][ T1265] usb 5-1: device descriptor read/64, error 18 [ 544.426615][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 544.427792][ T8526] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 544.466560][ T20] usb 1-1: USB disconnect, device number 116 [ 544.477007][ T8269] ldusb 2-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 544.521359][ T8526] usb 3-1: USB disconnect, device number 105 [ 544.540970][ T1265] usb usb5-port1: attempt power cycle [ 544.553602][ T8526] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 544.599859][ T8269] usb 6-1: USB disconnect, device number 19 [ 544.617274][ T8269] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 544.636556][T22511] udc-core: couldn't find an available UDC or it's busy [ 544.661193][T22511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 544.690474][ T7808] usb 2-1: USB disconnect, device number 10 [ 544.709586][ T7808] ldusb 2-1:0.0: LD USB Device #2 now disconnected [ 544.950616][ T1265] usb 5-1: new high-speed USB device number 31 using dummy_hcd 03:41:34 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 545.140621][ T1265] usb 5-1: device descriptor read/8, error -61 [ 545.207590][T22600] FAULT_INJECTION: forcing a failure. [ 545.207590][T22600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.223703][T22600] CPU: 0 PID: 22600 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 545.232492][T22600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.242582][T22600] Call Trace: [ 545.245871][T22600] dump_stack_lvl+0x201/0x2d8 [ 545.250586][T22600] ? show_regs_print_info+0x12/0x12 [ 545.255797][T22600] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 545.261527][T22600] ? __might_fault+0xb8/0x110 [ 545.266234][T22600] should_fail+0x384/0x4b0 [ 545.270672][T22600] _copy_from_user+0x2d/0x170 [ 545.275370][T22600] __copy_msghdr_from_user+0xaf/0x730 [ 545.280859][T22600] ? __ia32_sys_shutdown+0x60/0x60 [ 545.286030][T22600] __sys_sendmmsg+0x3b7/0x800 [ 545.290757][T22600] ? __ia32_sys_sendmsg+0x90/0x90 [ 545.295844][T22600] ? rcu_read_lock_sched_held+0x89/0x130 [ 545.301523][T22600] ? __lock_acquire+0x2b00/0x2b00 [ 545.306578][T22600] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 545.312569][T22600] ? print_irqtrace_events+0x220/0x220 [ 545.318033][T22600] ? vtime_user_exit+0x2b2/0x3e0 [ 545.322986][T22600] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 545.328983][T22600] __x64_sys_sendmmsg+0x9c/0xb0 [ 545.333852][T22600] do_syscall_64+0x44/0xd0 [ 545.338319][T22600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 545.344202][T22600] RIP: 0033:0x7f4fb6455a39 [ 545.348599][T22600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 545.368193][T22600] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 545.376608][T22600] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 545.384600][T22600] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 545.392552][T22600] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 545.400504][T22600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.408457][T22600] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 545.580174][ T8269] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 545.580259][ T1265] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 545.760735][ T1265] usb 5-1: device descriptor read/8, error -61 [ 545.880715][ T1265] usb usb5-port1: unable to enumerate USB device [ 546.000336][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 546.011004][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 546.024101][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.038454][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 546.048328][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.063059][ T8269] usb 2-1: config 0 descriptor?? [ 546.112025][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 546.140960][ T8269] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:41:35 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) 03:41:35 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) 03:41:35 executing program 2: io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 546.316733][T22511] udc-core: couldn't find an available UDC or it's busy [ 546.329032][T22511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 546.394344][ T20] usb 2-1: USB disconnect, device number 11 [ 546.400376][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 546.406549][T22621] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 546.438538][ T20] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:41:36 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2243c0, 0x0, 0x2}, 0x18) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x4, 0x3423}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x24, 0x49, 0x400, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x8, 0x0, r5, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5b386a262833ca2b}, 0x800) read$char_usb(r2, &(0x7f0000000140)=""/68, 0x44) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) 03:41:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:36 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:36 executing program 2: io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 546.604027][T22646] FAULT_INJECTION: forcing a failure. [ 546.604027][T22646] name failslab, interval 1, probability 0, space 0, times 0 [ 546.646525][T22646] CPU: 0 PID: 22646 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 546.655317][T22646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.665380][T22646] Call Trace: [ 546.668694][T22646] dump_stack_lvl+0x201/0x2d8 [ 546.673390][T22646] ? show_regs_print_info+0x12/0x12 [ 546.678602][T22646] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 546.684341][T22646] ? __might_sleep+0x110/0x110 [ 546.689125][T22646] should_fail+0x384/0x4b0 [ 546.693563][T22646] ? __alloc_skb+0xd8/0x580 [ 546.698078][T22646] should_failslab+0x5/0x20 [ 546.702626][T22646] kmem_cache_alloc_node+0x77/0x340 [ 546.707855][T22646] __alloc_skb+0xd8/0x580 [ 546.712192][T22646] ? __lock_acquire+0x1382/0x2b00 [ 546.717227][T22646] alloc_skb_with_frags+0xab/0x660 [ 546.722434][T22646] sock_alloc_send_pskb+0x928/0xa60 [ 546.727668][T22646] ? sock_kzfree_s+0x50/0x50 [ 546.732265][T22646] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 546.738430][T22646] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 546.743370][T22646] ? __ip_append_data+0x254/0x37c0 [ 546.748488][T22646] ? __ip_append_data+0x399/0x37c0 [ 546.753625][T22646] __ip_append_data+0x2378/0x37c0 [ 546.758675][T22646] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 546.764686][T22646] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 546.769564][T22646] ? ip_setup_cork+0x840/0x840 [ 546.774348][T22646] ? ipv4_mtu+0x28a/0x380 [ 546.778697][T22646] ? ip_setup_cork+0x479/0x840 [ 546.783571][T22646] ip_make_skb+0x1d3/0x480 [ 546.788011][T22646] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 546.792875][T22646] ? ip_flush_pending_frames+0x260/0x260 [ 546.798544][T22646] udp_sendmsg+0x2397/0x34f0 [ 546.803241][T22646] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 546.808104][T22646] ? udp_cmsg_send+0x340/0x340 [ 546.812895][T22646] ? mark_lock+0x191/0x1e00 [ 546.817420][T22646] ? __print_lock_name+0x1d0/0x1d0 [ 546.822540][T22646] ? mark_lock+0x191/0x1e00 [ 546.827062][T22646] ? __print_lock_name+0x1d0/0x1d0 [ 546.832190][T22646] udpv6_sendmsg+0xaaa/0x35f0 [ 546.836939][T22646] ? validate_chain+0x128/0x8240 [ 546.841900][T22646] ? xfrm6_policy_check+0x590/0x590 [ 546.847132][T22646] ? smack_socket_sendmsg+0x16e/0x530 [ 546.852573][T22646] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 546.859006][T22646] ? tomoyo_socket_bind_permission+0x360/0x360 [ 546.865166][T22646] ? __might_fault+0xb8/0x110 [ 546.869860][T22646] ? sock_rps_record_flow+0x12/0x370 [ 546.875202][T22646] ? inet_send_prepare+0x55/0x250 [ 546.880241][T22646] ? inet6_compat_ioctl+0x560/0x560 [ 546.885490][T22646] ____sys_sendmsg+0x5b9/0x910 [ 546.890274][T22646] ? __sys_sendmsg_sock+0x30/0x30 [ 546.895330][T22646] __sys_sendmmsg+0x57e/0x800 [ 546.900037][T22646] ? __ia32_sys_sendmsg+0x90/0x90 [ 546.905070][T22646] ? rcu_read_lock_sched_held+0x89/0x130 [ 546.910756][T22646] ? rcu_read_lock_sched_held+0x89/0x130 [ 546.916428][T22646] ? __lock_acquire+0x2b00/0x2b00 [ 546.921473][T22646] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 546.927462][T22646] ? print_irqtrace_events+0x220/0x220 [ 546.932922][T22646] ? vtime_user_exit+0x2b2/0x3e0 [ 546.937879][T22646] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 546.943873][T22646] __x64_sys_sendmmsg+0x9c/0xb0 [ 546.948734][T22646] do_syscall_64+0x44/0xd0 [ 546.953164][T22646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 546.959062][T22646] RIP: 0033:0x7f4fb6455a39 [ 546.963486][T22646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 546.983093][T22646] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 03:41:36 executing program 2: io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:36 executing program 2: syz_usb_connect(0x0, 0x34, 0x0, 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 546.991514][T22646] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 546.999488][T22646] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 547.007459][T22646] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 547.015440][T22646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.023398][T22646] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 547.042474][ T1265] usb 1-1: new high-speed USB device number 117 using dummy_hcd 03:41:36 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 547.200376][ T8269] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 547.279460][T22669] FAULT_INJECTION: forcing a failure. [ 547.279460][T22669] name failslab, interval 1, probability 0, space 0, times 0 [ 547.313571][T22669] CPU: 0 PID: 22669 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 547.322368][T22669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.332518][T22669] Call Trace: [ 547.335804][T22669] dump_stack_lvl+0x201/0x2d8 [ 547.340500][T22669] ? show_regs_print_info+0x12/0x12 [ 547.345715][T22669] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 547.351451][T22669] ? __might_sleep+0x110/0x110 [ 547.356240][T22669] should_fail+0x384/0x4b0 [ 547.360672][T22669] ? alloc_skb_with_frags+0xab/0x660 [ 547.365967][T22669] should_failslab+0x5/0x20 [ 547.370474][T22669] __kmalloc_node_track_caller+0x97/0x3e0 [ 547.376205][T22669] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 547.382018][T22669] ? kmem_cache_alloc_node+0x250/0x340 [ 547.387492][T22669] ? __alloc_skb+0xd8/0x580 [ 547.392011][T22669] ? alloc_skb_with_frags+0xab/0x660 [ 547.397302][T22669] __alloc_skb+0x127/0x580 [ 547.401736][T22669] alloc_skb_with_frags+0xab/0x660 [ 547.406876][T22669] sock_alloc_send_pskb+0x928/0xa60 [ 547.412107][T22669] ? sock_kzfree_s+0x50/0x50 [ 547.416717][T22669] ? rcu_read_lock_sched_held+0x89/0x130 [ 547.422361][T22669] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 547.428360][T22669] __ip_append_data+0x2378/0x37c0 [ 547.433421][T22669] ? lockdep_hardirqs_on+0x95/0x140 [ 547.438643][T22669] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 547.443518][T22669] ? ipv4_mtu+0x52/0x380 [ 547.447768][T22669] ? ip_setup_cork+0x840/0x840 [ 547.452542][T22669] ? ipv4_mtu+0x28a/0x380 [ 547.456886][T22669] ? ip_setup_cork+0x479/0x840 [ 547.461669][T22669] ip_make_skb+0x1d3/0x480 [ 547.466108][T22669] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 547.470971][T22669] ? ip_flush_pending_frames+0x260/0x260 [ 547.476631][T22669] ? xfrm_pols_put+0x23/0x1c0 [ 547.481406][T22669] ? xfrm_lookup_route+0xe0/0x190 [ 547.486441][T22669] ? __sanitizer_cov_trace_pc+0x3f/0x60 [ 547.492061][T22669] udp_sendmsg+0x2397/0x34f0 [ 547.496660][T22669] ? finish_lock_switch+0x1c0/0x350 [ 547.501899][T22669] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 547.506735][T22669] ? udp_cmsg_send+0x340/0x340 [ 547.511497][T22669] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 547.517469][T22669] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 547.523617][T22669] ? lockdep_hardirqs_on+0x95/0x140 [ 547.528822][T22669] ? udpv6_sendmsg+0xa8d/0x35f0 [ 547.533656][T22669] ? udpv6_sendmsg+0xa9a/0x35f0 [ 547.538498][T22669] udpv6_sendmsg+0xaaa/0x35f0 [ 547.543159][T22669] ? validate_chain+0x128/0x8240 [ 547.548090][T22669] ? xfrm6_policy_check+0x590/0x590 [ 547.553322][T22669] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 547.559290][T22669] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 547.565430][T22669] ? lockdep_hardirqs_on+0x95/0x140 [ 547.570613][T22669] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 547.576751][T22669] ? tomoyo_socket_sendmsg_permission+0x121/0x410 [ 547.583145][T22669] ? inet6_sendmsg+0x51/0xc0 [ 547.587734][T22669] ? __sanitizer_cov_trace_const_cmp4+0x90/0xa0 [ 547.593974][T22669] ? inet6_compat_ioctl+0x560/0x560 [ 547.599152][T22669] ____sys_sendmsg+0x5b9/0x910 [ 547.603903][T22669] ? __sys_sendmsg_sock+0x30/0x30 [ 547.608935][T22669] __sys_sendmmsg+0x57e/0x800 [ 547.613622][T22669] ? __ia32_sys_sendmsg+0x90/0x90 [ 547.618625][T22669] ? rcu_read_lock_sched_held+0x89/0x130 [ 547.624258][T22669] ? rcu_read_lock_sched_held+0x89/0x130 [ 547.629890][T22669] ? print_irqtrace_events+0x220/0x220 [ 547.635349][T22669] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 547.641509][T22669] __x64_sys_sendmmsg+0x9c/0xb0 [ 547.646379][T22669] do_syscall_64+0x44/0xd0 [ 547.650778][T22669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 547.656654][T22669] RIP: 0033:0x7f4fb6455a39 [ 547.661059][T22669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 547.680659][T22669] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 547.689057][T22669] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 547.697030][T22669] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 547.704999][T22669] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 547.712949][T22669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.720903][T22669] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 547.743859][ T20] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 547.840179][ T8269] usb 5-1: device descriptor read/64, error 18 [ 547.850457][ T1265] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.867837][ T1265] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 547.877365][ T1265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.888625][ T1265] usb 1-1: config 0 descriptor?? [ 547.931471][ T1265] ldusb 1-1:0.0: Interrupt in endpoint not found [ 548.130206][ T8269] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 548.143361][ T1265] usb 1-1: USB disconnect, device number 117 [ 548.180118][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 548.197689][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 548.210633][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.224924][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 548.235384][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.247996][ T20] usb 2-1: config 0 descriptor?? [ 548.291425][ T20] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 548.315107][ T20] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 548.352817][ T8269] usb 5-1: device descriptor read/64, error 18 [ 548.470620][ T8269] usb usb5-port1: attempt power cycle [ 548.499170][ T1265] usb 2-1: USB disconnect, device number 12 [ 548.520081][ T1265] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 548.899898][ T8269] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 549.099958][ T8269] usb 5-1: device descriptor read/8, error -61 [ 549.299929][ T20] usb 2-1: new high-speed USB device number 13 using dummy_hcd 03:41:39 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) 03:41:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000000f00bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:39 executing program 2: syz_usb_connect(0x0, 0x34, 0x0, 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 549.369878][ T8269] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 549.506679][ T8269] usb 5-1: device descriptor read/8, error -71 [ 549.640418][ T8269] usb usb5-port1: unable to enumerate USB device [ 549.720005][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 549.730490][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 549.743843][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.757743][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 549.768741][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.782080][ T20] usb 2-1: config 0 descriptor?? 03:41:39 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$char_usb(r1, &(0x7f0000000100)="ed47134f4f9c1f5229898745a18e163f8361b21d6dbfea88d50304228b7c86885fe9f14439125ffe315b9fee6538f4ea54e6c9353b5b60f2590473c47acf3bb461cedaf7e37ec7684530e1a233e7c7a0c6f9a57ff071b3110f1642529d5839ac4c01350eb6f9546d7c713f37852e9227ba25b574402cc4aa1aa56f77cb78345581db804dc66b27b0907ca1543c6c12ea6fcce35f0af9fa32002e7648232aa9a70f7fbb8d8b7662bac78d5de946a04c14398f185c02634c0b23ae2cda75c1d7d25a270eea31796e86f1751ea756be5a932638d93fb398f8ee1d24ac", 0xdb) 03:41:39 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:39 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) 03:41:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000001000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 549.868098][ T20] usb 2-1: can't set config #0, error -71 [ 549.877792][ T20] usb 2-1: USB disconnect, device number 13 [ 549.913194][T22735] FAULT_INJECTION: forcing a failure. [ 549.913194][T22735] name failslab, interval 1, probability 0, space 0, times 0 [ 549.937643][T22735] CPU: 1 PID: 22735 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 549.946429][T22735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.956489][T22735] Call Trace: [ 549.959776][T22735] dump_stack_lvl+0x201/0x2d8 [ 549.964473][T22735] ? show_regs_print_info+0x12/0x12 [ 549.969701][T22735] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 549.975437][T22735] ? rcu_lock_release+0x5/0x20 [ 549.980308][T22735] ? __lock_acquire+0x2b00/0x2b00 [ 549.985351][T22735] ? seqcount_lockdep_reader_access+0x1df/0x230 [ 549.991608][T22735] should_fail+0x384/0x4b0 [ 549.996038][T22735] ? __nf_conntrack_alloc+0x8f/0x380 [ 550.001334][T22735] should_failslab+0x5/0x20 [ 550.005843][T22735] kmem_cache_alloc+0x74/0x300 03:41:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 550.010634][T22735] __nf_conntrack_alloc+0x8f/0x380 [ 550.015768][T22735] init_conntrack+0x3b4/0x16f0 [ 550.020544][T22735] ? nf_ct_get_tuplepr+0x210/0x210 [ 550.025679][T22735] ? early_drop+0x680/0x680 [ 550.030203][T22735] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 550.036213][T22735] resolve_normal_ct+0x98e/0xfd0 [ 550.041177][T22735] ? nf_conntrack_handle_icmp+0x17b/0x17b [ 550.046912][T22735] ? ipt_do_table+0x19b2/0x1cc0 [ 550.051870][T22735] nf_conntrack_in+0x32c/0xd85 [ 550.056665][T22735] ? nf_ct_pernet+0x200/0x200 [ 550.061362][T22735] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 550.067360][T22735] ? trace_prandom_u32+0xde/0x260 [ 550.072455][T22735] ? ipv4_conntrack_defrag+0x285/0x580 [ 550.077922][T22735] ? ipv4_conntrack_local+0x110/0x1d0 [ 550.083304][T22735] ? ipv4_conntrack_in+0x20/0x20 [ 550.088242][T22735] nf_hook_slow+0xb2/0x1f0 [ 550.092730][T22735] ? nf_hook+0x3d0/0x3d0 [ 550.096989][T22735] nf_hook+0x26e/0x3d0 [ 550.101071][T22735] ? dst_release+0x51/0xe0 [ 550.105561][T22735] ? __ip_local_out+0x4e0/0x4e0 [ 550.110427][T22735] ? nf_hook+0x3d0/0x3d0 [ 550.114691][T22735] __ip_local_out+0x3a6/0x4e0 [ 550.119373][T22735] ? nf_hook+0x3d0/0x3d0 [ 550.123647][T22735] ip_send_skb+0x49/0x1a0 [ 550.127988][T22735] udp_send_skb+0x97e/0x1240 [ 550.132613][T22735] udp_sendmsg+0x23c1/0x34f0 [ 550.137234][T22735] ? rcu_read_lock_sched_held+0x89/0x130 [ 550.142881][T22735] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 550.147744][T22735] ? udp_cmsg_send+0x340/0x340 [ 550.152536][T22735] ? mark_lock+0x191/0x1e00 [ 550.157049][T22735] ? __print_lock_name+0x1d0/0x1d0 [ 550.162168][T22735] udpv6_sendmsg+0xaaa/0x35f0 [ 550.166946][T22735] ? xfrm6_policy_check+0x590/0x590 [ 550.172148][T22735] ? smack_socket_sendmsg+0x16e/0x530 [ 550.177508][T22735] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 550.183911][T22735] ? tomoyo_socket_bind_permission+0x360/0x360 [ 550.190046][T22735] ? __might_fault+0xb8/0x110 [ 550.194714][T22735] ? sock_rps_record_flow+0x12/0x370 [ 550.199985][T22735] ? inet_send_prepare+0x55/0x250 [ 550.204998][T22735] ? inet6_compat_ioctl+0x560/0x560 [ 550.210182][T22735] ____sys_sendmsg+0x5b9/0x910 [ 550.214966][T22735] ? __sys_sendmsg_sock+0x30/0x30 [ 550.220002][T22735] __sys_sendmmsg+0x57e/0x800 [ 550.224686][T22735] ? __ia32_sys_sendmsg+0x90/0x90 [ 550.229744][T22735] ? rcu_read_lock_sched_held+0x89/0x130 [ 550.235393][T22735] ? __lock_acquire+0x2b00/0x2b00 [ 550.240414][T22735] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 550.246380][T22735] ? print_irqtrace_events+0x220/0x220 [ 550.251820][T22735] ? vtime_user_exit+0x2b2/0x3e0 [ 550.256752][T22735] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 550.262726][T22735] __x64_sys_sendmmsg+0x9c/0xb0 [ 550.267565][T22735] do_syscall_64+0x44/0xd0 [ 550.271976][T22735] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 550.277977][T22735] RIP: 0033:0x7f4fb6455a39 [ 550.282400][T22735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 550.301995][T22735] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 03:41:39 executing program 2: syz_usb_connect(0x0, 0x34, 0x0, 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 550.310399][T22735] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 550.318354][T22735] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 550.326312][T22735] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 550.334271][T22735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.342225][T22735] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 550.350473][ T8526] usb 1-1: new high-speed USB device number 118 using dummy_hcd 03:41:40 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 550.449962][ T8269] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 550.492607][T22755] FAULT_INJECTION: forcing a failure. [ 550.492607][T22755] name failslab, interval 1, probability 0, space 0, times 0 [ 550.507340][T22755] CPU: 0 PID: 22755 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 550.516122][T22755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.526181][T22755] Call Trace: [ 550.529465][T22755] dump_stack_lvl+0x201/0x2d8 [ 550.534169][T22755] ? show_regs_print_info+0x12/0x12 [ 550.539382][T22755] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 550.545136][T22755] should_fail+0x384/0x4b0 [ 550.549570][T22755] ? nf_ct_ext_add+0x3ae/0x5f0 [ 550.554348][T22755] should_failslab+0x5/0x20 [ 550.558900][T22755] __kmalloc_track_caller+0x94/0x360 [ 550.564205][T22755] krealloc+0x5c/0xf0 [ 550.568204][T22755] nf_ct_ext_add+0x3ae/0x5f0 [ 550.572816][T22755] init_conntrack+0x8a2/0x16f0 [ 550.577604][T22755] ? early_drop+0x680/0x680 [ 550.582141][T22755] resolve_normal_ct+0x98e/0xfd0 [ 550.587107][T22755] ? nf_conntrack_handle_icmp+0x17b/0x17b [ 550.592840][T22755] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 550.598818][T22755] ? print_irqtrace_events+0x220/0x220 [ 550.604277][T22755] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 550.610422][T22755] ? lockdep_hardirqs_on+0x95/0x140 [ 550.615617][T22755] ? nf_conntrack_in+0x2e0/0xd85 [ 550.620540][T22755] ? nf_conntrack_in+0x309/0xd85 [ 550.625468][T22755] nf_conntrack_in+0x32c/0xd85 [ 550.630228][T22755] ? nf_ct_pernet+0x200/0x200 [ 550.634899][T22755] ? ipv4_conntrack_defrag+0x285/0x580 [ 550.640348][T22755] ? ipv4_conntrack_local+0x110/0x1d0 [ 550.645708][T22755] ? ipv4_conntrack_in+0x20/0x20 [ 550.650627][T22755] nf_hook_slow+0xb2/0x1f0 [ 550.655034][T22755] ? nf_hook+0x3d0/0x3d0 [ 550.659269][T22755] nf_hook+0x26e/0x3d0 [ 550.663330][T22755] ? __ip_local_out+0x4e0/0x4e0 [ 550.668170][T22755] ? nf_hook+0x3d0/0x3d0 [ 550.672401][T22755] ? lockdep_hardirqs_on+0x95/0x140 [ 550.677593][T22755] __ip_local_out+0x3a6/0x4e0 [ 550.682255][T22755] ? nf_hook+0x3d0/0x3d0 [ 550.686490][T22755] ip_send_skb+0x49/0x1a0 [ 550.690811][T22755] udp_send_skb+0x97e/0x1240 [ 550.695406][T22755] udp_sendmsg+0x23c1/0x34f0 [ 550.700000][T22755] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 550.704834][T22755] ? udp_cmsg_send+0x340/0x340 [ 550.709590][T22755] ? validate_chain+0x128/0x8240 [ 550.714520][T22755] ? mark_lock+0x191/0x1e00 [ 550.719013][T22755] ? __print_lock_name+0x1d0/0x1d0 [ 550.724125][T22755] udpv6_sendmsg+0xaaa/0x35f0 [ 550.728811][T22755] ? xfrm6_policy_check+0x590/0x590 [ 550.734019][T22755] ? smack_socket_sendmsg+0x16e/0x530 [ 550.739382][T22755] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 550.745786][T22755] ? tomoyo_socket_bind_permission+0x360/0x360 [ 550.751923][T22755] ? __might_fault+0xb8/0x110 [ 550.756590][T22755] ? sock_rps_record_flow+0x12/0x370 [ 550.761947][T22755] ? inet_send_prepare+0x55/0x250 [ 550.766960][T22755] ? inet6_compat_ioctl+0x560/0x560 [ 550.772142][T22755] ____sys_sendmsg+0x5b9/0x910 [ 550.776902][T22755] ? __sys_sendmsg_sock+0x30/0x30 [ 550.781925][T22755] __sys_sendmmsg+0x57e/0x800 [ 550.786598][T22755] ? __ia32_sys_sendmsg+0x90/0x90 [ 550.791639][T22755] ? rcu_read_lock_sched_held+0x89/0x130 [ 550.797275][T22755] ? __lock_acquire+0x2b00/0x2b00 [ 550.802296][T22755] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 550.808262][T22755] ? print_irqtrace_events+0x220/0x220 [ 550.813701][T22755] ? vtime_user_exit+0x2b2/0x3e0 [ 550.818626][T22755] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 550.824594][T22755] __x64_sys_sendmmsg+0x9c/0xb0 [ 550.829435][T22755] do_syscall_64+0x44/0xd0 [ 550.833838][T22755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 550.839715][T22755] RIP: 0033:0x7f4fb6455a39 [ 550.844118][T22755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 550.863706][T22755] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 550.872103][T22755] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 550.880060][T22755] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 550.888025][T22755] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 550.895978][T22755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.903930][T22755] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 550.989758][ T8269] usb 5-1: device descriptor read/64, error 18 03:41:40 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000001800bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 551.106612][ T8526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.127688][T22763] FAULT_INJECTION: forcing a failure. [ 551.127688][T22763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.148474][ T8526] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.149809][ T20] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 551.167022][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 551.182769][T22763] CPU: 0 PID: 22763 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 551.191551][T22763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.201612][T22763] Call Trace: [ 551.204900][T22763] dump_stack_lvl+0x201/0x2d8 [ 551.209590][T22763] ? show_regs_print_info+0x12/0x12 [ 551.214798][T22763] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 551.220507][T22763] ? __might_fault+0xb8/0x110 [ 551.225182][T22763] ? rcu_read_lock_sched_held+0x89/0x130 [ 551.230808][T22763] should_fail+0x384/0x4b0 [ 551.235218][T22763] _copy_from_user+0x2d/0x170 [ 551.239884][T22763] __copy_msghdr_from_user+0xaf/0x730 [ 551.245261][T22763] ? __ia32_sys_shutdown+0x60/0x60 [ 551.250378][T22763] __sys_sendmmsg+0x3b7/0x800 [ 551.255063][T22763] ? __ia32_sys_sendmsg+0x90/0x90 [ 551.260114][T22763] ? rcu_read_lock_sched_held+0x89/0x130 [ 551.265754][T22763] ? __lock_acquire+0x2b00/0x2b00 [ 551.270782][T22763] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 551.276750][T22763] ? print_irqtrace_events+0x220/0x220 [ 551.282204][T22763] ? vtime_user_exit+0x2b2/0x3e0 [ 551.287132][T22763] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 551.293102][T22763] __x64_sys_sendmmsg+0x9c/0xb0 [ 551.297955][T22763] do_syscall_64+0x44/0xd0 [ 551.302374][T22763] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 551.308280][T22763] RIP: 0033:0x7f4fb6455a39 [ 551.312686][T22763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 551.332278][T22763] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 551.340686][T22763] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 551.348647][T22763] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 551.356610][T22763] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 551.364570][T22763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.372525][T22763] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 551.451026][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.469780][ T8269] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 551.489942][ T8526] usb 1-1: config 0 descriptor?? [ 551.680255][ T8269] usb 5-1: device descriptor read/64, error 18 [ 551.760077][ T8526] usb 1-1: USB disconnect, device number 118 [ 551.775683][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 551.787090][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 551.800602][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.814841][ T8269] usb usb5-port1: attempt power cycle [ 551.820884][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 551.832453][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.846380][ T20] usb 2-1: config 0 descriptor?? [ 551.911128][ T20] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 551.926632][ T20] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 552.118910][ T8526] usb 2-1: USB disconnect, device number 14 [ 552.146836][ T8526] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 552.259629][ T8269] usb 5-1: new high-speed USB device number 39 using dummy_hcd 03:41:42 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 03:41:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:42 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 552.449780][ T8269] usb 5-1: device descriptor read/8, error -61 [ 552.799641][ T8526] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 552.909701][ T1265] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 552.959909][ T8269] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 552.989538][ T8526] usb 3-1: device descriptor read/64, error 18 [ 553.169874][ T8269] usb 5-1: device descriptor read/8, error -61 [ 553.259525][ T8526] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 553.270562][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 553.281462][ T1265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 553.295115][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.299735][ T8269] usb usb5-port1: unable to enumerate USB device [ 553.310736][ T1265] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 553.324490][ T1265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.339014][ T1265] usb 2-1: config 0 descriptor?? [ 553.391003][ T1265] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 553.411280][ T1265] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:41:43 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r1, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_disconnect(r1) read$char_usb(r0, 0x0, 0x0) 03:41:43 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:43 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) 03:41:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 553.469605][ T8526] usb 3-1: device descriptor read/64, error 18 [ 553.469851][ T8269] usb 2-1: USB disconnect, device number 15 [ 553.514177][ T8269] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:41:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 553.594608][T22838] FAULT_INJECTION: forcing a failure. [ 553.594608][T22838] name failslab, interval 1, probability 0, space 0, times 0 [ 553.613532][ T8526] usb usb3-port1: attempt power cycle [ 553.635547][T22838] CPU: 1 PID: 22838 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 553.644341][T22838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.654398][T22838] Call Trace: [ 553.657684][T22838] dump_stack_lvl+0x201/0x2d8 [ 553.662376][T22838] ? show_regs_print_info+0x12/0x12 [ 553.667571][T22838] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 553.673285][T22838] ? __might_sleep+0x110/0x110 [ 553.678044][T22838] should_fail+0x384/0x4b0 [ 553.682450][T22838] ? __alloc_skb+0xd8/0x580 [ 553.686939][T22838] should_failslab+0x5/0x20 [ 553.691428][T22838] kmem_cache_alloc_node+0x77/0x340 [ 553.696612][T22838] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 553.702588][T22838] __alloc_skb+0xd8/0x580 [ 553.706910][T22838] ? __lock_acquire+0x1382/0x2b00 [ 553.711921][T22838] alloc_skb_with_frags+0xab/0x660 [ 553.717031][T22838] sock_alloc_send_pskb+0x928/0xa60 [ 553.722229][T22838] ? sock_kzfree_s+0x50/0x50 [ 553.726819][T22838] __ip_append_data+0x2378/0x37c0 [ 553.731847][T22838] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 553.737821][T22838] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 553.743963][T22838] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 553.748819][T22838] ? ip_setup_cork+0x840/0x840 [ 553.753570][T22838] ? ip_setup_cork+0x479/0x840 [ 553.758331][T22838] ip_make_skb+0x1d3/0x480 [ 553.762742][T22838] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 553.767581][T22838] ? ip_flush_pending_frames+0x260/0x260 [ 553.773219][T22838] udp_sendmsg+0x2397/0x34f0 [ 553.777816][T22838] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 553.782651][T22838] ? udp_cmsg_send+0x340/0x340 [ 553.787410][T22838] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 553.793390][T22838] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 553.799549][T22838] ? lockdep_hardirqs_on+0x95/0x140 [ 553.804754][T22838] udpv6_sendmsg+0xaaa/0x35f0 [ 553.809439][T22838] ? xfrm6_policy_check+0x590/0x590 [ 553.814639][T22838] ? smack_socket_sendmsg+0x16e/0x530 [ 553.819998][T22838] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 553.826408][T22838] ? print_irqtrace_events+0x220/0x220 [ 553.831855][T22838] ? tomoyo_socket_bind_permission+0x360/0x360 [ 553.837998][T22838] ? sock_rps_record_flow+0x12/0x370 [ 553.843268][T22838] ? inet_send_prepare+0x55/0x250 [ 553.848279][T22838] ? inet6_compat_ioctl+0x560/0x560 [ 553.853462][T22838] ____sys_sendmsg+0x5b9/0x910 [ 553.858218][T22838] ? __sys_sendmsg_sock+0x30/0x30 [ 553.863239][T22838] __sys_sendmmsg+0x57e/0x800 [ 553.867912][T22838] ? __ia32_sys_sendmsg+0x90/0x90 [ 553.872920][T22838] ? rcu_read_lock_sched_held+0x89/0x130 [ 553.878570][T22838] ? rcu_read_lock_sched_held+0x89/0x130 [ 553.884213][T22838] ? print_irqtrace_events+0x220/0x220 [ 553.889668][T22838] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 553.895817][T22838] __x64_sys_sendmmsg+0x9c/0xb0 [ 553.900659][T22838] do_syscall_64+0x44/0xd0 [ 553.905074][T22838] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 553.910949][T22838] RIP: 0033:0x7f4fb6455a39 [ 553.915351][T22838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:41:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000003000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 553.934938][T22838] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 553.943337][T22838] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 553.951293][T22838] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 553.959258][T22838] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 553.967213][T22838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.975168][T22838] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:41:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 554.158676][ T20] usb 1-1: new high-speed USB device number 119 using dummy_hcd 03:41:43 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 554.316430][T22864] FAULT_INJECTION: forcing a failure. [ 554.316430][T22864] name failslab, interval 1, probability 0, space 0, times 0 [ 554.329209][ T8269] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 554.337088][T22864] CPU: 1 PID: 22864 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 554.345861][T22864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.355918][T22864] Call Trace: [ 554.359202][T22864] dump_stack_lvl+0x201/0x2d8 [ 554.363895][T22864] ? show_regs_print_info+0x12/0x12 [ 554.369104][T22864] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 554.369517][ T8526] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 554.374836][T22864] ? __might_sleep+0x110/0x110 [ 554.374872][T22864] should_fail+0x384/0x4b0 [ 554.374896][T22864] ? alloc_skb_with_frags+0xab/0x660 [ 554.374919][T22864] should_failslab+0x5/0x20 [ 554.374938][T22864] __kmalloc_node_track_caller+0x97/0x3e0 [ 554.407152][T22864] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 554.412972][T22864] ? kmem_cache_alloc_node+0x250/0x340 [ 554.418440][T22864] ? __alloc_skb+0xd8/0x580 [ 554.422959][T22864] ? alloc_skb_with_frags+0xab/0x660 [ 554.428247][T22864] __alloc_skb+0x127/0x580 [ 554.432672][T22864] ? __lock_acquire+0x1382/0x2b00 [ 554.437715][T22864] alloc_skb_with_frags+0xab/0x660 [ 554.442841][T22864] sock_alloc_send_pskb+0x928/0xa60 [ 554.448063][T22864] ? sock_kzfree_s+0x50/0x50 [ 554.452662][T22864] ? rcu_read_lock_sched_held+0x89/0x130 [ 554.458305][T22864] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 554.464297][T22864] __ip_append_data+0x2378/0x37c0 [ 554.469344][T22864] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 554.475343][T22864] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 554.480210][T22864] ? rcu_lock_release+0x9/0x20 [ 554.484982][T22864] ? ip_setup_cork+0x840/0x840 [ 554.489772][T22864] ? ipv4_mtu+0x28a/0x380 [ 554.494115][T22864] ? ip_setup_cork+0x479/0x840 [ 554.498890][T22864] ip_make_skb+0x1d3/0x480 [ 554.503324][T22864] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 554.508175][T22864] ? ip_flush_pending_frames+0x260/0x260 [ 554.513819][T22864] udp_sendmsg+0x2397/0x34f0 [ 554.518438][T22864] ? rcu_read_lock_sched_held+0x89/0x130 [ 554.524078][T22864] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 554.528944][T22864] ? udp_cmsg_send+0x340/0x340 [ 554.533712][T22864] ? mark_lock+0x191/0x1e00 [ 554.538220][T22864] ? __print_lock_name+0x1d0/0x1d0 [ 554.543344][T22864] udpv6_sendmsg+0xaaa/0x35f0 [ 554.548037][T22864] ? rcu_read_lock_sched_held+0x89/0x130 [ 554.553693][T22864] ? xfrm6_policy_check+0x590/0x590 [ 554.558924][T22864] ? smack_socket_sendmsg+0x16e/0x530 [ 554.559745][ T8526] usb 3-1: device descriptor read/8, error -61 [ 554.564303][T22864] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 554.564336][T22864] ? tomoyo_socket_bind_permission+0x360/0x360 [ 554.564353][T22864] ? __might_fault+0xb8/0x110 [ 554.564378][T22864] ? rcu_read_lock_sched_held+0x89/0x130 [ 554.564399][T22864] ? sock_rps_record_flow+0x12/0x370 [ 554.598596][T22864] ? inet_send_prepare+0x55/0x250 [ 554.603633][T22864] ? inet6_compat_ioctl+0x560/0x560 [ 554.608845][T22864] ____sys_sendmsg+0x5b9/0x910 [ 554.613629][T22864] ? __sys_sendmsg_sock+0x30/0x30 [ 554.618677][T22864] __sys_sendmmsg+0x57e/0x800 [ 554.623378][T22864] ? __ia32_sys_sendmsg+0x90/0x90 [ 554.628434][T22864] ? rcu_read_lock_sched_held+0x89/0x130 [ 554.634099][T22864] ? __lock_acquire+0x2b00/0x2b00 [ 554.639145][T22864] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 554.645130][T22864] ? print_irqtrace_events+0x220/0x220 [ 554.650592][T22864] ? vtime_user_exit+0x2b2/0x3e0 [ 554.655544][T22864] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 554.661534][T22864] __x64_sys_sendmmsg+0x9c/0xb0 [ 554.666394][T22864] do_syscall_64+0x44/0xd0 [ 554.670811][T22864] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 554.676689][T22864] RIP: 0033:0x7f4fb6455a39 [ 554.681108][T22864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 554.700712][T22864] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 554.709127][T22864] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 554.717088][T22864] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 554.725063][T22864] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 554.733048][T22864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.741024][T22864] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 554.839538][ T8526] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 554.959484][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.969941][ T20] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.978959][ T20] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 554.990942][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.002226][ T20] usb 1-1: config 0 descriptor?? [ 555.009887][ T8526] usb 3-1: device descriptor read/8, error -61 [ 555.129535][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 555.129584][ T8526] usb usb3-port1: unable to enumerate USB device [ 555.141097][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 555.165272][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 555.178261][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 555.193090][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.207641][ T8269] usb 2-1: config 0 descriptor?? [ 555.242090][ T8531] usb 1-1: USB disconnect, device number 119 [ 555.270998][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 555.296202][ T8269] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 555.476344][T22845] udc-core: couldn't find an available UDC or it's busy [ 555.483826][T22845] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:41:45 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 03:41:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:45 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 555.629410][T22897] FAULT_INJECTION: forcing a failure. [ 555.629410][T22897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.661608][T22897] CPU: 0 PID: 22897 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 555.670404][T22897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.680468][T22897] Call Trace: [ 555.683755][T22897] dump_stack_lvl+0x201/0x2d8 [ 555.688452][T22897] ? show_regs_print_info+0x12/0x12 [ 555.693663][T22897] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 555.699393][T22897] ? __might_fault+0xb8/0x110 [ 555.704084][T22897] ? rcu_read_lock_sched_held+0x89/0x130 [ 555.709826][T22897] should_fail+0x384/0x4b0 [ 555.714264][T22897] _copy_from_user+0x2d/0x170 [ 555.718961][T22897] __copy_msghdr_from_user+0xaf/0x730 [ 555.724354][T22897] ? __ia32_sys_shutdown+0x60/0x60 [ 555.729497][T22897] __sys_sendmmsg+0x3b7/0x800 [ 555.734200][T22897] ? __ia32_sys_sendmsg+0x90/0x90 [ 555.739284][T22897] ? rcu_read_lock_sched_held+0x89/0x130 [ 555.744982][T22897] ? __lock_acquire+0x2b00/0x2b00 [ 555.750034][T22897] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 555.756028][T22897] ? print_irqtrace_events+0x220/0x220 [ 555.761495][T22897] ? vtime_user_exit+0x2b2/0x3e0 [ 555.766448][T22897] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 555.772443][T22897] __x64_sys_sendmmsg+0x9c/0xb0 [ 555.777316][T22897] do_syscall_64+0x44/0xd0 [ 555.781807][T22897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 555.787703][T22897] RIP: 0033:0x7f4fb6455a39 [ 555.792126][T22897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.811732][T22897] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 555.820139][T22897] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 555.828095][T22897] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 555.836049][T22897] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.844039][T22897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.851993][T22897] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 555.882585][ T8526] usb 2-1: USB disconnect, device number 16 [ 555.899115][ T8526] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 556.229300][ T8141] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 556.420100][ T8141] usb 5-1: device descriptor read/64, error 18 [ 556.659197][ T1265] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 556.689233][ T8141] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 556.889345][ T8141] usb 5-1: device descriptor read/64, error 18 [ 557.019481][ T8141] usb usb5-port1: attempt power cycle [ 557.039375][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 557.050126][ T1265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 557.061505][ T1265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.074780][ T1265] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 557.084638][ T1265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.099020][ T1265] usb 2-1: config 0 descriptor?? [ 557.151444][ T1265] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 557.189826][ T1265] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:41:46 executing program 1: syz_usb_connect(0x6, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff0001090222000100000000092389000149284800090500000000000000070589cf51518ce887e15cf0d351cea2274caebe2a7b63cb0500d29092bf8d4dedb9da8e39c11b32cbc4ea7bbe47d48bcd6f75f85aa85d015d3af3000000"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 03:41:46 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:46 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000"], 0x0) 03:41:46 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 557.236258][ T1265] usb 2-1: USB disconnect, device number 17 [ 557.284656][ T1265] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:41:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000006000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 557.376616][T22939] FAULT_INJECTION: forcing a failure. [ 557.376616][T22939] name failslab, interval 1, probability 0, space 0, times 0 [ 557.398853][T22939] CPU: 0 PID: 22939 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 557.407642][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.417706][T22939] Call Trace: [ 557.420993][T22939] dump_stack_lvl+0x201/0x2d8 [ 557.425687][T22939] ? show_regs_print_info+0x12/0x12 [ 557.430898][T22939] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 557.436642][T22939] ? __might_sleep+0x110/0x110 [ 557.441434][T22939] should_fail+0x384/0x4b0 [ 557.445877][T22939] ? __alloc_skb+0xd8/0x580 [ 557.450382][T22939] should_failslab+0x5/0x20 [ 557.454880][T22939] kmem_cache_alloc_node+0x77/0x340 [ 557.460075][T22939] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 557.466049][T22939] __alloc_skb+0xd8/0x580 [ 557.470368][T22939] ? __lock_acquire+0x1382/0x2b00 [ 557.475384][T22939] alloc_skb_with_frags+0xab/0x660 [ 557.480498][T22939] sock_alloc_send_pskb+0x928/0xa60 [ 557.485697][T22939] ? sock_kzfree_s+0x50/0x50 [ 557.490284][T22939] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 557.496254][T22939] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 557.502233][T22939] __ip_append_data+0x2378/0x37c0 [ 557.507271][T22939] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 557.512118][T22939] ? ip_setup_cork+0x840/0x840 [ 557.516880][T22939] ? ipv4_mtu+0x28a/0x380 [ 557.521199][T22939] ? ip_setup_cork+0x479/0x840 [ 557.525967][T22939] ip_make_skb+0x1d3/0x480 [ 557.530379][T22939] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 557.535219][T22939] ? ip_flush_pending_frames+0x260/0x260 [ 557.540855][T22939] udp_sendmsg+0x2397/0x34f0 [ 557.545453][T22939] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 557.550299][T22939] ? udp_cmsg_send+0x340/0x340 [ 557.555057][T22939] ? mark_lock+0x191/0x1e00 [ 557.559552][T22939] ? __print_lock_name+0x1d0/0x1d0 [ 557.564666][T22939] udpv6_sendmsg+0xaaa/0x35f0 [ 557.569352][T22939] ? xfrm6_policy_check+0x590/0x590 [ 557.574549][T22939] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 557.580524][T22939] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 557.586660][T22939] ? lockdep_hardirqs_on+0x95/0x140 [ 557.591863][T22939] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 557.598015][T22939] ? sock_rps_record_flow+0x12/0x370 [ 557.603286][T22939] ? inet_send_prepare+0x55/0x250 [ 557.608295][T22939] ? inet6_compat_ioctl+0x560/0x560 [ 557.613482][T22939] ____sys_sendmsg+0x5b9/0x910 [ 557.618239][T22939] ? __sys_sendmsg_sock+0x30/0x30 [ 557.623257][T22939] __sys_sendmmsg+0x57e/0x800 [ 557.627930][T22939] ? __ia32_sys_sendmsg+0x90/0x90 [ 557.632972][T22939] ? rcu_read_lock_sched_held+0x89/0x130 [ 557.638622][T22939] ? __lock_acquire+0x2b00/0x2b00 [ 557.643651][T22939] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 557.649616][T22939] ? print_irqtrace_events+0x220/0x220 [ 557.655057][T22939] ? vtime_user_exit+0x2b2/0x3e0 [ 557.659982][T22939] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 557.665950][T22939] __x64_sys_sendmmsg+0x9c/0xb0 [ 557.670787][T22939] do_syscall_64+0x44/0xd0 [ 557.675195][T22939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 557.681072][T22939] RIP: 0033:0x7f4fb6455a39 [ 557.685476][T22939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.705066][T22939] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 557.713463][T22939] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 557.721419][T22939] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 557.729399][T22939] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 557.737354][T22939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.745398][T22939] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 557.763492][ T8141] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 557.839451][ T8531] usb 3-1: new high-speed USB device number 110 using dummy_hcd 03:41:47 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 557.939671][ T8526] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 557.979638][ T8141] usb 5-1: device descriptor read/8, error -61 [ 558.024926][T22958] FAULT_INJECTION: forcing a failure. [ 558.024926][T22958] name failslab, interval 1, probability 0, space 0, times 0 [ 558.038048][ T8531] usb 3-1: device descriptor read/64, error 18 [ 558.058707][T22958] CPU: 1 PID: 22958 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 558.067488][T22958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.077546][T22958] Call Trace: [ 558.080829][T22958] dump_stack_lvl+0x201/0x2d8 [ 558.085519][T22958] ? show_regs_print_info+0x12/0x12 [ 558.090726][T22958] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 558.096459][T22958] ? __might_sleep+0x110/0x110 [ 558.101249][T22958] should_fail+0x384/0x4b0 [ 558.105682][T22958] ? alloc_skb_with_frags+0xab/0x660 [ 558.110979][T22958] should_failslab+0x5/0x20 [ 558.115498][T22958] __kmalloc_node_track_caller+0x97/0x3e0 [ 558.121228][T22958] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 558.127041][T22958] ? kmem_cache_alloc_node+0x250/0x340 [ 558.132507][T22958] ? __alloc_skb+0xd8/0x580 [ 558.137017][T22958] ? alloc_skb_with_frags+0xab/0x660 [ 558.142288][T22958] __alloc_skb+0x127/0x580 [ 558.146689][T22958] ? __lock_acquire+0x1382/0x2b00 [ 558.151696][T22958] alloc_skb_with_frags+0xab/0x660 [ 558.156827][T22958] sock_alloc_send_pskb+0x928/0xa60 [ 558.162017][T22958] ? sock_kzfree_s+0x50/0x50 [ 558.166631][T22958] ? rcu_read_lock_sched_held+0x89/0x130 [ 558.172280][T22958] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 558.178248][T22958] __ip_append_data+0x2378/0x37c0 [ 558.183260][T22958] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 558.189226][T22958] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 558.194103][T22958] ? rcu_lock_release+0x9/0x20 [ 558.198845][T22958] ? ip_setup_cork+0x840/0x840 [ 558.203590][T22958] ? ipv4_mtu+0x28a/0x380 [ 558.207913][T22958] ? ip_setup_cork+0x479/0x840 [ 558.212665][T22958] ip_make_skb+0x1d3/0x480 [ 558.217069][T22958] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 558.221905][T22958] ? ip_flush_pending_frames+0x260/0x260 [ 558.227529][T22958] udp_sendmsg+0x2397/0x34f0 [ 558.232126][T22958] ? rcu_read_lock_sched_held+0x89/0x130 [ 558.237737][T22958] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 558.242567][T22958] ? udp_cmsg_send+0x340/0x340 [ 558.247318][T22958] ? mark_lock+0x191/0x1e00 [ 558.251816][T22958] ? __print_lock_name+0x1d0/0x1d0 [ 558.256916][T22958] udpv6_sendmsg+0xaaa/0x35f0 [ 558.261585][T22958] ? rcu_read_lock_sched_held+0x89/0x130 [ 558.267202][T22958] ? xfrm6_policy_check+0x590/0x590 [ 558.272387][T22958] ? smack_socket_sendmsg+0x16e/0x530 [ 558.277740][T22958] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 558.284138][T22958] ? tomoyo_socket_bind_permission+0x360/0x360 [ 558.290266][T22958] ? __might_fault+0xb8/0x110 [ 558.294924][T22958] ? rcu_read_lock_sched_held+0x89/0x130 [ 558.300533][T22958] ? sock_rps_record_flow+0x12/0x370 [ 558.305804][T22958] ? inet_send_prepare+0x55/0x250 [ 558.310812][T22958] ? inet6_compat_ioctl+0x560/0x560 [ 558.316621][T22958] ____sys_sendmsg+0x5b9/0x910 [ 558.321373][T22958] ? __sys_sendmsg_sock+0x30/0x30 [ 558.326384][T22958] __sys_sendmmsg+0x57e/0x800 [ 558.331045][T22958] ? __ia32_sys_sendmsg+0x90/0x90 [ 558.336071][T22958] ? rcu_read_lock_sched_held+0x89/0x130 [ 558.341698][T22958] ? __lock_acquire+0x2b00/0x2b00 [ 558.346707][T22958] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 558.352666][T22958] ? print_irqtrace_events+0x220/0x220 [ 558.358101][T22958] ? vtime_user_exit+0x2b2/0x3e0 [ 558.363021][T22958] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 558.368986][T22958] __x64_sys_sendmmsg+0x9c/0xb0 [ 558.373832][T22958] do_syscall_64+0x44/0xd0 [ 558.378226][T22958] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.384112][T22958] RIP: 0033:0x7f4fb6455a39 [ 558.388508][T22958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.408092][T22958] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 558.416500][T22958] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 558.424455][T22958] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 558.432413][T22958] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 558.440367][T22958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.448314][T22958] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:41:48 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 03:41:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000007000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:48 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:48 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) r2 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r2, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x20, 0xe, 0xbb, {0xbb, 0x31, "c9a915683804645362ce06611ea0e59ba39a39b6e37689573d2ce4a89885faff2bfbb87d2b25c76c0e3e21b75c6e2a2b8e85454e85dcacf8000d79fe8c027037ae9e5bbf2c41a8e570a05c1c07b3fe97534c874057870d50831d82c1b2516449e673ed3ceba5fb3557bf1473bbfcf10788ac8f527ba5f72ea5b1a5cb9de649d013183ab96a6ad88954254cd83d5334a12593495ddf59dfc1d21149839e97f7e2da23198cc468a3d9db5e631b1b3c8078e06745ef9fb0e3d64b"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000080)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x20, 0x1, 0x7fffff7, 0xf00f, 0x78, [0xffc030]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc5, 0x1, 0x0, 0xa7, "842aed91", "a440b87a"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x80, 0x7, 0x6, 0x4, 0x8001, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0x14, 0xcd, "51130db10d64616a30aae0b5f0969d655542eec94ea89c38508179c400b81bb1319770d72f356bad8f3eded00121c8e8dc5234c02d1b0d29716fa48b14cdae41e1787942d8d23da578efda3e5ae67f30daaf86113adc89646e030478e4a98e1007e948517aa9b8f6ee597151e47f8122d3b55bd367e2928efc3f4c127d38339f788900a5cc998b6c2c531148c169f37a385e3a853659f99b77997a7bd9fa5d619d48582951676cf44513892b5f96b8a03882a530ed0e6ae4c568307c45334f445428b4741feba6e181fcce7875"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xa1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xfff]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, 'Y\x00'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "c3e7"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xfffb}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}}) read$char_usb(r0, 0x0, 0x0) [ 558.609133][ T8141] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 558.620388][ T8531] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 558.729716][ T8141] usb 5-1: device descriptor read/8, error -71 [ 558.736374][ T8526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.769692][ T8526] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.795226][T22977] FAULT_INJECTION: forcing a failure. [ 558.795226][T22977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.811219][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 558.822913][ T8531] usb 3-1: device descriptor read/64, error 18 [ 558.825999][T22977] CPU: 0 PID: 22977 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 558.837832][T22977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.847877][T22977] Call Trace: [ 558.851165][T22977] dump_stack_lvl+0x201/0x2d8 [ 558.855834][T22977] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 558.861978][T22977] ? show_regs_print_info+0x12/0x12 [ 558.867166][T22977] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 558.872885][T22977] should_fail+0x384/0x4b0 [ 558.877298][T22977] _copy_from_user+0x2d/0x170 [ 558.881967][T22977] __copy_msghdr_from_user+0xaf/0x730 [ 558.887332][T22977] ? __ia32_sys_shutdown+0x60/0x60 [ 558.892445][T22977] __sys_sendmmsg+0x3b7/0x800 [ 558.897118][T22977] ? __ia32_sys_sendmsg+0x90/0x90 [ 558.902130][T22977] ? rcu_read_lock_sched_held+0x89/0x130 [ 558.907790][T22977] ? rcu_read_lock_sched_held+0x89/0x130 [ 558.913473][T22977] ? print_irqtrace_events+0x220/0x220 [ 558.918927][T22977] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 558.925090][T22977] __x64_sys_sendmmsg+0x9c/0xb0 [ 558.930021][T22977] do_syscall_64+0x44/0xd0 [ 558.934428][T22977] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.940307][T22977] RIP: 0033:0x7f4fb6455a39 [ 558.944716][T22977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.964315][T22977] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 558.972716][T22977] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 558.980690][T22977] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 558.988644][T22977] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 558.996606][T22977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.004561][T22977] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 559.024879][ T8141] usb usb5-port1: unable to enumerate USB device [ 559.039311][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.087776][ T8526] usb 1-1: config 0 descriptor?? [ 559.132871][ T8531] usb usb3-port1: attempt power cycle [ 559.170775][ T8269] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 559.357469][ T1265] usb 1-1: USB disconnect, device number 120 [ 559.419360][ T8141] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 559.529451][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 559.540672][ T8531] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 559.549162][ T8269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 559.560653][ T8269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.573776][ T8269] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 559.583393][ T8269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.596424][ T8269] usb 2-1: config 0 descriptor?? [ 559.619139][ T8141] usb 5-1: device descriptor read/64, error 18 [ 559.640724][ T8269] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 559.653148][ T8269] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 559.729103][ T8531] usb 3-1: device descriptor read/8, error -61 [ 559.845104][T22976] udc-core: couldn't find an available UDC or it's busy [ 559.853570][T22976] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 559.880781][ T8269] usb 2-1: USB disconnect, device number 18 [ 559.902901][ T8269] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 559.909009][ T8141] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 559.999052][ T8531] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 560.119009][ T8141] usb 5-1: device descriptor read/64, error 18 [ 560.169203][ T8531] usb 3-1: device descriptor read/8, error -61 03:41:49 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:49 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 13) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:49 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) [ 560.239183][ T8141] usb usb5-port1: attempt power cycle [ 560.292516][ T8531] usb usb3-port1: unable to enumerate USB device [ 560.335600][T23021] FAULT_INJECTION: forcing a failure. [ 560.335600][T23021] name failslab, interval 1, probability 0, space 0, times 0 [ 560.364122][T23021] CPU: 1 PID: 23021 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 560.372911][T23021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.382962][T23021] Call Trace: [ 560.386233][T23021] dump_stack_lvl+0x201/0x2d8 [ 560.390904][T23021] ? show_regs_print_info+0x12/0x12 [ 560.396180][T23021] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 560.401892][T23021] ? __might_sleep+0x110/0x110 [ 560.406667][T23021] should_fail+0x384/0x4b0 [ 560.411078][T23021] ? __alloc_skb+0xd8/0x580 [ 560.415575][T23021] should_failslab+0x5/0x20 [ 560.420074][T23021] kmem_cache_alloc_node+0x77/0x340 [ 560.425355][T23021] __alloc_skb+0xd8/0x580 [ 560.429673][T23021] ? __lock_acquire+0x1382/0x2b00 [ 560.434784][T23021] alloc_skb_with_frags+0xab/0x660 [ 560.439892][T23021] sock_alloc_send_pskb+0x928/0xa60 [ 560.445144][T23021] ? sock_kzfree_s+0x50/0x50 [ 560.449745][T23021] ? rcu_read_lock_sched_held+0x89/0x130 [ 560.455376][T23021] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 560.461356][T23021] __ip_append_data+0x2378/0x37c0 [ 560.466387][T23021] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 560.472370][T23021] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 560.477215][T23021] ? rcu_lock_release+0x9/0x20 [ 560.481966][T23021] ? ip_setup_cork+0x840/0x840 [ 560.486716][T23021] ? ipv4_mtu+0x28a/0x380 [ 560.491032][T23021] ? ip_setup_cork+0x479/0x840 [ 560.495786][T23021] ip_make_skb+0x1d3/0x480 [ 560.500197][T23021] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 560.505035][T23021] ? ip_flush_pending_frames+0x260/0x260 [ 560.510671][T23021] udp_sendmsg+0x2397/0x34f0 [ 560.515267][T23021] ? rcu_read_lock_sched_held+0x89/0x130 [ 560.520886][T23021] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 560.525724][T23021] ? udp_cmsg_send+0x340/0x340 [ 560.530484][T23021] ? mark_lock+0x191/0x1e00 [ 560.534980][T23021] ? __print_lock_name+0x1d0/0x1d0 [ 560.540091][T23021] udpv6_sendmsg+0xaaa/0x35f0 [ 560.544771][T23021] ? xfrm6_policy_check+0x590/0x590 [ 560.549972][T23021] ? smack_socket_sendmsg+0x16e/0x530 [ 560.555334][T23021] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 560.561736][T23021] ? tomoyo_socket_bind_permission+0x360/0x360 [ 560.567872][T23021] ? __might_fault+0xb8/0x110 [ 560.572539][T23021] ? rcu_read_lock_sched_held+0x89/0x130 [ 560.578164][T23021] ? sock_rps_record_flow+0x12/0x370 [ 560.583435][T23021] ? inet_send_prepare+0x55/0x250 [ 560.588443][T23021] ? inet6_compat_ioctl+0x560/0x560 [ 560.593627][T23021] ____sys_sendmsg+0x5b9/0x910 [ 560.598387][T23021] ? __sys_sendmsg_sock+0x30/0x30 [ 560.603408][T23021] __sys_sendmmsg+0x57e/0x800 [ 560.608080][T23021] ? __ia32_sys_sendmsg+0x90/0x90 [ 560.613121][T23021] ? rcu_read_lock_sched_held+0x89/0x130 [ 560.618757][T23021] ? __lock_acquire+0x2b00/0x2b00 [ 560.623780][T23021] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 560.629743][T23021] ? print_irqtrace_events+0x220/0x220 [ 560.635184][T23021] ? vtime_user_exit+0x2b2/0x3e0 [ 560.640113][T23021] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 560.646094][T23021] __x64_sys_sendmmsg+0x9c/0xb0 [ 560.650952][T23021] do_syscall_64+0x44/0xd0 [ 560.655376][T23021] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 560.661254][T23021] RIP: 0033:0x7f4fb6455a39 [ 560.665673][T23021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 560.685272][T23021] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 560.693681][T23021] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 560.701645][T23021] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 560.709607][T23021] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 560.717565][T23021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.725523][T23021] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:41:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200ffffff8000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:50 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 560.914553][ T8526] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 560.939936][T23035] FAULT_INJECTION: forcing a failure. [ 560.939936][T23035] name failslab, interval 1, probability 0, space 0, times 0 03:41:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 560.972491][T23035] CPU: 1 PID: 23035 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 560.981459][T23035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.991524][T23035] Call Trace: [ 560.994812][T23035] dump_stack_lvl+0x201/0x2d8 [ 560.999506][T23035] ? show_regs_print_info+0x12/0x12 [ 561.004716][T23035] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 561.010454][T23035] ? __might_sleep+0x110/0x110 [ 561.015243][T23035] should_fail+0x384/0x4b0 [ 561.019672][T23035] ? alloc_skb_with_frags+0xab/0x660 [ 561.024966][T23035] should_failslab+0x5/0x20 [ 561.029473][T23035] __kmalloc_node_track_caller+0x97/0x3e0 [ 561.035199][T23035] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 561.041011][T23035] ? kmem_cache_alloc_node+0x250/0x340 [ 561.046482][T23035] ? __alloc_skb+0xd8/0x580 [ 561.051002][T23035] ? alloc_skb_with_frags+0xab/0x660 [ 561.056296][T23035] __alloc_skb+0x127/0x580 [ 561.060725][T23035] ? __lock_acquire+0x1382/0x2b00 [ 561.065765][T23035] alloc_skb_with_frags+0xab/0x660 03:41:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 561.070900][T23035] sock_alloc_send_pskb+0x928/0xa60 [ 561.076131][T23035] ? sock_kzfree_s+0x50/0x50 [ 561.080746][T23035] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.086398][T23035] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 561.092395][T23035] __ip_append_data+0x2378/0x37c0 [ 561.097445][T23035] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 561.103449][T23035] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 561.108320][T23035] ? rcu_lock_release+0x9/0x20 [ 561.113099][T23035] ? ip_setup_cork+0x840/0x840 [ 561.117875][T23035] ? ipv4_mtu+0x28a/0x380 [ 561.122215][T23035] ? ip_setup_cork+0x479/0x840 [ 561.126993][T23035] ip_make_skb+0x1d3/0x480 [ 561.131433][T23035] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 561.136295][T23035] ? ip_flush_pending_frames+0x260/0x260 [ 561.141961][T23035] udp_sendmsg+0x2397/0x34f0 [ 561.146593][T23035] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.152237][T23035] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 561.157100][T23035] ? udp_cmsg_send+0x340/0x340 [ 561.161894][T23035] ? mark_lock+0x191/0x1e00 [ 561.166424][T23035] ? __print_lock_name+0x1d0/0x1d0 [ 561.171564][T23035] udpv6_sendmsg+0xaaa/0x35f0 [ 561.176252][T23035] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.181907][T23035] ? xfrm6_policy_check+0x590/0x590 [ 561.187132][T23035] ? smack_socket_sendmsg+0x16e/0x530 [ 561.192519][T23035] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 561.198930][T23035] ? tomoyo_socket_bind_permission+0x360/0x360 [ 561.205073][T23035] ? __might_fault+0xb8/0x110 [ 561.209763][T23035] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.215384][T23035] ? sock_rps_record_flow+0x12/0x370 [ 561.220656][T23035] ? inet_send_prepare+0x55/0x250 [ 561.225671][T23035] ? inet6_compat_ioctl+0x560/0x560 [ 561.230857][T23035] ____sys_sendmsg+0x5b9/0x910 [ 561.235616][T23035] ? __sys_sendmsg_sock+0x30/0x30 [ 561.240640][T23035] __sys_sendmmsg+0x57e/0x800 [ 561.245314][T23035] ? __ia32_sys_sendmsg+0x90/0x90 [ 561.250355][T23035] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.255991][T23035] ? __lock_acquire+0x2b00/0x2b00 [ 561.261007][T23035] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 561.266970][T23035] ? print_irqtrace_events+0x220/0x220 [ 561.272412][T23035] ? vtime_user_exit+0x2b2/0x3e0 [ 561.277349][T23035] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 561.283333][T23035] __x64_sys_sendmmsg+0x9c/0xb0 [ 561.288178][T23035] do_syscall_64+0x44/0xd0 [ 561.292587][T23035] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.298464][T23035] RIP: 0033:0x7f4fb6455a39 [ 561.302869][T23035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 561.322457][T23035] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 561.330861][T23035] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 561.338819][T23035] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 561.346780][T23035] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 561.354739][T23035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.362706][T23035] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 561.382185][ T8361] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 561.389809][ T8141] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 561.458986][ T8531] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 561.579789][ T8141] usb 5-1: device descriptor read/8, error -61 [ 561.648884][ T8531] usb 3-1: device descriptor read/64, error 18 [ 561.669697][ T8526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.688847][ T8526] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.697912][ T8526] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 561.727171][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:41:51 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000"], 0x0) 03:41:51 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000019900bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:51 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) [ 561.756399][ T8526] usb 1-1: config 0 descriptor?? [ 561.778982][ T8361] usb 2-1: device descriptor read/all, error -71 [ 561.822557][T23060] FAULT_INJECTION: forcing a failure. [ 561.822557][T23060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.836958][T23060] CPU: 1 PID: 23060 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 561.845743][T23060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.855805][T23060] Call Trace: [ 561.859089][T23060] dump_stack_lvl+0x201/0x2d8 [ 561.863781][T23060] ? show_regs_print_info+0x12/0x12 [ 561.869002][T23060] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 561.874728][T23060] ? __might_fault+0xb8/0x110 [ 561.879425][T23060] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.885085][T23060] should_fail+0x384/0x4b0 [ 561.889520][T23060] _copy_from_user+0x2d/0x170 [ 561.894207][T23060] __copy_msghdr_from_user+0xaf/0x730 [ 561.899599][T23060] ? __ia32_sys_shutdown+0x60/0x60 [ 561.904743][T23060] __sys_sendmmsg+0x3b7/0x800 [ 561.909444][T23060] ? __ia32_sys_sendmsg+0x90/0x90 [ 561.914519][T23060] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.920192][T23060] ? __lock_acquire+0x2b00/0x2b00 [ 561.925245][T23060] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 561.931237][T23060] ? print_irqtrace_events+0x220/0x220 [ 561.936705][T23060] ? vtime_user_exit+0x2b2/0x3e0 [ 561.941663][T23060] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 561.947660][T23060] __x64_sys_sendmmsg+0x9c/0xb0 [ 561.952529][T23060] do_syscall_64+0x44/0xd0 [ 561.956963][T23060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.962870][T23060] RIP: 0033:0x7f4fb6455a39 [ 561.967293][T23060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 561.986903][T23060] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 561.995328][T23060] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 562.003311][T23060] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 562.011290][T23060] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 562.019269][T23060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.027245][T23060] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 562.034779][ T8526] usb 1-1: USB disconnect, device number 121 [ 562.109165][ T8531] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 562.308966][ T8531] usb 3-1: device descriptor read/64, error 18 [ 562.338903][ T8361] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 562.346589][ T8141] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 562.429023][ T8531] usb usb3-port1: attempt power cycle [ 562.489004][ T8141] usb 5-1: no configurations [ 562.493791][ T8141] usb 5-1: can't read configurations, error -22 [ 562.508006][ T8141] usb usb5-port1: unable to enumerate USB device [ 562.550038][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.556329][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.709605][ T8361] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 562.720242][ T8361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 231, changing to 11 [ 562.731488][ T8361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1361, setting to 1024 [ 562.742678][ T8361] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.755662][ T8361] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 562.764799][ T8361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.775970][ T8361] usb 2-1: config 0 descriptor?? [ 562.799515][T23062] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 562.819736][ T8361] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 562.831322][ T8361] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 562.869086][ T8531] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 563.024374][ T2973] usb 2-1: USB disconnect, device number 20 [ 563.043832][ T2973] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 563.050930][ T8531] usb 3-1: device descriptor read/8, error -61 03:41:52 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:52 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 16) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:52 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) [ 563.346538][ T8531] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 563.394144][T23108] FAULT_INJECTION: forcing a failure. [ 563.394144][T23108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.411312][T23108] CPU: 1 PID: 23108 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 563.420096][T23108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.430242][T23108] Call Trace: [ 563.433529][T23108] dump_stack_lvl+0x201/0x2d8 [ 563.438220][T23108] ? show_regs_print_info+0x12/0x12 [ 563.443429][T23108] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 563.449158][T23108] ? __might_fault+0xb8/0x110 [ 563.453852][T23108] ? rcu_read_lock_sched_held+0x89/0x130 [ 563.459506][T23108] should_fail+0x384/0x4b0 [ 563.463945][T23108] _copy_from_user+0x2d/0x170 [ 563.468633][T23108] __copy_msghdr_from_user+0xaf/0x730 [ 563.474023][T23108] ? __ia32_sys_shutdown+0x60/0x60 [ 563.479157][T23108] __sys_sendmmsg+0x3b7/0x800 [ 563.483839][T23108] ? __ia32_sys_sendmsg+0x90/0x90 [ 563.488890][T23108] ? rcu_read_lock_sched_held+0x89/0x130 [ 563.494532][T23108] ? __lock_acquire+0x2b00/0x2b00 [ 563.499556][T23108] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 563.505522][T23108] ? print_irqtrace_events+0x220/0x220 [ 563.510964][T23108] ? vtime_user_exit+0x2b2/0x3e0 [ 563.515891][T23108] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 563.521865][T23108] __x64_sys_sendmmsg+0x9c/0xb0 [ 563.526710][T23108] do_syscall_64+0x44/0xd0 [ 563.531115][T23108] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 563.536997][T23108] RIP: 0033:0x7f4fb6455a39 [ 563.541401][T23108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 563.561006][T23108] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 563.569410][T23108] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 563.577367][T23108] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 563.585326][T23108] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 03:41:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 563.593286][T23108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.601242][T23108] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 563.618614][ T8531] usb 3-1: device not accepting address 117, error -71 [ 563.648757][ T8531] usb usb3-port1: unable to enumerate USB device 03:41:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:53 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 17) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 563.769189][ T8141] usb 1-1: new high-speed USB device number 122 using dummy_hcd 03:41:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200000001b400bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 563.923535][T23125] FAULT_INJECTION: forcing a failure. [ 563.923535][T23125] name failslab, interval 1, probability 0, space 0, times 0 [ 563.978126][T23125] CPU: 1 PID: 23125 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 563.986914][T23125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.996961][T23125] Call Trace: [ 564.000238][T23125] dump_stack_lvl+0x201/0x2d8 [ 564.004912][T23125] ? show_regs_print_info+0x12/0x12 [ 564.010113][T23125] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 564.015840][T23125] ? __might_sleep+0x110/0x110 [ 564.020617][T23125] should_fail+0x384/0x4b0 [ 564.025030][T23125] ? alloc_skb_with_frags+0xab/0x660 [ 564.030308][T23125] should_failslab+0x5/0x20 [ 564.034804][T23125] __kmalloc_node_track_caller+0x97/0x3e0 [ 564.040514][T23125] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 564.046310][T23125] ? kmem_cache_alloc_node+0x250/0x340 [ 564.051755][T23125] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 564.057724][T23125] ? __alloc_skb+0xd8/0x580 [ 564.062219][T23125] ? alloc_skb_with_frags+0xab/0x660 [ 564.067500][T23125] __alloc_skb+0x127/0x580 [ 564.071918][T23125] ? __lock_acquire+0x1382/0x2b00 [ 564.076935][T23125] alloc_skb_with_frags+0xab/0x660 [ 564.082046][T23125] sock_alloc_send_pskb+0x928/0xa60 [ 564.087247][T23125] ? sock_kzfree_s+0x50/0x50 [ 564.091821][T23125] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 564.097970][T23125] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 564.102828][T23125] __ip_append_data+0x2378/0x37c0 [ 564.107874][T23125] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 564.114030][T23125] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 564.120170][T23125] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 564.125017][T23125] ? __sanitizer_cov_trace_pc+0x46/0x60 [ 564.130581][T23125] ? ip_setup_cork+0x840/0x840 [ 564.135342][T23125] ? ipv4_mtu+0x28a/0x380 [ 564.139665][T23125] ? ip_setup_cork+0x479/0x840 [ 564.144425][T23125] ip_make_skb+0x1d3/0x480 [ 564.148839][T23125] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 564.153682][T23125] ? ip_flush_pending_frames+0x260/0x260 [ 564.159319][T23125] udp_sendmsg+0x2397/0x34f0 [ 564.163922][T23125] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 564.168758][T23125] ? udp_cmsg_send+0x340/0x340 [ 564.173519][T23125] ? mark_lock+0x191/0x1e00 [ 564.178014][T23125] ? __print_lock_name+0x1d0/0x1d0 [ 564.183119][T23125] ? udpv6_sendmsg+0xa8d/0x35f0 [ 564.188127][T23125] ? udpv6_sendmsg+0xa9a/0x35f0 [ 564.192974][T23125] udpv6_sendmsg+0xaaa/0x35f0 [ 564.197661][T23125] ? xfrm6_policy_check+0x590/0x590 [ 564.202860][T23125] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 564.208834][T23125] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 564.214973][T23125] ? lockdep_hardirqs_on+0x95/0x140 [ 564.220158][T23125] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 564.226294][T23125] ? sock_rps_record_flow+0x12/0x370 [ 564.231568][T23125] ? inet_send_prepare+0x55/0x250 [ 564.236587][T23125] ? inet6_compat_ioctl+0x560/0x560 [ 564.241772][T23125] ____sys_sendmsg+0x5b9/0x910 [ 564.246529][T23125] ? __sys_sendmsg_sock+0x30/0x30 [ 564.251538][T23125] ? __sys_sendmmsg+0x551/0x800 [ 564.256373][T23125] ? __sys_sendmmsg+0x55a/0x800 [ 564.261223][T23125] __sys_sendmmsg+0x57e/0x800 [ 564.265895][T23125] ? __ia32_sys_sendmsg+0x90/0x90 [ 564.270902][T23125] ? rcu_read_lock_sched_held+0x89/0x130 [ 564.276551][T23125] ? rcu_read_lock_sched_held+0x89/0x130 [ 564.282189][T23125] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 564.288173][T23125] ? lockdep_hardirqs_on+0x95/0x140 [ 564.293381][T23125] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 564.299533][T23125] ? trace_hardirqs_on+0x30/0x80 [ 564.304535][T23125] __x64_sys_sendmmsg+0x9c/0xb0 [ 564.309377][T23125] do_syscall_64+0x44/0xd0 [ 564.313784][T23125] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 564.319665][T23125] RIP: 0033:0x7f4fb6455a39 [ 564.324070][T23125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 564.343662][T23125] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 564.352066][T23125] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 564.360022][T23125] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 564.367976][T23125] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 564.375930][T23125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.383885][T23125] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 564.394859][ T8361] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 564.488598][ T8531] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 564.539223][ T8141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.563599][ T8141] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.580939][ T8141] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 564.590568][ T8141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.601288][ T8141] usb 1-1: config 0 descriptor?? [ 564.728553][ T8531] usb 3-1: device descriptor read/64, error 18 03:41:54 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000"], 0x0) 03:41:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200ffffffc000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:54 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:54 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x5e2, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xcc, 0x24, 0x97, 0xff, 0x1f4d, 0xc803, 0xa3fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d0, 0x3, 0x8, 0x1, 0x0, 0x8, [{{0x9, 0x4, 0x8c, 0x1f, 0x8, 0x55, 0x92, 0xbf, 0x9, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "8e251832"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x7, 0x4}}], [{{0x9, 0x5, 0xe, 0xc, 0x40, 0x7, 0x0, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x9, 0x1, 0x1d}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x2c, 0x7, 0x80, [@generic={0x41, 0x8, "231dc3564622d3b7a475713edd4235a2dbb4f7eae8a661765c4b144f544dc823714b808b4a0e9038b4a1ba04a9232c071552fcc11b434312ff3516c00a4b1f"}]}}, {{0x9, 0x5, 0x8, 0x18, 0x10, 0x7, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x0, 0x20, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x6, 0x81, 0x8, [@generic={0x49, 0x21, "a5f31279ac2e22836a0ce8879bded46d121f8a306fca4e468584f7b23ab22e1870fa5012798ad98fcc6fceb1b11ba6287a046e201c1b7da123168bbb8f27f76029dc03c64d6c37"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x6, 0x88, 0xff}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xff, 0x3, 0x81}}]}}, {{0x9, 0x4, 0x14, 0x3f, 0x4, 0x64, 0x26, 0xf8, 0x4, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x1, 0x1, 0x6, [@generic={0xa3, 0x6, "7e81f3a2a527fe60d573de0f43625c76ccd18497c2a4088297f4528db452d1f4c3e3278067f0a55ab80e5151b522f9c1a716cc1758d0a28d0ecab3dc8146bddc070a157d70f3f7f863a9a600c636f1b3095f5db62993c3b74d04d73d9bb7deae14b61da3892e5a94e7e41621a4a63a08946294305921d04f2b36e68b14dd23da6ca5609b6bf8188dc62e9eb1078f8ae33daa421ebcea0485dc0f36ede15ebb521c"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x9, 0x4, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x238, 0x2, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x9, 0x8, 0x20, [@generic={0x97, 0x10, "034a346070a9a387a879ac42eb0f38f55b6a43d13822a048dc20ebb8429495a9b41be14770a98c4b51386bd276c067dcdeb7a91fd7a788fc740ae2ffb15980e0163a19beedaaa48fd49629c6787d1da8edf88886d5b9ef953007ef9c869ac8e40578e09f29a4020cc3261abb5308f889a441e1b7c08f3d4f5edcafcdcba603a827c3d0ac048a51110b3f38cfea3a357123a99fd68d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0x76, 0x3f, 0x8, 0x41, 0x61, 0x37, 0xf8, [@hid_hid={0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x5c0}}, @generic={0x13, 0x7, "708d0911b2bc6d9157691f7b89e40ac6c6"}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x5, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x6, 0xfffb}]}}, {{0x9, 0x5, 0x88, 0x10, 0x400, 0x0, 0x0, 0xff}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x0, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}, @generic={0x64, 0x8, "38d8fd704348cfa5c842b4d9241bb1be211d68f92fbb97cdd9063d8ac484e84a8dd68258b7911bacf6b84648cc327f6b8e92f4f8cb0c73bb68680a0d76a55e1ebea4eb2b4ffea1897958a149a8ad3845f4859f33ed1394de6902726126896b5ea49c"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0xa6, 0x81, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x40, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x8, 0x3, 0x2, [@generic={0x9d, 0x31, "9a91ec6f5f409177bffc0445293333de2767618edc32051c057b70c6a4d35e1043e0153af1e0bc60beb9f1d17291c7a6268c3c45cc54b944e1edd51bf601ae8750e4828d9dd9c687d0d6449441e3e93d3c1d04c860c7f041456135ab818de20cc14a502758871b7bce84fc08eb7057a793106d422436848b54f401ae4da0725c9cb0a5c2ea366756f47d51e33c45b23f2ccc8c1485676c76eb788d"}, @generic={0x80, 0xf, "a1416ffd7b39a73dbeb63acda63ef1d7fa20d54fc03c26cd42cfa00bd4fde4ab2f8f4fd6fcbf5cfa93ad94f2da719f74c9b41d5923a8871c0f8d624bfee11a0295aaafd61070ecf1f4dc44442a0e6f35ac85e5e50d92b66d182bf00e585136c779907e393d68a3b316ef12e4738b58606c0846f858b01d4e3f1a14c034d4"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x0, 0xf8, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x9, 0x3f, 0x7}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x0, 0x7f, 0x0, [@generic={0xdb, 0xb, "1b21a7c8d42499c9f0027a96774e6ec7df522f96128b4a2aea79d076c3151719ea08bf2307072583df6cec8bc8d548b7343668c988ac62a627c147434b9d10959f0c009ebedeb0469a70e9b381362aa0b52e83c410533a64951ff61863ddfd18657d04475ebca2809653ceeef11038c7f3505b4efaa4bbfab78486b2ae5dbd6c73751e34690c6fa9b9fdf8cccbe62a683f87e0a5af579a38ff6a308197b93eea489bc5f44b04921307dc96bc031ff557e67dbdf1d9963cb3fe484e45119d2c715ae8dd9dc7177defa14c569b6e9849b8995042aa3144207706"}, @generic={0x70, 0x23, "9ffbd403a04035b416660af680a3d31e9e38613d7e4a0162bc5f2895ff40d0a75c48cc6cbd298cfeab7f7adb8a74f4fad46689b6aa4090cb9e89cb7bfadc0ca1a5d9ff6c56208c0ed3b60c94c7de77e0db4904843cb2a610c179aed518fda03f4fb1364e85b54e167e69db54b8df"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x0, 0x40, 0x1, 0xff, 0x1c}, 0xb5, &(0x7f0000000700)={0x5, 0xf, 0xb5, 0x1, [@generic={0xb0, 0x10, 0xa, "355b5b364e3e49c4d1f5b17616b9b816849f01a9ea47cdf144a2200c83f208a2be6d7c6814207653da78d605b5a007bc8e2ddecb8a19f843725db5474ab25640f66f543530a8dfb0a4a7d23512da37d38daa4ee55b0f8aea6c4da3d883c5e2e5f7acf152df5a49744a3bdf4b019c2a3538972f3d90d060b32135d9e73ad67103fd43865f6882e797dd60d89e018a73c94466ba5b5009357b84b417b7a7ea8fb6ad74fa78d70314f162d6218bb3"}]}, 0x4, [{0xb0, &(0x7f00000007c0)=@string={0xb0, 0x3, "e2cc10f5f57663b3b4df9d884d027d8e68f299286bceb70b7c5efa5573ec6c7a2c897cff60a344d4d3eed86605b398038b8c22f07abe2338fc09dc8b3ff4faf7e56fc23511dfb2fb14d1e6b09fba544058df8a347cc97662b41bf7e94360f4390b7ce9af3378532cdc16cbe83cda94f33b0e8067c30aa77f1e24e8700cea1d2a1fe8aa734541cb880ecda8f0620b89d29ac5429d7ef521ba72b4bd2775755f7bc4dee9a6d77d6f8efc9e51621778"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2c01}}, {0x94, &(0x7f0000000880)=@string={0x94, 0x3, "c3cb60a7da43b08466e737e0304e5bd5a2e71ae827122d6bf18f18aff933d3055994be4ea1c55b034e0ace3d334bf822569bdbb67476aadad35601f7c6fdcad352958a8b8ab1143aad8c197bfb5857c45fd215cc9fdbd6d2e32fcc551e0b62f48487fad11a6e3ab8f5f145a8e5a942807158cfbcfda216babc541b892b1f3fb0df8f7d400420ee23189af5a78752ea1674ea"}}, {0x100, &(0x7f0000000940)=@string={0x100, 0x3, "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"}}]}) read$char_usb(r0, 0x0, 0x0) [ 564.842201][ T2973] usb 1-1: USB disconnect, device number 122 [ 564.851017][ T8361] usb 2-1: unable to read config index 0 descriptor/all [ 564.857996][ T8361] usb 2-1: can't read configurations, error -71 [ 564.934777][T23145] FAULT_INJECTION: forcing a failure. [ 564.934777][T23145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.974863][T23145] CPU: 0 PID: 23145 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 564.983648][T23145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.993704][T23145] Call Trace: [ 564.996990][T23145] dump_stack_lvl+0x201/0x2d8 [ 565.001680][T23145] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 565.007846][T23145] ? show_regs_print_info+0x12/0x12 [ 565.013057][T23145] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 565.019225][T23145] ? wake_up_klogd+0xb2/0xf0 [ 565.023823][T23145] ? dump_stack+0x5/0x16 [ 565.028080][T23145] should_fail+0x384/0x4b0 [ 565.032517][T23145] _copy_from_user+0x2d/0x170 [ 565.037213][T23145] __copy_msghdr_from_user+0xaf/0x730 [ 565.042607][T23145] ? __ia32_sys_shutdown+0x60/0x60 [ 565.047749][T23145] __sys_sendmmsg+0x3b7/0x800 [ 565.052447][T23145] ? __ia32_sys_sendmsg+0x90/0x90 [ 565.057481][T23145] ? rcu_read_lock_sched_held+0x89/0x130 [ 565.063166][T23145] ? rcu_read_lock_sched_held+0x89/0x130 [ 565.068837][T23145] ? print_irqtrace_events+0x220/0x220 [ 565.074330][T23145] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 565.080511][T23145] __x64_sys_sendmmsg+0x9c/0xb0 [ 565.085378][T23145] do_syscall_64+0x44/0xd0 [ 565.089807][T23145] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 565.095709][T23145] RIP: 0033:0x7f4fb6455a39 [ 565.100136][T23145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 565.119746][T23145] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 565.128171][T23145] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 565.136149][T23145] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 565.144128][T23145] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 565.152105][T23145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.160079][T23145] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 565.178011][ T8531] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 565.258522][ T8361] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 565.358527][ T20] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 565.419341][ T8531] usb 3-1: device descriptor read/64, error 18 [ 565.538669][ T8531] usb usb3-port1: attempt power cycle [ 565.618598][ T8361] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 565.629156][ T8361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 565.640175][ T8361] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.653256][ T8361] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 565.662504][ T8361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.673120][ T8361] usb 2-1: config 0 descriptor?? [ 565.685063][ T20] usb 5-1: no configurations [ 565.691248][ T20] usb 5-1: can't read configurations, error -22 [ 565.719763][ T8361] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 565.731339][ T8361] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 565.868547][ T20] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 565.924258][T23149] udc-core: couldn't find an available UDC or it's busy [ 565.932162][T23149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 565.951455][ T2973] usb 2-1: USB disconnect, device number 22 [ 565.958710][ T8531] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 565.973284][ T2973] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 566.148619][ T8531] usb 3-1: device descriptor read/8, error -61 [ 566.154942][ T20] usb 5-1: no configurations [ 566.159890][ T20] usb 5-1: can't read configurations, error -22 [ 566.166309][ T20] usb usb5-port1: attempt power cycle 03:41:55 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:55 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 19) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:55 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) [ 566.438513][ T8531] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 566.472956][T23189] FAULT_INJECTION: forcing a failure. [ 566.472956][T23189] name failslab, interval 1, probability 0, space 0, times 0 [ 566.490593][T23189] CPU: 0 PID: 23189 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 566.499375][T23189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.509427][T23189] Call Trace: [ 566.512697][T23189] dump_stack_lvl+0x201/0x2d8 [ 566.517366][T23189] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 566.523509][T23189] ? show_regs_print_info+0x12/0x12 [ 566.528691][T23189] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 566.534833][T23189] ? wake_up_klogd+0xb2/0xf0 [ 566.539413][T23189] ? dump_stack+0x5/0x16 [ 566.543646][T23189] should_fail+0x384/0x4b0 [ 566.548054][T23189] ? __alloc_skb+0xd8/0x580 [ 566.552543][T23189] should_failslab+0x5/0x20 [ 566.557033][T23189] kmem_cache_alloc_node+0x77/0x340 [ 566.562225][T23189] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 566.568205][T23189] __alloc_skb+0xd8/0x580 [ 566.572517][T23189] ? __lock_acquire+0x1382/0x2b00 [ 566.577539][T23189] alloc_skb_with_frags+0xab/0x660 [ 566.582646][T23189] sock_alloc_send_pskb+0x928/0xa60 [ 566.587850][T23189] ? sock_kzfree_s+0x50/0x50 [ 566.592435][T23189] ? rcu_read_lock_sched_held+0x89/0x130 [ 566.598053][T23189] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 566.604019][T23189] __ip_append_data+0x2378/0x37c0 [ 566.609040][T23189] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 566.615021][T23189] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 566.619862][T23189] ? rcu_lock_release+0x9/0x20 [ 566.624617][T23189] ? ip_setup_cork+0x840/0x840 [ 566.629363][T23189] ? ipv4_mtu+0x28a/0x380 [ 566.633854][T23189] ? ip_setup_cork+0x479/0x840 [ 566.638607][T23189] ip_make_skb+0x1d3/0x480 [ 566.643031][T23189] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 566.647871][T23189] ? ip_flush_pending_frames+0x260/0x260 [ 566.653516][T23189] udp_sendmsg+0x2397/0x34f0 [ 566.658118][T23189] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 566.662958][T23189] ? udp_cmsg_send+0x340/0x340 [ 566.667714][T23189] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 566.673681][T23189] ? print_irqtrace_events+0x220/0x220 [ 566.679132][T23189] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 566.685285][T23189] ? kasan_check_range+0x80/0x2f0 [ 566.690300][T23189] udpv6_sendmsg+0xaaa/0x35f0 [ 566.694979][T23189] ? xfrm6_policy_check+0x590/0x590 [ 566.700176][T23189] ? smack_socket_sendmsg+0x16e/0x530 [ 566.705581][T23189] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 566.711984][T23189] ? tomoyo_socket_bind_permission+0x360/0x360 [ 566.718119][T23189] ? __might_fault+0xb8/0x110 [ 566.722788][T23189] ? sock_rps_record_flow+0x12/0x370 [ 566.728058][T23189] ? inet_send_prepare+0x55/0x250 [ 566.733068][T23189] ? inet6_compat_ioctl+0x560/0x560 [ 566.738254][T23189] ____sys_sendmsg+0x5b9/0x910 [ 566.743012][T23189] ? __sys_sendmsg_sock+0x30/0x30 [ 566.748043][T23189] __sys_sendmmsg+0x57e/0x800 [ 566.752727][T23189] ? __ia32_sys_sendmsg+0x90/0x90 [ 566.757773][T23189] ? rcu_read_lock_sched_held+0x89/0x130 [ 566.763412][T23189] ? __lock_acquire+0x2b00/0x2b00 [ 566.768430][T23189] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 566.774392][T23189] ? print_irqtrace_events+0x220/0x220 [ 566.779833][T23189] ? vtime_user_exit+0x2b2/0x3e0 [ 566.784761][T23189] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 566.790730][T23189] __x64_sys_sendmmsg+0x9c/0xb0 [ 566.795568][T23189] do_syscall_64+0x44/0xd0 [ 566.799972][T23189] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 566.805856][T23189] RIP: 0033:0x7f4fb6455a39 [ 566.810261][T23189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 566.829858][T23189] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 566.838255][T23189] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 566.846216][T23189] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 566.854186][T23189] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 566.862153][T23189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.870105][T23189] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:41:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 566.889110][ T8531] usb 3-1: device not accepting address 121, error -71 [ 566.899160][ T8531] usb usb3-port1: unable to enumerate USB device 03:41:56 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 566.968504][ T20] usb 5-1: new high-speed USB device number 51 using dummy_hcd 03:41:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200ffffffd000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 567.038477][ T8361] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 567.081121][T23205] FAULT_INJECTION: forcing a failure. [ 567.081121][T23205] name failslab, interval 1, probability 0, space 0, times 0 [ 567.111566][T23205] CPU: 1 PID: 23205 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 567.120349][T23205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.130403][T23205] Call Trace: [ 567.133673][T23205] dump_stack_lvl+0x201/0x2d8 [ 567.138349][T23205] ? show_regs_print_info+0x12/0x12 [ 567.143543][T23205] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 567.149255][T23205] ? __might_sleep+0x110/0x110 [ 567.154011][T23205] should_fail+0x384/0x4b0 [ 567.158417][T23205] ? alloc_skb_with_frags+0xab/0x660 [ 567.163692][T23205] should_failslab+0x5/0x20 [ 567.168185][T23205] __kmalloc_node_track_caller+0x97/0x3e0 [ 567.173888][T23205] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 567.179681][T23205] ? kmem_cache_alloc_node+0x250/0x340 [ 567.185129][T23205] ? __alloc_skb+0xd8/0x580 [ 567.189622][T23205] ? alloc_skb_with_frags+0xab/0x660 [ 567.194889][T23205] __alloc_skb+0x127/0x580 [ 567.199291][T23205] ? __lock_acquire+0x1382/0x2b00 [ 567.204305][T23205] alloc_skb_with_frags+0xab/0x660 [ 567.209431][T23205] sock_alloc_send_pskb+0x928/0xa60 [ 567.214633][T23205] ? sock_kzfree_s+0x50/0x50 [ 567.219217][T23205] ? rcu_read_lock_sched_held+0x89/0x130 [ 567.224838][T23205] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 567.230807][T23205] __ip_append_data+0x2378/0x37c0 [ 567.235831][T23205] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 567.241805][T23205] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 567.246650][T23205] ? rcu_lock_release+0x9/0x20 [ 567.251395][T23205] ? ip_setup_cork+0x840/0x840 [ 567.256145][T23205] ? ipv4_mtu+0x28a/0x380 [ 567.260460][T23205] ? ip_setup_cork+0x479/0x840 [ 567.265209][T23205] ip_make_skb+0x1d3/0x480 [ 567.269620][T23205] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 567.274459][T23205] ? ip_flush_pending_frames+0x260/0x260 [ 567.280098][T23205] udp_sendmsg+0x2397/0x34f0 [ 567.284703][T23205] ? rcu_read_lock_sched_held+0x89/0x130 [ 567.290327][T23205] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 567.295162][T23205] ? udp_cmsg_send+0x340/0x340 [ 567.299921][T23205] ? mark_lock+0x191/0x1e00 [ 567.304415][T23205] ? __print_lock_name+0x1d0/0x1d0 [ 567.309528][T23205] udpv6_sendmsg+0xaaa/0x35f0 [ 567.314210][T23205] ? xfrm6_policy_check+0x590/0x590 [ 567.319409][T23205] ? smack_socket_sendmsg+0x16e/0x530 [ 567.324769][T23205] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 567.331173][T23205] ? tomoyo_socket_bind_permission+0x360/0x360 [ 567.337311][T23205] ? __might_fault+0xb8/0x110 [ 567.341976][T23205] ? rcu_read_lock_sched_held+0x89/0x130 [ 567.347590][T23205] ? sock_rps_record_flow+0x12/0x370 [ 567.352861][T23205] ? inet_send_prepare+0x55/0x250 [ 567.357873][T23205] ? inet6_compat_ioctl+0x560/0x560 [ 567.363055][T23205] ____sys_sendmsg+0x5b9/0x910 [ 567.367813][T23205] ? __sys_sendmsg_sock+0x30/0x30 [ 567.372834][T23205] __sys_sendmmsg+0x57e/0x800 [ 567.377505][T23205] ? __ia32_sys_sendmsg+0x90/0x90 [ 567.382555][T23205] ? rcu_read_lock_sched_held+0x89/0x130 [ 567.388197][T23205] ? __lock_acquire+0x2b00/0x2b00 [ 567.393215][T23205] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 567.399180][T23205] ? print_irqtrace_events+0x220/0x220 [ 567.404620][T23205] ? vtime_user_exit+0x2b2/0x3e0 [ 567.409550][T23205] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 567.415521][T23205] __x64_sys_sendmmsg+0x9c/0xb0 [ 567.420373][T23205] do_syscall_64+0x44/0xd0 [ 567.424777][T23205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 567.430653][T23205] RIP: 0033:0x7f4fb6455a39 [ 567.435053][T23205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 567.454640][T23205] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 567.463036][T23205] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 567.470989][T23205] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 03:41:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200000003ed00bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 567.478943][T23205] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 567.486907][T23205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.494863][T23205] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 567.518808][ T20] usb 5-1: no configurations [ 567.524969][ T20] usb 5-1: can't read configurations, error -22 [ 567.578575][ T2973] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 567.678598][ T8531] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 567.708901][ T20] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 567.748779][ T8361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.759121][ T8361] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.770455][ T8361] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 567.779691][ T8361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.801310][ T8361] usb 1-1: config 0 descriptor?? [ 567.888940][ T20] usb 5-1: no configurations [ 567.893565][ T20] usb 5-1: can't read configurations, error -22 [ 567.899943][ T8531] usb 3-1: device descriptor read/64, error 18 [ 567.906492][ T20] usb usb5-port1: unable to enumerate USB device 03:41:57 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000"], 0x0) 03:41:57 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 21) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:57 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) fcntl$dupfd(r1, 0x0, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x800, 0x182) sendfile(r5, r0, 0x0, 0x7048) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x17, 0x40000d9f, 0x0) read$char_usb(r4, 0x0, 0xa4) mmap(&(0x7f000037d000/0x4000)=nil, 0x4000, 0x3, 0x20010, r5, 0x7d455000) [ 567.978344][ T2973] usb 2-1: device descriptor read/all, error -71 [ 568.050166][ T8361] usb 1-1: USB disconnect, device number 123 [ 568.133847][T23233] FAULT_INJECTION: forcing a failure. [ 568.133847][T23233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.178397][ T8531] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 568.184145][T23233] CPU: 0 PID: 23233 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 568.194804][T23233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.204865][T23233] Call Trace: [ 568.208147][T23233] dump_stack_lvl+0x201/0x2d8 [ 568.212836][T23233] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 568.219005][T23233] ? show_regs_print_info+0x12/0x12 [ 568.224220][T23233] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 568.229968][T23233] should_fail+0x384/0x4b0 [ 568.234402][T23233] _copy_from_user+0x2d/0x170 [ 568.239094][T23233] __copy_msghdr_from_user+0xaf/0x730 [ 568.244479][T23233] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 568.250625][T23233] ? __ia32_sys_shutdown+0x60/0x60 [ 568.255744][T23233] __sys_sendmmsg+0x3b7/0x800 [ 568.260415][T23233] ? __ia32_sys_sendmsg+0x90/0x90 [ 568.265457][T23233] ? rcu_read_lock_sched_held+0x89/0x130 [ 568.271088][T23233] ? __lock_acquire+0x2b00/0x2b00 [ 568.276101][T23233] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 568.282064][T23233] ? print_irqtrace_events+0x220/0x220 [ 568.287508][T23233] ? vtime_user_exit+0x2b2/0x3e0 [ 568.292455][T23233] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 568.298424][T23233] __x64_sys_sendmmsg+0x9c/0xb0 [ 568.303271][T23233] do_syscall_64+0x44/0xd0 [ 568.307687][T23233] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 568.313575][T23233] RIP: 0033:0x7f4fb6455a39 [ 568.317972][T23233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 568.337564][T23233] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 568.345960][T23233] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 568.353917][T23233] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 568.361873][T23233] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 568.369827][T23233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.377787][T23233] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 568.458331][ T2973] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 568.568392][ T8531] usb 3-1: device descriptor read/64, error 18 [ 568.659249][ T20] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 568.688463][ T8531] usb usb3-port1: attempt power cycle [ 568.858669][ T2973] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 568.869202][ T2973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 568.882565][ T2973] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.896381][ T2973] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 568.906830][ T2973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.923849][ T2973] usb 2-1: config 0 descriptor?? [ 568.988377][ T20] usb 5-1: no configurations [ 568.994339][ T2973] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 569.004232][ T20] usb 5-1: can't read configurations, error -22 [ 569.015949][ T2973] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 569.138240][ T8531] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 569.168318][ T20] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 569.203675][ T31] usb 2-1: USB disconnect, device number 24 [ 569.223184][ T31] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 569.348269][ T8531] usb 3-1: device descriptor read/8, error -61 03:41:59 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:41:59 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 22) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:41:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:59 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x5e2, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xcc, 0x24, 0x97, 0xff, 0x1f4d, 0xc803, 0xa3fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d0, 0x3, 0x8, 0x1, 0x0, 0x8, [{{0x9, 0x4, 0x8c, 0x1f, 0x8, 0x55, 0x92, 0xbf, 0x9, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "8e251832"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x7, 0x4}}], [{{0x9, 0x5, 0xe, 0xc, 0x40, 0x7, 0x0, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x9, 0x1, 0x1d}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x2c, 0x7, 0x80, [@generic={0x41, 0x8, "231dc3564622d3b7a475713edd4235a2dbb4f7eae8a661765c4b144f544dc823714b808b4a0e9038b4a1ba04a9232c071552fcc11b434312ff3516c00a4b1f"}]}}, {{0x9, 0x5, 0x8, 0x18, 0x10, 0x7, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x0, 0x20, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x6, 0x81, 0x8, [@generic={0x49, 0x21, "a5f31279ac2e22836a0ce8879bded46d121f8a306fca4e468584f7b23ab22e1870fa5012798ad98fcc6fceb1b11ba6287a046e201c1b7da123168bbb8f27f76029dc03c64d6c37"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x6, 0x88, 0xff}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xff, 0x3, 0x81}}]}}, {{0x9, 0x4, 0x14, 0x3f, 0x4, 0x64, 0x26, 0xf8, 0x4, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x1, 0x1, 0x6, [@generic={0xa3, 0x6, "7e81f3a2a527fe60d573de0f43625c76ccd18497c2a4088297f4528db452d1f4c3e3278067f0a55ab80e5151b522f9c1a716cc1758d0a28d0ecab3dc8146bddc070a157d70f3f7f863a9a600c636f1b3095f5db62993c3b74d04d73d9bb7deae14b61da3892e5a94e7e41621a4a63a08946294305921d04f2b36e68b14dd23da6ca5609b6bf8188dc62e9eb1078f8ae33daa421ebcea0485dc0f36ede15ebb521c"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x9, 0x4, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x238, 0x2, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x9, 0x8, 0x20, [@generic={0x97, 0x10, "034a346070a9a387a879ac42eb0f38f55b6a43d13822a048dc20ebb8429495a9b41be14770a98c4b51386bd276c067dcdeb7a91fd7a788fc740ae2ffb15980e0163a19beedaaa48fd49629c6787d1da8edf88886d5b9ef953007ef9c869ac8e40578e09f29a4020cc3261abb5308f889a441e1b7c08f3d4f5edcafcdcba603a827c3d0ac048a51110b3f38cfea3a357123a99fd68d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0x76, 0x3f, 0x8, 0x41, 0x61, 0x37, 0xf8, [@hid_hid={0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x5c0}}, @generic={0x13, 0x7, "708d0911b2bc6d9157691f7b89e40ac6c6"}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x5, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x6, 0xfffb}]}}, {{0x9, 0x5, 0x88, 0x10, 0x400, 0x0, 0x0, 0xff}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x0, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}, @generic={0x64, 0x8, "38d8fd704348cfa5c842b4d9241bb1be211d68f92fbb97cdd9063d8ac484e84a8dd68258b7911bacf6b84648cc327f6b8e92f4f8cb0c73bb68680a0d76a55e1ebea4eb2b4ffea1897958a149a8ad3845f4859f33ed1394de6902726126896b5ea49c"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0xa6, 0x81, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x40, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x8, 0x3, 0x2, [@generic={0x9d, 0x31, "9a91ec6f5f409177bffc0445293333de2767618edc32051c057b70c6a4d35e1043e0153af1e0bc60beb9f1d17291c7a6268c3c45cc54b944e1edd51bf601ae8750e4828d9dd9c687d0d6449441e3e93d3c1d04c860c7f041456135ab818de20cc14a502758871b7bce84fc08eb7057a793106d422436848b54f401ae4da0725c9cb0a5c2ea366756f47d51e33c45b23f2ccc8c1485676c76eb788d"}, @generic={0x80, 0xf, "a1416ffd7b39a73dbeb63acda63ef1d7fa20d54fc03c26cd42cfa00bd4fde4ab2f8f4fd6fcbf5cfa93ad94f2da719f74c9b41d5923a8871c0f8d624bfee11a0295aaafd61070ecf1f4dc44442a0e6f35ac85e5e50d92b66d182bf00e585136c779907e393d68a3b316ef12e4738b58606c0846f858b01d4e3f1a14c034d4"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x0, 0xf8, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x9, 0x3f, 0x7}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x0, 0x7f, 0x0, [@generic={0xdb, 0xb, "1b21a7c8d42499c9f0027a96774e6ec7df522f96128b4a2aea79d076c3151719ea08bf2307072583df6cec8bc8d548b7343668c988ac62a627c147434b9d10959f0c009ebedeb0469a70e9b381362aa0b52e83c410533a64951ff61863ddfd18657d04475ebca2809653ceeef11038c7f3505b4efaa4bbfab78486b2ae5dbd6c73751e34690c6fa9b9fdf8cccbe62a683f87e0a5af579a38ff6a308197b93eea489bc5f44b04921307dc96bc031ff557e67dbdf1d9963cb3fe484e45119d2c715ae8dd9dc7177defa14c569b6e9849b8995042aa3144207706"}, @generic={0x70, 0x23, "9ffbd403a04035b416660af680a3d31e9e38613d7e4a0162bc5f2895ff40d0a75c48cc6cbd298cfeab7f7adb8a74f4fad46689b6aa4090cb9e89cb7bfadc0ca1a5d9ff6c56208c0ed3b60c94c7de77e0db4904843cb2a610c179aed518fda03f4fb1364e85b54e167e69db54b8df"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x0, 0x40, 0x1, 0xff, 0x1c}, 0xb5, &(0x7f0000000700)={0x5, 0xf, 0xb5, 0x1, [@generic={0xb0, 0x10, 0xa, "355b5b364e3e49c4d1f5b17616b9b816849f01a9ea47cdf144a2200c83f208a2be6d7c6814207653da78d605b5a007bc8e2ddecb8a19f843725db5474ab25640f66f543530a8dfb0a4a7d23512da37d38daa4ee55b0f8aea6c4da3d883c5e2e5f7acf152df5a49744a3bdf4b019c2a3538972f3d90d060b32135d9e73ad67103fd43865f6882e797dd60d89e018a73c94466ba5b5009357b84b417b7a7ea8fb6ad74fa78d70314f162d6218bb3"}]}, 0x4, [{0xb0, &(0x7f00000007c0)=@string={0xb0, 0x3, "e2cc10f5f57663b3b4df9d884d027d8e68f299286bceb70b7c5efa5573ec6c7a2c897cff60a344d4d3eed86605b398038b8c22f07abe2338fc09dc8b3ff4faf7e56fc23511dfb2fb14d1e6b09fba544058df8a347cc97662b41bf7e94360f4390b7ce9af3378532cdc16cbe83cda94f33b0e8067c30aa77f1e24e8700cea1d2a1fe8aa734541cb880ecda8f0620b89d29ac5429d7ef521ba72b4bd2775755f7bc4dee9a6d77d6f8efc9e51621778"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2c01}}, {0x94, &(0x7f0000000880)=@string={0x94, 0x3, "c3cb60a7da43b08466e737e0304e5bd5a2e71ae827122d6bf18f18aff933d3055994be4ea1c55b034e0ace3d334bf822569bdbb67476aadad35601f7c6fdcad352958a8b8ab1143aad8c197bfb5857c45fd215cc9fdbd6d2e32fcc551e0b62f48487fad11a6e3ab8f5f145a8e5a942807158cfbcfda216babc541b892b1f3fb0df8f7d400420ee23189af5a78752ea1674ea"}}, {0x100, &(0x7f0000000940)=@string={0x100, 0x3, "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"}}]}) read$char_usb(r0, 0x0, 0x0) [ 569.474817][ T20] usb 5-1: no configurations [ 569.483351][ T20] usb 5-1: can't read configurations, error -22 [ 569.505686][ T20] usb usb5-port1: attempt power cycle [ 569.517658][T23269] FAULT_INJECTION: forcing a failure. [ 569.517658][T23269] name failslab, interval 1, probability 0, space 0, times 0 [ 569.547782][T23269] CPU: 1 PID: 23269 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 569.556564][T23269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.566625][T23269] Call Trace: [ 569.569913][T23269] dump_stack_lvl+0x201/0x2d8 [ 569.574610][T23269] ? show_regs_print_info+0x12/0x12 [ 569.579819][T23269] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 569.585556][T23269] ? __might_sleep+0x110/0x110 [ 569.590348][T23269] should_fail+0x384/0x4b0 [ 569.594821][T23269] ? __alloc_skb+0xd8/0x580 [ 569.599337][T23269] should_failslab+0x5/0x20 [ 569.603851][T23269] kmem_cache_alloc_node+0x77/0x340 [ 569.609070][T23269] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 569.615073][T23269] __alloc_skb+0xd8/0x580 [ 569.619412][T23269] ? __lock_acquire+0x1382/0x2b00 [ 569.624450][T23269] alloc_skb_with_frags+0xab/0x660 [ 569.629585][T23269] sock_alloc_send_pskb+0x928/0xa60 [ 569.634812][T23269] ? sock_kzfree_s+0x50/0x50 [ 569.639421][T23269] ? rcu_read_lock_sched_held+0x89/0x130 03:41:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 569.645061][T23269] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 569.651064][T23269] __ip_append_data+0x2378/0x37c0 [ 569.656116][T23269] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 569.662121][T23269] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 569.666990][T23269] ? rcu_lock_release+0x9/0x20 [ 569.671763][T23269] ? ip_setup_cork+0x840/0x840 [ 569.676534][T23269] ? ipv4_mtu+0x28a/0x380 [ 569.680874][T23269] ? ip_setup_cork+0x479/0x840 [ 569.685653][T23269] ip_make_skb+0x1d3/0x480 [ 569.690089][T23269] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 569.694946][T23269] ? ip_flush_pending_frames+0x260/0x260 [ 569.700587][T23269] udp_sendmsg+0x2397/0x34f0 [ 569.705259][T23269] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 569.710094][T23269] ? udp_cmsg_send+0x340/0x340 [ 569.714890][T23269] ? mark_lock+0x191/0x1e00 [ 569.719381][T23269] ? __print_lock_name+0x1d0/0x1d0 [ 569.724498][T23269] ? reacquire_held_locks+0x620/0x620 [ 569.729886][T23269] udpv6_sendmsg+0xaaa/0x35f0 [ 569.734595][T23269] ? xfrm6_policy_check+0x590/0x590 [ 569.739827][T23269] ? smack_socket_sendmsg+0x16e/0x530 [ 569.745216][T23269] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 569.751677][T23269] ? tomoyo_socket_bind_permission+0x360/0x360 [ 569.757836][T23269] ? __might_fault+0xb8/0x110 [ 569.762529][T23269] ? rcu_read_lock_sched_held+0x89/0x130 [ 569.768175][T23269] ? sock_rps_record_flow+0x12/0x370 [ 569.773472][T23269] ? inet_send_prepare+0x55/0x250 [ 569.778517][T23269] ? inet6_compat_ioctl+0x560/0x560 [ 569.783724][T23269] ____sys_sendmsg+0x5b9/0x910 [ 569.788511][T23269] ? __sys_sendmsg_sock+0x30/0x30 [ 569.793565][T23269] __sys_sendmmsg+0x57e/0x800 [ 569.798267][T23269] ? __ia32_sys_sendmsg+0x90/0x90 [ 569.803318][T23269] ? rcu_read_lock_sched_held+0x89/0x130 [ 569.808951][T23269] ? __lock_acquire+0x2b00/0x2b00 [ 569.813981][T23269] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 569.819971][T23269] ? print_irqtrace_events+0x220/0x220 [ 569.825421][T23269] ? vtime_user_exit+0x2b2/0x3e0 [ 569.830369][T23269] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 569.836350][T23269] __x64_sys_sendmmsg+0x9c/0xb0 [ 569.841208][T23269] do_syscall_64+0x44/0xd0 03:41:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 569.845633][T23269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 569.851530][T23269] RIP: 0033:0x7f4fb6455a39 [ 569.855991][T23269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 569.875595][T23269] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 569.884014][T23269] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 569.891990][T23269] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 569.899970][T23269] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.907947][T23269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.915922][T23269] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:41:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:41:59 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 23) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 570.008658][ T8361] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 570.088224][ T31] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 570.106843][T23292] FAULT_INJECTION: forcing a failure. [ 570.106843][T23292] name failslab, interval 1, probability 0, space 0, times 0 [ 570.121914][T23292] CPU: 1 PID: 23292 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 570.130688][T23292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.140745][T23292] Call Trace: [ 570.144030][T23292] dump_stack_lvl+0x201/0x2d8 [ 570.148724][T23292] ? show_regs_print_info+0x12/0x12 [ 570.153936][T23292] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 570.159664][T23292] ? __might_sleep+0x110/0x110 [ 570.164451][T23292] should_fail+0x384/0x4b0 [ 570.168889][T23292] ? alloc_skb_with_frags+0xab/0x660 [ 570.174182][T23292] should_failslab+0x5/0x20 [ 570.178691][T23292] __kmalloc_node_track_caller+0x97/0x3e0 [ 570.184431][T23292] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 570.190253][T23292] ? kmem_cache_alloc_node+0x250/0x340 [ 570.195720][T23292] ? __alloc_skb+0xd8/0x580 [ 570.200240][T23292] ? alloc_skb_with_frags+0xab/0x660 [ 570.205530][T23292] __alloc_skb+0x127/0x580 [ 570.209954][T23292] ? __lock_acquire+0x1382/0x2b00 [ 570.214992][T23292] alloc_skb_with_frags+0xab/0x660 [ 570.220121][T23292] sock_alloc_send_pskb+0x928/0xa60 [ 570.225341][T23292] ? sock_kzfree_s+0x50/0x50 [ 570.229951][T23292] ? rcu_read_lock_sched_held+0x89/0x130 [ 570.235602][T23292] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 570.241596][T23292] __ip_append_data+0x2378/0x37c0 [ 570.246644][T23292] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 570.252647][T23292] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 570.257521][T23292] ? rcu_lock_release+0x9/0x20 [ 570.262292][T23292] ? ip_setup_cork+0x840/0x840 [ 570.267061][T23292] ? ipv4_mtu+0x28a/0x380 [ 570.271399][T23292] ? ip_setup_cork+0x479/0x840 [ 570.276177][T23292] ip_make_skb+0x1d3/0x480 [ 570.280611][T23292] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 570.285470][T23292] ? ip_flush_pending_frames+0x260/0x260 [ 570.291117][T23292] udp_sendmsg+0x2397/0x34f0 [ 570.295727][T23292] ? rcu_read_lock_sched_held+0x89/0x130 [ 570.301349][T23292] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 570.306200][T23292] ? udp_cmsg_send+0x340/0x340 [ 570.310967][T23292] ? mark_lock+0x191/0x1e00 [ 570.315474][T23292] ? __print_lock_name+0x1d0/0x1d0 [ 570.320594][T23292] udpv6_sendmsg+0xaaa/0x35f0 [ 570.325284][T23292] ? xfrm6_policy_check+0x590/0x590 [ 570.330498][T23292] ? smack_socket_sendmsg+0x16e/0x530 [ 570.335872][T23292] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 570.342281][T23292] ? tomoyo_socket_bind_permission+0x360/0x360 [ 570.348437][T23292] ? __might_fault+0xb8/0x110 [ 570.353135][T23292] ? rcu_read_lock_sched_held+0x89/0x130 [ 570.358776][T23292] ? sock_rps_record_flow+0x12/0x370 [ 570.364067][T23292] ? inet_send_prepare+0x55/0x250 [ 570.369103][T23292] ? inet6_compat_ioctl+0x560/0x560 [ 570.374308][T23292] ____sys_sendmsg+0x5b9/0x910 [ 570.379084][T23292] ? __sys_sendmsg_sock+0x30/0x30 [ 570.384135][T23292] __sys_sendmmsg+0x57e/0x800 [ 570.388832][T23292] ? __ia32_sys_sendmsg+0x90/0x90 [ 570.393911][T23292] ? rcu_read_lock_sched_held+0x89/0x130 [ 570.398443][ T8361] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 570.399582][T23292] ? __lock_acquire+0x2b00/0x2b00 [ 570.399621][T23292] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 570.417280][ T8361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 570.420981][T23292] ? print_irqtrace_events+0x220/0x220 [ 570.421003][T23292] ? vtime_user_exit+0x2b2/0x3e0 [ 570.421028][T23292] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 570.421056][T23292] __x64_sys_sendmmsg+0x9c/0xb0 [ 570.421082][T23292] do_syscall_64+0x44/0xd0 [ 570.421104][T23292] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 570.421123][T23292] RIP: 0033:0x7f4fb6455a39 [ 570.421141][T23292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.421156][T23292] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 570.421178][T23292] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 570.442775][ T8361] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.448330][T23292] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 570.448346][T23292] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.448359][T23292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.448371][T23292] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 570.550837][ T20] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 570.552074][ T8361] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 570.558638][ T8531] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 570.620727][ T8361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.632310][ T8361] usb 2-1: config 0 descriptor?? [ 570.671871][ T8361] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 570.691852][ T8361] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 570.708578][ T20] usb 5-1: no configurations [ 570.713647][ T20] usb 5-1: can't read configurations, error -22 [ 570.758519][ T8531] usb 3-1: device descriptor read/8, error -61 [ 570.828193][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 570.838862][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 570.851730][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.865906][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 570.876441][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.885454][ T20] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 570.893271][ T8531] usb usb3-port1: unable to enumerate USB device [ 570.909681][ T8361] usb 2-1: USB disconnect, device number 25 [ 570.910735][ T31] usb 1-1: config 0 descriptor?? [ 570.926692][ T8361] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 570.989930][ T31] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 571.012104][ T31] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 571.048404][ T20] usb 5-1: no configurations [ 571.053036][ T20] usb 5-1: can't read configurations, error -22 [ 571.064860][ T20] usb usb5-port1: unable to enumerate USB device 03:42:00 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100"], 0x0) 03:42:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:00 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 24) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:00 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf515c0e5862fce637d3f7cd508e7cfd806648b969e0bb23f99084491bb840d3e42ec55c177fb77e44cf5b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) [ 571.226448][T23270] udc-core: couldn't find an available UDC or it's busy [ 571.237044][T23270] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 571.253316][T23334] FAULT_INJECTION: forcing a failure. [ 571.253316][T23334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.263315][ T31] usb 1-1: USB disconnect, device number 124 [ 571.272616][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 571.295204][ T31] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 571.320367][T23334] CPU: 1 PID: 23334 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 571.329163][T23334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.339227][T23334] Call Trace: [ 571.342516][T23334] dump_stack_lvl+0x201/0x2d8 [ 571.347214][T23334] ? show_regs_print_info+0x12/0x12 [ 571.352427][T23334] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 571.358248][T23334] ? __might_fault+0xb8/0x110 [ 571.362943][T23334] ? rcu_read_lock_sched_held+0x89/0x130 [ 571.368598][T23334] should_fail+0x384/0x4b0 [ 571.373036][T23334] _copy_from_user+0x2d/0x170 [ 571.377735][T23334] __copy_msghdr_from_user+0xaf/0x730 [ 571.383131][T23334] ? __ia32_sys_shutdown+0x60/0x60 [ 571.388279][T23334] __sys_sendmmsg+0x3b7/0x800 [ 571.392991][T23334] ? __ia32_sys_sendmsg+0x90/0x90 [ 571.398065][T23334] ? rcu_read_lock_sched_held+0x89/0x130 [ 571.403739][T23334] ? __lock_acquire+0x2b00/0x2b00 [ 571.408802][T23334] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 571.414802][T23334] ? print_irqtrace_events+0x220/0x220 [ 571.420274][T23334] ? vtime_user_exit+0x2b2/0x3e0 [ 571.425409][T23334] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 571.431414][T23334] __x64_sys_sendmmsg+0x9c/0xb0 [ 571.436286][T23334] do_syscall_64+0x44/0xd0 [ 571.440734][T23334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 571.446635][T23334] RIP: 0033:0x7f4fb6455a39 [ 571.451066][T23334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.471114][T23334] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 571.479541][T23334] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 571.487607][T23334] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 571.495586][T23334] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.503569][T23334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.511573][T23334] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 571.528296][ T8361] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 571.788512][ T20] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 571.888698][ T8361] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 571.904405][ T8361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1105, setting to 1024 [ 571.916179][ T8361] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 571.930305][ T8361] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 571.939820][ T8361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.950383][ T8361] usb 2-1: config 0 descriptor?? [ 571.968975][T23333] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 571.989503][ T8361] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 572.020525][ T8361] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 572.188042][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.198463][ T20] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.202441][ T8361] usb 2-1: USB disconnect, device number 26 [ 572.215441][ T20] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 572.217933][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 572.239530][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.255760][ T8361] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 572.279112][ T20] usb 5-1: config 0 descriptor?? 03:42:02 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:02 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 25) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:02 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2243c0, 0x0, 0x2}, 0x18) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x4, 0x3423}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x24, 0x49, 0x400, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x8, 0x0, r5, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5b386a262833ca2b}, 0x800) read$char_usb(r2, &(0x7f0000000140)=""/68, 0x44) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) [ 572.537420][T23384] FAULT_INJECTION: forcing a failure. [ 572.537420][T23384] name failslab, interval 1, probability 0, space 0, times 0 [ 572.552857][T23384] CPU: 1 PID: 23384 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 572.561275][ T8361] usb 5-1: USB disconnect, device number 57 [ 572.561641][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.577571][T23384] Call Trace: [ 572.580857][T23384] dump_stack_lvl+0x201/0x2d8 [ 572.585560][T23384] ? show_regs_print_info+0x12/0x12 [ 572.590770][T23384] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 572.596512][T23384] ? __might_sleep+0x110/0x110 [ 572.601275][T23384] should_fail+0x384/0x4b0 [ 572.605689][T23384] ? __alloc_skb+0xd8/0x580 [ 572.610183][T23384] should_failslab+0x5/0x20 [ 572.614678][T23384] kmem_cache_alloc_node+0x77/0x340 [ 572.619891][T23384] __alloc_skb+0xd8/0x580 [ 572.624210][T23384] ? __lock_acquire+0x1382/0x2b00 [ 572.629226][T23384] alloc_skb_with_frags+0xab/0x660 [ 572.634334][T23384] sock_alloc_send_pskb+0x928/0xa60 [ 572.639537][T23384] ? sock_kzfree_s+0x50/0x50 [ 572.644121][T23384] ? rcu_read_lock_sched_held+0x89/0x130 [ 572.649756][T23384] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 572.655737][T23384] __ip_append_data+0x2378/0x37c0 [ 572.660781][T23384] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 572.666765][T23384] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 572.671611][T23384] ? rcu_lock_release+0x9/0x20 [ 572.676797][T23384] ? ip_setup_cork+0x840/0x840 [ 572.681547][T23384] ? ipv4_mtu+0x28a/0x380 [ 572.685866][T23384] ? ip_setup_cork+0x479/0x840 [ 572.690624][T23384] ip_make_skb+0x1d3/0x480 [ 572.695036][T23384] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 572.699877][T23384] ? ip_flush_pending_frames+0x260/0x260 [ 572.705516][T23384] udp_sendmsg+0x2397/0x34f0 [ 572.710111][T23384] ? rcu_read_lock_sched_held+0x89/0x130 [ 572.715730][T23384] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 572.720570][T23384] ? udp_cmsg_send+0x340/0x340 [ 572.725332][T23384] ? mark_lock+0x191/0x1e00 [ 572.729828][T23384] ? __print_lock_name+0x1d0/0x1d0 [ 572.734941][T23384] udpv6_sendmsg+0xaaa/0x35f0 [ 572.739622][T23384] ? xfrm6_policy_check+0x590/0x590 [ 572.744824][T23384] ? smack_socket_sendmsg+0x16e/0x530 [ 572.750209][T23384] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 572.756614][T23384] ? tomoyo_socket_bind_permission+0x360/0x360 [ 572.762755][T23384] ? __might_fault+0xb8/0x110 [ 572.767425][T23384] ? rcu_read_lock_sched_held+0x89/0x130 [ 572.773042][T23384] ? sock_rps_record_flow+0x12/0x370 [ 572.778327][T23384] ? inet_send_prepare+0x55/0x250 [ 572.783353][T23384] ? inet6_compat_ioctl+0x560/0x560 [ 572.788558][T23384] ____sys_sendmsg+0x5b9/0x910 [ 572.793317][T23384] ? __sys_sendmsg_sock+0x30/0x30 [ 572.798343][T23384] __sys_sendmmsg+0x57e/0x800 [ 572.803016][T23384] ? __ia32_sys_sendmsg+0x90/0x90 [ 572.808060][T23384] ? rcu_read_lock_sched_held+0x89/0x130 [ 572.813701][T23384] ? __lock_acquire+0x2b00/0x2b00 [ 572.818720][T23384] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 572.824686][T23384] ? print_irqtrace_events+0x220/0x220 [ 572.830131][T23384] ? vtime_user_exit+0x2b2/0x3e0 [ 572.835058][T23384] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 572.841033][T23384] __x64_sys_sendmmsg+0x9c/0xb0 [ 572.845880][T23384] do_syscall_64+0x44/0xd0 [ 572.850287][T23384] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 572.856164][T23384] RIP: 0033:0x7f4fb6455a39 [ 572.860571][T23384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 572.880159][T23384] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 572.888560][T23384] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 572.896517][T23384] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 572.904474][T23384] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 572.912431][T23384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.920386][T23384] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:02 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 26) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 573.117882][ T8531] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 573.248329][ T8269] usb 3-1: new high-speed USB device number 126 using dummy_hcd 03:42:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 573.290248][T23406] FAULT_INJECTION: forcing a failure. [ 573.290248][T23406] name failslab, interval 1, probability 0, space 0, times 0 [ 573.305255][T23406] CPU: 0 PID: 23406 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 573.314058][T23406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.324132][T23406] Call Trace: [ 573.327457][T23406] dump_stack_lvl+0x201/0x2d8 [ 573.332162][T23406] ? show_regs_print_info+0x12/0x12 [ 573.337381][T23406] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 573.343566][T23406] should_fail+0x384/0x4b0 [ 573.348000][T23406] ? alloc_skb_with_frags+0xab/0x660 [ 573.353298][T23406] should_failslab+0x5/0x20 [ 573.357817][T23406] __kmalloc_node_track_caller+0x97/0x3e0 [ 573.363549][T23406] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 573.369368][T23406] ? kmem_cache_alloc_node+0x250/0x340 [ 573.374845][T23406] ? __alloc_skb+0xd8/0x580 [ 573.379369][T23406] ? alloc_skb_with_frags+0xab/0x660 [ 573.384671][T23406] __alloc_skb+0x127/0x580 [ 573.389193][T23406] alloc_skb_with_frags+0xab/0x660 [ 573.394339][T23406] sock_alloc_send_pskb+0x928/0xa60 [ 573.399575][T23406] ? sock_kzfree_s+0x50/0x50 [ 573.404185][T23406] ? rcu_read_lock_sched_held+0x89/0x130 [ 573.409830][T23406] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 573.415828][T23406] __ip_append_data+0x2378/0x37c0 [ 573.420965][T23406] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 573.426962][T23406] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 573.431833][T23406] ? rcu_lock_release+0x9/0x20 [ 573.436594][T23406] ? ip_setup_cork+0x840/0x840 [ 573.441379][T23406] ? ipv4_mtu+0x28a/0x380 [ 573.445703][T23406] ? ip_setup_cork+0x479/0x840 [ 573.450460][T23406] ip_make_skb+0x1d3/0x480 [ 573.454874][T23406] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 573.459731][T23406] ? ip_flush_pending_frames+0x260/0x260 [ 573.465377][T23406] udp_sendmsg+0x2397/0x34f0 [ 573.469982][T23406] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 573.474825][T23406] ? udp_cmsg_send+0x340/0x340 [ 573.479585][T23406] ? rcu_read_lock_sched_held+0x89/0x130 [ 573.485229][T23406] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 573.491203][T23406] udpv6_sendmsg+0xaaa/0x35f0 [ 573.495886][T23406] ? xfrm6_policy_check+0x590/0x590 [ 573.501085][T23406] ? __schedule+0xb7a/0x1460 [ 573.505678][T23406] ? smack_socket_sendmsg+0x16e/0x530 [ 573.511044][T23406] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 573.517449][T23406] ? tomoyo_socket_bind_permission+0x360/0x360 [ 573.523594][T23406] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 573.529756][T23406] ? sock_rps_record_flow+0x12/0x370 [ 573.535030][T23406] ? inet_send_prepare+0x55/0x250 [ 573.540043][T23406] ? inet6_compat_ioctl+0x560/0x560 [ 573.545229][T23406] ____sys_sendmsg+0x5b9/0x910 [ 573.549992][T23406] ? __sys_sendmsg_sock+0x30/0x30 [ 573.555016][T23406] __sys_sendmmsg+0x57e/0x800 [ 573.559694][T23406] ? __ia32_sys_sendmsg+0x90/0x90 [ 573.564701][T23406] ? rcu_read_lock_sched_held+0x89/0x130 [ 573.570352][T23406] ? rcu_read_lock_sched_held+0x89/0x130 [ 573.575988][T23406] ? print_irqtrace_events+0x220/0x220 [ 573.581444][T23406] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 573.587593][T23406] __x64_sys_sendmmsg+0x9c/0xb0 [ 573.592433][T23406] do_syscall_64+0x44/0xd0 [ 573.596840][T23406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 573.602744][T23406] RIP: 0033:0x7f4fb6455a39 [ 573.607149][T23406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 573.626741][T23406] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 03:42:03 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100"], 0x0) [ 573.635145][T23406] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 573.643105][T23406] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 573.651062][T23406] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 573.659032][T23406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.666991][T23406] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 573.681165][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd 03:42:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:03 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 27) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 573.868816][ T8531] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 573.898068][ T8531] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 573.916458][ T8531] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.931355][ T8531] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 573.941164][ T8531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.957988][T23422] FAULT_INJECTION: forcing a failure. [ 573.957988][T23422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.973413][ T8531] usb 1-1: config 0 descriptor?? [ 573.978852][T23422] CPU: 1 PID: 23422 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 573.987628][T23422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.997689][T23422] Call Trace: [ 574.000980][T23422] dump_stack_lvl+0x201/0x2d8 [ 574.005677][T23422] ? show_regs_print_info+0x12/0x12 [ 574.010899][T23422] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 574.016630][T23422] ? __might_fault+0xb8/0x110 [ 574.021327][T23422] ? rcu_read_lock_sched_held+0x89/0x130 [ 574.026978][T23422] should_fail+0x384/0x4b0 [ 574.031415][T23422] _copy_from_user+0x2d/0x170 [ 574.036110][T23422] __copy_msghdr_from_user+0xaf/0x730 [ 574.041505][T23422] ? __ia32_sys_shutdown+0x60/0x60 [ 574.046647][T23422] __sys_sendmmsg+0x3b7/0x800 [ 574.047867][ T8361] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 574.051347][T23422] ? __ia32_sys_sendmsg+0x90/0x90 [ 574.051419][T23422] ? rcu_read_lock_sched_held+0x89/0x130 [ 574.069601][T23422] ? __lock_acquire+0x2b00/0x2b00 [ 574.074652][T23422] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 574.080643][T23422] ? print_irqtrace_events+0x220/0x220 [ 574.086107][T23422] ? vtime_user_exit+0x2b2/0x3e0 [ 574.091058][T23422] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 574.097057][T23422] __x64_sys_sendmmsg+0x9c/0xb0 [ 574.101931][T23422] do_syscall_64+0x44/0xd0 [ 574.106358][T23422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 574.112259][T23422] RIP: 0033:0x7f4fb6455a39 [ 574.116681][T23422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 574.136291][T23422] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 574.144715][T23422] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 574.152694][T23422] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 574.160671][T23422] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 574.168649][T23422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.176626][T23422] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 574.200629][ T8531] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) 03:42:03 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x7ffff000, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x11}], 0x400000000000085, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 574.225782][ T8531] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 574.258339][ T8269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.285359][ T8269] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.294932][ T31] usb 2-1: device descriptor read/all, error -71 [ 574.332368][ T8269] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 574.343249][ T8269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.355528][ T8269] usb 3-1: config 0 descriptor?? [ 574.428206][ T8361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.460804][ T8269] usb 1-1: USB disconnect, device number 125 [ 574.466627][ T8361] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.483360][ T8269] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 574.492309][ T8361] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 574.534675][ T8361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.546740][ T8361] usb 5-1: config 0 descriptor?? [ 574.643516][ T8361] usb 3-1: USB disconnect, device number 126 [ 574.668320][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 574.794783][ T8269] usb 5-1: USB disconnect, device number 58 [ 575.028308][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 575.039264][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 575.052431][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 575.067439][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 575.085848][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.096394][ T31] usb 2-1: config 0 descriptor?? 03:42:04 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:04 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 575.149721][ T31] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 575.162047][ T31] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:42:04 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2243c0, 0x0, 0x2}, 0x18) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x4, 0x3423}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x24, 0x49, 0x400, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x8, 0x0, r5, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5b386a262833ca2b}, 0x800) read$char_usb(r2, &(0x7f0000000140)=""/68, 0x44) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) [ 575.279680][T23482] FAULT_INJECTION: forcing a failure. [ 575.279680][T23482] name failslab, interval 1, probability 0, space 0, times 0 [ 575.312128][T23482] CPU: 1 PID: 23482 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 575.320926][T23482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.330990][T23482] Call Trace: [ 575.334287][T23482] dump_stack_lvl+0x201/0x2d8 [ 575.338984][T23482] ? show_regs_print_info+0x12/0x12 [ 575.344214][T23482] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 575.349954][T23482] ? __might_sleep+0x110/0x110 [ 575.354733][T23482] should_fail+0x384/0x4b0 [ 575.359163][T23482] ? __alloc_skb+0xd8/0x580 [ 575.361409][ T8361] usb 2-1: USB disconnect, device number 28 [ 575.363667][T23482] should_failslab+0x5/0x20 [ 575.363692][T23482] kmem_cache_alloc_node+0x77/0x340 [ 575.363725][T23482] __alloc_skb+0xd8/0x580 [ 575.383780][T23482] ? __lock_acquire+0x1382/0x2b00 [ 575.388819][T23482] alloc_skb_with_frags+0xab/0x660 [ 575.393956][T23482] sock_alloc_send_pskb+0x928/0xa60 [ 575.399185][T23482] ? sock_kzfree_s+0x50/0x50 [ 575.403796][T23482] ? rcu_read_lock_sched_held+0x89/0x130 [ 575.409439][T23482] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 575.415437][T23482] __ip_append_data+0x2378/0x37c0 [ 575.420493][T23482] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 575.426626][T23482] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 575.431504][T23482] ? rcu_lock_release+0x9/0x20 [ 575.436279][T23482] ? ip_setup_cork+0x840/0x840 [ 575.441049][T23482] ? ipv4_mtu+0x28a/0x380 [ 575.445394][T23482] ? ip_setup_cork+0x479/0x840 [ 575.450175][T23482] ip_make_skb+0x1d3/0x480 [ 575.454614][T23482] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 575.459476][T23482] ? ip_flush_pending_frames+0x260/0x260 [ 575.465125][T23482] udp_sendmsg+0x2397/0x34f0 [ 575.469719][T23482] ? rcu_read_lock_sched_held+0x89/0x130 [ 575.475335][T23482] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 575.480208][T23482] ? udp_cmsg_send+0x340/0x340 [ 575.485231][T23482] ? mark_lock+0x191/0x1e00 [ 575.489746][T23482] ? __print_lock_name+0x1d0/0x1d0 [ 575.494854][T23482] udpv6_sendmsg+0xaaa/0x35f0 [ 575.499539][T23482] ? xfrm6_policy_check+0x590/0x590 [ 575.504732][T23482] ? smack_socket_sendmsg+0x16e/0x530 [ 575.510094][T23482] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 575.516500][T23482] ? tomoyo_socket_bind_permission+0x360/0x360 [ 575.522641][T23482] ? __might_fault+0xb8/0x110 [ 575.527317][T23482] ? rcu_read_lock_sched_held+0x89/0x130 [ 575.532953][T23482] ? sock_rps_record_flow+0x12/0x370 [ 575.538238][T23482] ? inet_send_prepare+0x55/0x250 [ 575.543254][T23482] ? inet6_compat_ioctl+0x560/0x560 [ 575.548459][T23482] ____sys_sendmsg+0x5b9/0x910 [ 575.553224][T23482] ? __sys_sendmsg_sock+0x30/0x30 [ 575.558259][T23482] __sys_sendmmsg+0x57e/0x800 [ 575.562927][T23482] ? __ia32_sys_sendmsg+0x90/0x90 [ 575.567991][T23482] ? rcu_read_lock_sched_held+0x89/0x130 [ 575.573663][T23482] ? __lock_acquire+0x2b00/0x2b00 [ 575.578695][T23482] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 575.584659][T23482] ? print_irqtrace_events+0x220/0x220 [ 575.590101][T23482] ? vtime_user_exit+0x2b2/0x3e0 [ 575.595036][T23482] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 575.601022][T23482] __x64_sys_sendmmsg+0x9c/0xb0 [ 575.605861][T23482] do_syscall_64+0x44/0xd0 [ 575.610268][T23482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 575.616159][T23482] RIP: 0033:0x7f4fb6455a39 [ 575.620573][T23482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 575.640189][T23482] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 575.648594][T23482] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 575.656550][T23482] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 575.664512][T23482] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 575.672466][T23482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:42:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:05 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100"], 0x0) [ 575.680442][T23482] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 575.709239][ T8361] ldusb 2-1:0.0: LD USB Device #0 now disconnected 03:42:05 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 29) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 575.847723][ T8269] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 575.858046][ T7808] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 575.926529][T23510] FAULT_INJECTION: forcing a failure. [ 575.926529][T23510] name failslab, interval 1, probability 0, space 0, times 0 [ 575.957427][T23510] CPU: 0 PID: 23510 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 575.966206][T23510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.976339][T23510] Call Trace: [ 575.979611][T23510] dump_stack_lvl+0x201/0x2d8 [ 575.984285][T23510] ? show_regs_print_info+0x12/0x12 [ 575.989473][T23510] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 575.995647][T23510] should_fail+0x384/0x4b0 [ 576.000053][T23510] ? alloc_skb_with_frags+0xab/0x660 [ 576.005347][T23510] should_failslab+0x5/0x20 [ 576.009840][T23510] __kmalloc_node_track_caller+0x97/0x3e0 [ 576.015548][T23510] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 576.021357][T23510] ? kmem_cache_alloc_node+0x250/0x340 [ 576.026904][T23510] ? __alloc_skb+0xd8/0x580 [ 576.031404][T23510] ? alloc_skb_with_frags+0xab/0x660 [ 576.036675][T23510] __alloc_skb+0x127/0x580 [ 576.041077][T23510] ? __lock_acquire+0x1382/0x2b00 [ 576.046092][T23510] alloc_skb_with_frags+0xab/0x660 [ 576.051201][T23510] sock_alloc_send_pskb+0x928/0xa60 [ 576.056400][T23510] ? sock_kzfree_s+0x50/0x50 [ 576.060987][T23510] ? rcu_read_lock_sched_held+0x89/0x130 [ 576.066627][T23510] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 576.072599][T23510] __ip_append_data+0x2378/0x37c0 [ 576.077641][T23510] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 576.082492][T23510] ? ip_setup_cork+0x840/0x840 [ 576.087241][T23510] ? ipv4_mtu+0x28a/0x380 [ 576.091559][T23510] ? ip_setup_cork+0x479/0x840 [ 576.096314][T23510] ip_make_skb+0x1d3/0x480 [ 576.100725][T23510] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 576.105568][T23510] ? ip_flush_pending_frames+0x260/0x260 [ 576.111290][T23510] udp_sendmsg+0x2397/0x34f0 [ 576.115890][T23510] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 576.120733][T23510] ? udp_cmsg_send+0x340/0x340 [ 576.125490][T23510] ? __print_lock_name+0x1d0/0x1d0 [ 576.130609][T23510] ? mark_lock+0x191/0x1e00 [ 576.135102][T23510] ? __print_lock_name+0x1d0/0x1d0 [ 576.140208][T23510] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 576.146178][T23510] udpv6_sendmsg+0xaaa/0x35f0 [ 576.150857][T23510] ? xfrm6_policy_check+0x590/0x590 [ 576.156058][T23510] ? smack_socket_sendmsg+0x16e/0x530 [ 576.161424][T23510] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 576.167842][T23510] ? tomoyo_socket_bind_permission+0x360/0x360 [ 576.173991][T23510] ? sock_rps_record_flow+0x12/0x370 [ 576.179264][T23510] ? inet_send_prepare+0x55/0x250 [ 576.184282][T23510] ? inet6_compat_ioctl+0x560/0x560 [ 576.189469][T23510] ____sys_sendmsg+0x5b9/0x910 [ 576.194232][T23510] ? __sys_sendmsg_sock+0x30/0x30 [ 576.199255][T23510] __sys_sendmmsg+0x57e/0x800 [ 576.203927][T23510] ? __ia32_sys_sendmsg+0x90/0x90 [ 576.208940][T23510] ? rcu_read_lock_sched_held+0x89/0x130 [ 576.214594][T23510] ? rcu_read_lock_sched_held+0x89/0x130 [ 576.220235][T23510] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 576.226223][T23510] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 576.232362][T23510] ? lockdep_hardirqs_on+0x95/0x140 [ 576.237552][T23510] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 576.243700][T23510] __x64_sys_sendmmsg+0x9c/0xb0 [ 576.248641][T23510] do_syscall_64+0x44/0xd0 [ 576.253048][T23510] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 576.258924][T23510] RIP: 0033:0x7f4fb6455a39 [ 576.263344][T23510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.282937][T23510] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 576.291343][T23510] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 576.299301][T23510] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 576.307258][T23510] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.315301][T23510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:42:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 576.323268][T23510] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 576.421139][ T8141] usb 5-1: new high-speed USB device number 59 using dummy_hcd 03:42:06 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 30) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 576.568245][ T8269] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 576.590136][T23522] FAULT_INJECTION: forcing a failure. [ 576.590136][T23522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.606242][T23522] CPU: 0 PID: 23522 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 576.608202][ T8269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 576.615020][T23522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.615035][T23522] Call Trace: [ 576.615045][T23522] dump_stack_lvl+0x201/0x2d8 [ 576.615069][T23522] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 576.615094][T23522] ? show_regs_print_info+0x12/0x12 [ 576.655203][T23522] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 576.661376][T23522] ? wake_up_klogd+0xb2/0xf0 [ 576.665993][T23522] should_fail+0x384/0x4b0 [ 576.670433][T23522] _copy_from_user+0x2d/0x170 [ 576.675129][T23522] __copy_msghdr_from_user+0xaf/0x730 [ 576.675755][ T8269] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.680598][T23522] ? __ia32_sys_shutdown+0x60/0x60 [ 576.680645][T23522] __sys_sendmmsg+0x3b7/0x800 [ 576.680677][T23522] ? __ia32_sys_sendmsg+0x90/0x90 [ 576.680740][T23522] ? rcu_read_lock_sched_held+0x89/0x130 [ 576.702273][ T8269] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 576.703340][T23522] ? __lock_acquire+0x2b00/0x2b00 [ 576.703379][T23522] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 576.711477][ T8269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.713999][T23522] ? print_irqtrace_events+0x220/0x220 [ 576.714020][T23522] ? vtime_user_exit+0x2b2/0x3e0 [ 576.714047][T23522] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 576.751839][ T8269] usb 1-1: config 0 descriptor?? [ 576.752363][T23522] __x64_sys_sendmmsg+0x9c/0xb0 [ 576.768104][T23522] do_syscall_64+0x44/0xd0 [ 576.772540][T23522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 576.778441][T23522] RIP: 0033:0x7f4fb6455a39 [ 576.782864][T23522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.802474][T23522] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 576.810898][T23522] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 576.818877][T23522] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 576.826857][T23522] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.834833][T23522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.842808][T23522] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 576.869184][ T8269] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 576.877727][ T7808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.906442][ T8269] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 576.908226][ T7808] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.940010][ T7808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 576.951461][ T7808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.962946][ T7808] usb 3-1: config 0 descriptor?? [ 577.047801][ T8526] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 577.055810][ T8141] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.070155][ T8141] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.098130][ T8141] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 577.107179][ T8141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.134101][ T7808] usb 1-1: USB disconnect, device number 126 [ 577.149854][ T8141] usb 5-1: config 0 descriptor?? [ 577.166493][ T7808] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 577.221259][ T8361] usb 3-1: USB disconnect, device number 127 [ 577.432072][ T7808] usb 5-1: USB disconnect, device number 59 03:42:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 577.547791][ T8526] usb 2-1: unable to read config index 0 descriptor/all [ 577.557597][ T8526] usb 2-1: can't read configurations, error -71 03:42:07 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:07 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a1070000000000000000000001190222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x20, 0x5, 0x57, {0x57, 0x23, "7c01e094ea848e2e8dd3dd19e45871a8a00396ee9c31e7db0ff7fcc089948c7e611ab15fa9127649efcb0a80f8e2703cdba3961a3c9cab4cb94c10b6443978502bddd3c3f5a2f57dfe3e00c493b03bddc3c81eccda"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000140)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x2, 0x7, 0x3ff}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x5, 0x3ff}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x18, 0xaf, 0x40, "6e48dd9a", "66aca9e3"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd9, 0x88, 0xc2, 0x4, 0xff, 0x101, 0x6}}}, &(0x7f0000000640)={0x84, &(0x7f0000000240)={0x0, 0x11, 0x34, "8766f527ae3ccdffa7a5d07747245b60ba52fc2d8c606147e01dc57967cc6756cabbec545186d60bfff245c8883dad20ef5ce14a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3e}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x4}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x4, 0x40, [0xf0f0]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0xfeff}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000400)={0x40, 0xb, 0x2, 'h\t'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x13, 0x6, @random="bca378bc8283"}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "378c"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x1c, 0x1}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0xd3}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 03:42:07 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:07 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2243c0, 0x0, 0x2}, 0x18) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x4, 0x3423}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x24, 0x49, 0x400, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x8, 0x0, r5, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5b386a262833ca2b}, 0x800) read$char_usb(r2, &(0x7f0000000140)=""/68, 0x44) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) [ 577.864378][T23577] FAULT_INJECTION: forcing a failure. [ 577.864378][T23577] name failslab, interval 1, probability 0, space 0, times 0 [ 577.892797][T23577] CPU: 0 PID: 23577 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 577.901589][T23577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.911651][T23577] Call Trace: [ 577.914926][T23577] dump_stack_lvl+0x201/0x2d8 [ 577.919601][T23577] ? show_regs_print_info+0x12/0x12 [ 577.924789][T23577] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 577.930502][T23577] ? __might_sleep+0x110/0x110 [ 577.935261][T23577] should_fail+0x384/0x4b0 [ 577.939686][T23577] ? __alloc_skb+0xd8/0x580 [ 577.944266][T23577] should_failslab+0x5/0x20 [ 577.948761][T23577] kmem_cache_alloc_node+0x77/0x340 [ 577.953946][T23577] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 577.959922][T23577] __alloc_skb+0xd8/0x580 [ 577.964242][T23577] ? __lock_acquire+0x1382/0x2b00 [ 577.969271][T23577] alloc_skb_with_frags+0xab/0x660 [ 577.974386][T23577] sock_alloc_send_pskb+0x928/0xa60 [ 577.979594][T23577] ? sock_kzfree_s+0x50/0x50 [ 577.984177][T23577] ? rcu_read_lock_sched_held+0x89/0x130 [ 577.989800][T23577] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 577.995781][T23577] __ip_append_data+0x2378/0x37c0 [ 578.000807][T23577] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 578.006783][T23577] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 578.011801][T23577] ? rcu_lock_release+0x9/0x20 [ 578.016553][T23577] ? ip_setup_cork+0x840/0x840 [ 578.021305][T23577] ? ipv4_mtu+0x28a/0x380 [ 578.025640][T23577] ? ip_setup_cork+0x479/0x840 [ 578.030407][T23577] ip_make_skb+0x1d3/0x480 [ 578.034838][T23577] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 578.039694][T23577] ? ip_flush_pending_frames+0x260/0x260 [ 578.045333][T23577] udp_sendmsg+0x2397/0x34f0 [ 578.049933][T23577] ? rcu_read_lock_sched_held+0x89/0x130 [ 578.055568][T23577] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 578.060415][T23577] ? udp_cmsg_send+0x340/0x340 [ 578.065193][T23577] ? mark_lock+0x191/0x1e00 [ 578.069690][T23577] ? __print_lock_name+0x1d0/0x1d0 [ 578.074814][T23577] ? udp_sendmsg+0x7ec/0x34f0 [ 578.079483][T23577] udpv6_sendmsg+0xaaa/0x35f0 [ 578.084151][T23577] ? lockdep_hardirqs_on+0x95/0x140 [ 578.089350][T23577] ? xfrm6_policy_check+0x590/0x590 [ 578.094553][T23577] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 578.100528][T23577] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 578.106668][T23577] ? lockdep_hardirqs_on+0x95/0x140 [ 578.111855][T23577] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 578.117995][T23577] ? sock_rps_record_flow+0x12/0x370 [ 578.123273][T23577] ? inet_send_prepare+0x55/0x250 [ 578.128312][T23577] ? inet6_compat_ioctl+0x560/0x560 [ 578.133511][T23577] ____sys_sendmsg+0x5b9/0x910 [ 578.138270][T23577] ? __sys_sendmsg_sock+0x30/0x30 [ 578.143306][T23577] __sys_sendmmsg+0x57e/0x800 [ 578.147981][T23577] ? __ia32_sys_sendmsg+0x90/0x90 [ 578.153025][T23577] ? rcu_read_lock_sched_held+0x89/0x130 [ 578.158666][T23577] ? __lock_acquire+0x2b00/0x2b00 [ 578.163687][T23577] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 578.169653][T23577] ? print_irqtrace_events+0x220/0x220 [ 578.175097][T23577] ? vtime_user_exit+0x2b2/0x3e0 [ 578.180027][T23577] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 578.186000][T23577] __x64_sys_sendmmsg+0x9c/0xb0 [ 578.190859][T23577] do_syscall_64+0x44/0xd0 [ 578.195266][T23577] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 578.201157][T23577] RIP: 0033:0x7f4fb6455a39 [ 578.205565][T23577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.225156][T23577] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 578.233570][T23577] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 578.241528][T23577] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 578.249497][T23577] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.257462][T23577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.265423][T23577] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:07 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) 03:42:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:07 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 578.427666][ T8269] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 578.435287][ T31] usb 1-1: new high-speed USB device number 127 using dummy_hcd 03:42:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200000e000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 578.540523][T23596] FAULT_INJECTION: forcing a failure. [ 578.540523][T23596] name failslab, interval 1, probability 0, space 0, times 0 [ 578.573532][T23596] CPU: 0 PID: 23596 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 578.582330][T23596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.592405][T23596] Call Trace: [ 578.595689][T23596] dump_stack_lvl+0x201/0x2d8 [ 578.600378][T23596] ? show_regs_print_info+0x12/0x12 [ 578.605576][T23596] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 578.611298][T23596] ? __might_sleep+0x110/0x110 [ 578.616058][T23596] should_fail+0x384/0x4b0 [ 578.620475][T23596] ? alloc_skb_with_frags+0xab/0x660 [ 578.625750][T23596] should_failslab+0x5/0x20 [ 578.630242][T23596] __kmalloc_node_track_caller+0x97/0x3e0 [ 578.635949][T23596] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 578.641749][T23596] ? kmem_cache_alloc_node+0x250/0x340 [ 578.647194][T23596] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 578.653160][T23596] ? __alloc_skb+0xd8/0x580 [ 578.657652][T23596] ? alloc_skb_with_frags+0xab/0x660 [ 578.662927][T23596] __alloc_skb+0x127/0x580 [ 578.667507][T23596] ? __lock_acquire+0x1382/0x2b00 [ 578.672523][T23596] alloc_skb_with_frags+0xab/0x660 [ 578.677630][T23596] sock_alloc_send_pskb+0x928/0xa60 [ 578.682828][T23596] ? sock_kzfree_s+0x50/0x50 [ 578.687415][T23596] ? rcu_read_lock_sched_held+0x89/0x130 [ 578.693048][T23596] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 578.699021][T23596] __ip_append_data+0x2378/0x37c0 [ 578.704060][T23596] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 578.710039][T23596] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 578.714885][T23596] ? rcu_lock_release+0x9/0x20 [ 578.719650][T23596] ? ip_setup_cork+0x840/0x840 [ 578.724401][T23596] ? ipv4_mtu+0x28a/0x380 [ 578.728721][T23596] ? ip_setup_cork+0x479/0x840 [ 578.733567][T23596] ip_make_skb+0x1d3/0x480 [ 578.737984][T23596] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 578.742822][T23596] ? ip_flush_pending_frames+0x260/0x260 [ 578.748456][T23596] udp_sendmsg+0x2397/0x34f0 [ 578.753056][T23596] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 578.757904][T23596] ? udp_cmsg_send+0x340/0x340 [ 578.762667][T23596] ? mark_lock+0x191/0x1e00 [ 578.767163][T23596] ? __print_lock_name+0x1d0/0x1d0 [ 578.772266][T23596] ? udpv6_sendmsg+0x246/0x35f0 [ 578.777103][T23596] ? udpv6_sendmsg+0x25c/0x35f0 [ 578.781951][T23596] udpv6_sendmsg+0xaaa/0x35f0 [ 578.786637][T23596] ? xfrm6_policy_check+0x590/0x590 [ 578.791834][T23596] ? print_irqtrace_events+0x220/0x220 [ 578.797276][T23596] ? smack_socket_sendmsg+0x16e/0x530 [ 578.802639][T23596] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 578.811041][T23596] ? tomoyo_socket_bind_permission+0x360/0x360 [ 578.817184][T23596] ? sock_rps_record_flow+0x12/0x370 [ 578.822456][T23596] ? inet_send_prepare+0x55/0x250 [ 578.827470][T23596] ? inet6_compat_ioctl+0x560/0x560 [ 578.832663][T23596] ____sys_sendmsg+0x5b9/0x910 [ 578.837421][T23596] ? __sys_sendmsg_sock+0x30/0x30 [ 578.842443][T23596] __sys_sendmmsg+0x57e/0x800 [ 578.847116][T23596] ? __ia32_sys_sendmsg+0x90/0x90 [ 578.852126][T23596] ? rcu_read_lock_sched_held+0x89/0x130 [ 578.857774][T23596] ? rcu_read_lock_sched_held+0x89/0x130 [ 578.863411][T23596] ? print_irqtrace_events+0x220/0x220 [ 578.868867][T23596] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 578.875015][T23596] __x64_sys_sendmmsg+0x9c/0xb0 [ 578.879856][T23596] do_syscall_64+0x44/0xd0 [ 578.884263][T23596] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 578.890142][T23596] RIP: 0033:0x7f4fb6455a39 [ 578.894546][T23596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.914135][T23596] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 578.922626][T23596] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 578.930579][T23596] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 578.938535][T23596] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.946488][T23596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.954441][T23596] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 578.988960][ T8526] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 579.028227][ T8531] usb 5-1: new high-speed USB device number 60 using dummy_hcd 03:42:08 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 33) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 579.141701][ T8269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.152387][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 579.175506][ T8269] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.185357][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 579.188857][T23605] FAULT_INJECTION: forcing a failure. [ 579.188857][T23605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.215455][ T8526] usb 2-1: device descriptor read/64, error 18 [ 579.225938][ T8269] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 579.243420][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.270364][T23605] CPU: 0 PID: 23605 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 579.272084][ T8269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.279148][T23605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.279165][T23605] Call Trace: [ 579.279174][T23605] dump_stack_lvl+0x201/0x2d8 [ 579.279204][T23605] ? show_regs_print_info+0x12/0x12 [ 579.279225][T23605] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 579.279245][T23605] ? __might_fault+0xb8/0x110 [ 579.279268][T23605] ? rcu_read_lock_sched_held+0x89/0x130 [ 579.279295][T23605] should_fail+0x384/0x4b0 [ 579.279320][T23605] _copy_from_user+0x2d/0x170 [ 579.279341][T23605] __copy_msghdr_from_user+0xaf/0x730 [ 579.279369][T23605] ? __ia32_sys_shutdown+0x60/0x60 [ 579.279408][T23605] __sys_sendmmsg+0x3b7/0x800 [ 579.279439][T23605] ? __ia32_sys_sendmsg+0x90/0x90 [ 579.279456][T23605] ? rcu_read_lock_sched_held+0x89/0x130 [ 579.279513][T23605] ? rcu_read_lock_sched_held+0x89/0x130 [ 579.306249][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 579.310600][T23605] ? print_irqtrace_events+0x220/0x220 [ 579.310646][T23605] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 579.310683][T23605] __x64_sys_sendmmsg+0x9c/0xb0 [ 579.310707][T23605] do_syscall_64+0x44/0xd0 [ 579.310735][T23605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 579.310754][T23605] RIP: 0033:0x7f4fb6455a39 [ 579.310770][T23605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 579.310785][T23605] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 579.310805][T23605] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 579.310818][T23605] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 579.451087][T23605] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.459080][T23605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.467048][T23605] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 579.478079][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.489237][ T8269] usb 3-1: config 0 descriptor?? 03:42:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000010000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 579.498246][ T31] usb 1-1: config 0 descriptor?? [ 579.509195][ T8526] usb usb2-port1: attempt power cycle [ 579.540107][ T31] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 579.569590][ T31] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 579.587845][ T8531] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.615404][ T8531] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.662263][ T8531] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 579.681769][ T8531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.708868][ T8531] usb 5-1: config 0 descriptor?? [ 579.744337][ T31] usb 3-1: USB disconnect, device number 2 [ 579.790965][ T7808] usb 1-1: USB disconnect, device number 127 [ 579.806032][ T7808] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 579.947638][ T8526] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 579.978070][ T8361] usb 5-1: USB disconnect, device number 60 [ 580.077696][ T8526] usb 2-1: Invalid ep0 maxpacket: 0 03:42:09 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 580.227435][ T8526] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 580.327839][ T8526] usb 2-1: Invalid ep0 maxpacket: 0 [ 580.333506][ T8526] usb usb2-port1: unable to enumerate USB device [ 580.557552][ T8361] usb 3-1: new high-speed USB device number 3 using dummy_hcd 03:42:10 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x1017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0xbac}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x8, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x8}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x4, 0x9, 0xfe, 0xff, 0x6}, 0x11, &(0x7f0000000080)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x66, 0x0, 0x1000, 0xf00, 0x6}]}, 0x6, [{0xf6, &(0x7f0000000100)=@string={0xf6, 0x3, "d72c6727f9c258e9364c19047851ec9d6c572fb6bc0c083e8f27fcbff010779b736d183df3e00eff24fe8a0bf319c54ffc3a1d34f3a49a5547bc82bbccd23863fb20a7c20516be0b0d8d3f80230c17bda63864e3b18896b94421f42bdb3165e4043c4c6eebe553bcad95f7b1e1bf76f927ccf6f6fb79a62664f6d5885179a74e63a198d68a1f015130415f7ac0f638fe26bda8fa6ebdc01dcde7a6dbbc73dc1085c5af1de212021cd6ec37405c4a9e73cbb6b9a070c7b3ccd5b6577139392891ef35c6e825eb3c9ef405837b04e4495f3f6a0f6df9b6c2b8a5d13c26b0f4103f31e02aecbb38103619900bbad0d794d0bb5987a5"}}, {0xf1, &(0x7f0000000200)=@string={0xf1, 0x3, "b5cdf683e6a5f1ba647bbe5386445f8c1cabc54798cc5676a2e7537b4a492ff5353e5fcd018e9abd5bb311002420300d6da768937c81c515f5a0410c4073a48d7320e5b98d2782a6df358432594c3ed185bff5d60f908072b171c917575e6ef42a2a8175c4b8e558d0750fd13fb914a38dc915d76b24da1ad1f351d954ee15aa0d3b572921056cdde4706eb27efc6d072b45a982b5b13446ebc8ebcc7760b57c092e3b444450b4e89c5ecefd99bf23548c8807a53f90904cd4628111fc47e54232243be20bc45d7bcd771bfaabca3505044c575e8d1d95a0724394d3f8de03105973ceeea7f3696192236d1387e522"}}, {0x63, &(0x7f0000000300)=@string={0x63, 0x3, "0b83414971e90eab44ab6410b27e0e7ba90e36d8f51da5763ba4e1d40659c370108e29666ea03aef105e0c9c0ea9e0ca436e61d51334c7b1d660d95e9b14bcf31f73e4c86bfcf37a394e9b0c94fd79e0745c54e6c5f71fc7868b80cbb280c0664f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x415}}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 03:42:10 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 34) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:10 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500e400010902220001000000000904"], 0x0) 03:42:10 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) 03:42:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 580.891271][T23669] FAULT_INJECTION: forcing a failure. [ 580.891271][T23669] name failslab, interval 1, probability 0, space 0, times 0 [ 580.914379][T23669] CPU: 0 PID: 23669 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 580.923162][T23669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.933209][T23669] Call Trace: [ 580.936476][T23669] dump_stack_lvl+0x201/0x2d8 [ 580.941151][T23669] ? show_regs_print_info+0x12/0x12 [ 580.946339][T23669] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 580.952050][T23669] ? __might_sleep+0x110/0x110 [ 580.956806][T23669] should_fail+0x384/0x4b0 [ 580.961301][T23669] ? __alloc_skb+0xd8/0x580 [ 580.965795][T23669] should_failslab+0x5/0x20 [ 580.970286][T23669] kmem_cache_alloc_node+0x77/0x340 [ 580.975469][T23669] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 580.981443][T23669] __alloc_skb+0xd8/0x580 [ 580.985757][T23669] ? __lock_acquire+0x1382/0x2b00 [ 580.990768][T23669] alloc_skb_with_frags+0xab/0x660 [ 580.995880][T23669] sock_alloc_send_pskb+0x928/0xa60 [ 581.001076][T23669] ? sock_kzfree_s+0x50/0x50 [ 581.005657][T23669] ? rcu_read_lock_sched_held+0x89/0x130 [ 581.011273][T23669] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 581.017248][T23669] __ip_append_data+0x2378/0x37c0 [ 581.022272][T23669] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 581.028254][T23669] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 581.033102][T23669] ? rcu_lock_release+0x9/0x20 [ 581.037848][T23669] ? ip_setup_cork+0x840/0x840 [ 581.042593][T23669] ? ipv4_mtu+0x28a/0x380 [ 581.046910][T23669] ? ip_setup_cork+0x479/0x840 [ 581.051668][T23669] ip_make_skb+0x1d3/0x480 [ 581.056075][T23669] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 581.060914][T23669] ? ip_flush_pending_frames+0x260/0x260 [ 581.066547][T23669] udp_sendmsg+0x2397/0x34f0 [ 581.071149][T23669] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 581.075985][T23669] ? udp_cmsg_send+0x340/0x340 [ 581.080743][T23669] ? mark_lock+0x191/0x1e00 [ 581.085253][T23669] ? __print_lock_name+0x1d0/0x1d0 [ 581.090368][T23669] ? udpv6_sendmsg+0x5d4/0x35f0 [ 581.095203][T23669] ? udpv6_sendmsg+0x96d/0x35f0 [ 581.100039][T23669] udpv6_sendmsg+0xaaa/0x35f0 [ 581.104719][T23669] ? xfrm6_policy_check+0x590/0x590 [ 581.109918][T23669] ? smack_socket_sendmsg+0x16e/0x530 [ 581.115284][T23669] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 581.121688][T23669] ? tomoyo_socket_bind_permission+0x360/0x360 [ 581.127825][T23669] ? __might_fault+0xb8/0x110 [ 581.132492][T23669] ? rcu_read_lock_sched_held+0x89/0x130 [ 581.138106][T23669] ? sock_rps_record_flow+0x12/0x370 [ 581.143377][T23669] ? inet_send_prepare+0x55/0x250 [ 581.148385][T23669] ? inet6_compat_ioctl+0x560/0x560 [ 581.153566][T23669] ____sys_sendmsg+0x5b9/0x910 [ 581.158336][T23669] ? __sys_sendmsg_sock+0x30/0x30 [ 581.163357][T23669] __sys_sendmmsg+0x57e/0x800 [ 581.168029][T23669] ? __ia32_sys_sendmsg+0x90/0x90 [ 581.173035][T23669] ? rcu_read_lock_sched_held+0x89/0x130 [ 581.178682][T23669] ? rcu_read_lock_sched_held+0x89/0x130 [ 581.184318][T23669] ? __lock_acquire+0x2b00/0x2b00 [ 581.189335][T23669] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 581.195300][T23669] ? print_irqtrace_events+0x220/0x220 [ 581.200741][T23669] ? vtime_user_exit+0x2b2/0x3e0 [ 581.205667][T23669] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 581.211638][T23669] __x64_sys_sendmmsg+0x9c/0xb0 [ 581.216476][T23669] do_syscall_64+0x44/0xd0 [ 581.220877][T23669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 581.226753][T23669] RIP: 0033:0x7f4fb6455a39 [ 581.231156][T23669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 581.250745][T23669] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 581.259146][T23669] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 581.267098][T23669] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 581.275052][T23669] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 581.283005][T23669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.290957][T23669] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 581.317243][ T8361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 03:42:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 581.339163][ T8361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 03:42:11 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 35) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 581.394448][ T8361] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 581.428306][ T8361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.467437][ T8531] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 581.473991][ T8361] usb 3-1: config 0 descriptor?? 03:42:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 581.555728][ T8361] ldusb 3-1:0.0: Interrupt in endpoint not found [ 581.600585][T23685] FAULT_INJECTION: forcing a failure. [ 581.600585][T23685] name failslab, interval 1, probability 0, space 0, times 0 [ 581.617610][T23685] CPU: 0 PID: 23685 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 581.626389][T23685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.627257][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 581.636444][T23685] Call Trace: [ 581.636457][T23685] dump_stack_lvl+0x201/0x2d8 [ 581.636487][T23685] ? show_regs_print_info+0x12/0x12 [ 581.636511][T23685] ? wake_up_klogd+0xb2/0xf0 [ 581.661747][T23685] ? _printk+0xff/0x118 [ 581.665911][T23685] should_fail+0x384/0x4b0 [ 581.670322][T23685] ? alloc_skb_with_frags+0xab/0x660 [ 581.675596][T23685] should_failslab+0x5/0x20 [ 581.680094][T23685] __kmalloc_node_track_caller+0x97/0x3e0 [ 581.685801][T23685] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 581.691595][T23685] ? kmem_cache_alloc_node+0x250/0x340 [ 581.697040][T23685] ? __alloc_skb+0xd8/0x580 [ 581.701535][T23685] ? alloc_skb_with_frags+0xab/0x660 [ 581.706803][T23685] __alloc_skb+0x127/0x580 [ 581.711205][T23685] ? __lock_acquire+0x1382/0x2b00 [ 581.716226][T23685] alloc_skb_with_frags+0xab/0x660 [ 581.721330][T23685] sock_alloc_send_pskb+0x928/0xa60 [ 581.726540][T23685] ? sock_kzfree_s+0x50/0x50 [ 581.731119][T23685] ? rcu_read_lock_sched_held+0x89/0x130 [ 581.736738][T23685] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 581.742705][T23685] __ip_append_data+0x2378/0x37c0 [ 581.747733][T23685] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 581.753718][T23685] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 581.759865][T23685] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 581.764715][T23685] ? ip_setup_cork+0x151/0x840 [ 581.769468][T23685] ? ip_setup_cork+0x840/0x840 [ 581.774217][T23685] ? ipv4_mtu+0x28a/0x380 [ 581.778534][T23685] ? ip_setup_cork+0x479/0x840 [ 581.783287][T23685] ip_make_skb+0x1d3/0x480 [ 581.787697][T23685] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 581.792537][T23685] ? ip_flush_pending_frames+0x260/0x260 [ 581.798171][T23685] udp_sendmsg+0x2397/0x34f0 [ 581.802772][T23685] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 581.807616][T23685] ? udp_cmsg_send+0x340/0x340 [ 581.812379][T23685] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 581.818349][T23685] ? mark_lock+0x191/0x1e00 [ 581.822842][T23685] ? __print_lock_name+0x1d0/0x1d0 [ 581.827944][T23685] ? kasan_check_range+0x84/0x2f0 [ 581.833391][T23685] udpv6_sendmsg+0xaaa/0x35f0 [ 581.838072][T23685] ? xfrm6_policy_check+0x590/0x590 [ 581.843284][T23685] ? smack_socket_sendmsg+0x16e/0x530 [ 581.848644][T23685] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 581.855065][T23685] ? print_irqtrace_events+0x220/0x220 [ 581.860512][T23685] ? tomoyo_socket_bind_permission+0x360/0x360 [ 581.866657][T23685] ? sock_rps_record_flow+0x12/0x370 [ 581.871926][T23685] ? inet_send_prepare+0x55/0x250 [ 581.876935][T23685] ? inet6_compat_ioctl+0x560/0x560 [ 581.882122][T23685] ____sys_sendmsg+0x5b9/0x910 [ 581.886884][T23685] ? __sys_sendmsg_sock+0x30/0x30 [ 581.891906][T23685] __sys_sendmmsg+0x57e/0x800 [ 581.896577][T23685] ? __ia32_sys_sendmsg+0x90/0x90 [ 581.901583][T23685] ? rcu_read_lock_sched_held+0x89/0x130 [ 581.907234][T23685] ? rcu_read_lock_sched_held+0x89/0x130 [ 581.912872][T23685] ? print_irqtrace_events+0x220/0x220 [ 581.918323][T23685] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 581.924474][T23685] __x64_sys_sendmmsg+0x9c/0xb0 [ 581.929325][T23685] do_syscall_64+0x44/0xd0 [ 581.933729][T23685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 581.939607][T23685] RIP: 0033:0x7f4fb6455a39 [ 581.944010][T23685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 581.963597][T23685] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 581.971994][T23685] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 581.979951][T23685] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 581.987906][T23685] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 03:42:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 581.995860][T23685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.003819][T23685] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 582.024512][ T7808] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 582.046087][ T8361] usb 3-1: USB disconnect, device number 3 03:42:11 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 36) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 582.197704][ T8531] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.274885][T23702] FAULT_INJECTION: forcing a failure. [ 582.274885][T23702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.289611][T23702] CPU: 0 PID: 23702 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 582.298393][T23702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.308454][T23702] Call Trace: [ 582.311740][T23702] dump_stack_lvl+0x201/0x2d8 [ 582.316435][T23702] ? show_regs_print_info+0x12/0x12 [ 582.321643][T23702] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 582.327374][T23702] ? __might_fault+0xb8/0x110 [ 582.332065][T23702] ? rcu_read_lock_sched_held+0x89/0x130 [ 582.337717][T23702] should_fail+0x384/0x4b0 [ 582.342152][T23702] _copy_from_user+0x2d/0x170 [ 582.346840][T23702] __copy_msghdr_from_user+0xaf/0x730 [ 582.352233][T23702] ? __ia32_sys_shutdown+0x60/0x60 [ 582.357373][T23702] __sys_sendmmsg+0x3b7/0x800 [ 582.362076][T23702] ? __ia32_sys_sendmsg+0x90/0x90 [ 582.367106][T23702] ? rcu_read_lock_sched_held+0x89/0x130 [ 582.372765][T23702] ? rcu_read_lock_sched_held+0x89/0x130 [ 582.378398][T23702] ? print_irqtrace_events+0x220/0x220 [ 582.383848][T23702] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 582.389994][T23702] __x64_sys_sendmmsg+0x9c/0xb0 [ 582.394859][T23702] do_syscall_64+0x44/0xd0 [ 582.399306][T23702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 582.405196][T23702] RIP: 0033:0x7f4fb6455a39 [ 582.409596][T23702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 582.429186][T23702] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 582.437582][T23702] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 582.445537][T23702] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 582.453491][T23702] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 582.464348][T23702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.472307][T23702] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 582.488367][ T8531] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 582.507810][ T8531] usb 1-1: New USB device strings: Mfr=0, Product=228, SerialNumber=0 [ 582.516244][ T8531] usb 1-1: Product: syz [ 582.528976][ T8531] usb 1-1: config 0 descriptor?? [ 582.589135][ T8531] ldusb 1-1:0.0: Interrupt in endpoint not found [ 582.600751][ T7808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.611198][ T7808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.617300][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 582.620534][ T7808] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 582.641105][ T7808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.657262][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 582.659597][ T7808] usb 5-1: config 0 descriptor?? 03:42:12 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 582.679655][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.699343][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 582.715383][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.751550][ T31] usb 2-1: config 0 descriptor?? [ 582.793083][ T8269] usb 1-1: USB disconnect, device number 2 [ 582.808606][ T31] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 582.820947][ T31] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 582.963868][ T8526] usb 5-1: USB disconnect, device number 61 [ 583.013148][T23671] udc-core: couldn't find an available UDC or it's busy [ 583.020196][T23671] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 583.030765][ T8269] usb 2-1: USB disconnect, device number 33 [ 583.057593][ T8531] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 583.066059][ T8269] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 583.507614][ T8531] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.527313][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 583.545095][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 583.555521][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.578134][ T8531] usb 3-1: config 0 descriptor?? [ 583.587190][ T8269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 583.629036][ T8531] ldusb 3-1:0.0: Interrupt in endpoint not found [ 583.832290][ T8531] usb 3-1: USB disconnect, device number 4 [ 583.867290][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 583.997264][ T8269] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.167572][ T8269] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 584.176810][ T8269] usb 1-1: New USB device strings: Mfr=0, Product=228, SerialNumber=0 [ 584.195851][ T8269] usb 1-1: config 0 descriptor?? [ 584.217273][ T8269] usb 1-1: can't set config #0, error -71 [ 584.224439][ T8269] usb 1-1: USB disconnect, device number 3 [ 584.297405][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 584.308176][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 584.322088][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.336010][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 584.346211][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.357655][ T31] usb 2-1: config 0 descriptor?? 03:42:14 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/4096, 0x1000) 03:42:14 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:14 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) 03:42:14 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x3, 0x1, 0x2, {0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa1b8}}}, 0x32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x42001, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7fff}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7ffff000, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x11}], 0x400000000000085, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x7ffff000, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x11}], 0x400000000000085, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, r4, &(0x7f0000000140)={0x3}, r6, 0x3, 0x0, 0x1}, 0xffff8000) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0) 03:42:14 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 584.424024][ T31] usb 2-1: can't set config #0, error -71 [ 584.440959][ T31] usb 2-1: USB disconnect, device number 34 03:42:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 584.585016][T23791] FAULT_INJECTION: forcing a failure. [ 584.585016][T23791] name failslab, interval 1, probability 0, space 0, times 0 [ 584.610006][T23791] CPU: 0 PID: 23791 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 584.618789][T23791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.628850][T23791] Call Trace: [ 584.632134][T23791] dump_stack_lvl+0x201/0x2d8 [ 584.636824][T23791] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 584.642993][T23791] ? show_regs_print_info+0x12/0x12 [ 584.648199][T23791] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 584.654374][T23791] ? wake_up_klogd+0xb2/0xf0 [ 584.658973][T23791] ? dump_stack+0x5/0x16 [ 584.663233][T23791] should_fail+0x384/0x4b0 [ 584.667691][T23791] ? __alloc_skb+0xd8/0x580 [ 584.672204][T23791] should_failslab+0x5/0x20 [ 584.676720][T23791] kmem_cache_alloc_node+0x77/0x340 [ 584.681938][T23791] __alloc_skb+0xd8/0x580 [ 584.686282][T23791] ? __lock_acquire+0x1382/0x2b00 [ 584.691322][T23791] alloc_skb_with_frags+0xab/0x660 [ 584.696544][T23791] sock_alloc_send_pskb+0x928/0xa60 [ 584.701770][T23791] ? sock_kzfree_s+0x50/0x50 [ 584.706378][T23791] ? rcu_read_lock_sched_held+0x89/0x130 [ 584.712019][T23791] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 584.718014][T23791] __ip_append_data+0x2378/0x37c0 [ 584.723069][T23791] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 584.729070][T23791] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 584.733946][T23791] ? rcu_lock_release+0x9/0x20 [ 584.738722][T23791] ? ip_setup_cork+0x840/0x840 [ 584.743496][T23791] ? ipv4_mtu+0x28a/0x380 [ 584.747840][T23791] ? ip_setup_cork+0x479/0x840 [ 584.752623][T23791] ip_make_skb+0x1d3/0x480 [ 584.757061][T23791] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 584.761927][T23791] ? ip_flush_pending_frames+0x260/0x260 [ 584.767602][T23791] udp_sendmsg+0x2397/0x34f0 [ 584.772234][T23791] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 584.777098][T23791] ? udp_cmsg_send+0x340/0x340 [ 584.781889][T23791] ? mark_lock+0x191/0x1e00 [ 584.786413][T23791] ? __print_lock_name+0x1d0/0x1d0 [ 584.791547][T23791] ? udpv6_sendmsg+0x1e0/0x35f0 [ 584.796417][T23791] udpv6_sendmsg+0xaaa/0x35f0 [ 584.801126][T23791] ? xfrm6_policy_check+0x590/0x590 [ 584.806361][T23791] ? smack_socket_sendmsg+0x16e/0x530 [ 584.811750][T23791] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 584.818180][T23791] ? tomoyo_socket_bind_permission+0x360/0x360 [ 584.824339][T23791] ? __might_fault+0xb8/0x110 [ 584.829029][T23791] ? rcu_read_lock_sched_held+0x89/0x130 03:42:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 584.834671][T23791] ? sock_rps_record_flow+0x12/0x370 [ 584.839977][T23791] ? inet_send_prepare+0x55/0x250 [ 584.845015][T23791] ? inet6_compat_ioctl+0x560/0x560 [ 584.850222][T23791] ____sys_sendmsg+0x5b9/0x910 [ 584.855007][T23791] ? __sys_sendmsg_sock+0x30/0x30 [ 584.860059][T23791] __sys_sendmmsg+0x57e/0x800 [ 584.864763][T23791] ? __ia32_sys_sendmsg+0x90/0x90 [ 584.869844][T23791] ? rcu_read_lock_sched_held+0x89/0x130 [ 584.875503][T23791] ? __lock_acquire+0x2b00/0x2b00 [ 584.880529][T23791] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 584.886499][T23791] ? print_irqtrace_events+0x220/0x220 [ 584.891945][T23791] ? vtime_user_exit+0x2b2/0x3e0 [ 584.896878][T23791] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 584.902857][T23791] __x64_sys_sendmmsg+0x9c/0xb0 [ 584.907698][T23791] do_syscall_64+0x44/0xd0 [ 584.912101][T23791] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 584.917977][T23791] RIP: 0033:0x7f4fb6455a39 [ 584.922380][T23791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 584.941971][T23791] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 584.950372][T23791] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 584.958332][T23791] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 584.966298][T23791] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 584.974252][T23791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.982207][T23791] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:14 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 38) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 585.147049][ T8526] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 585.160976][T23812] FAULT_INJECTION: forcing a failure. [ 585.160976][T23812] name failslab, interval 1, probability 0, space 0, times 0 [ 585.181326][T23812] CPU: 1 PID: 23812 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 585.190102][T23812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.200162][T23812] Call Trace: [ 585.203444][T23812] dump_stack_lvl+0x201/0x2d8 [ 585.208140][T23812] ? show_regs_print_info+0x12/0x12 [ 585.213369][T23812] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 585.219111][T23812] ? __might_sleep+0x110/0x110 [ 585.223902][T23812] should_fail+0x384/0x4b0 [ 585.228313][T23812] ? alloc_skb_with_frags+0xab/0x660 [ 585.233591][T23812] should_failslab+0x5/0x20 [ 585.238088][T23812] __kmalloc_node_track_caller+0x97/0x3e0 [ 585.243807][T23812] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 585.249598][T23812] ? kmem_cache_alloc_node+0x250/0x340 [ 585.255132][T23812] ? __alloc_skb+0xd8/0x580 [ 585.259624][T23812] ? alloc_skb_with_frags+0xab/0x660 [ 585.264901][T23812] __alloc_skb+0x127/0x580 [ 585.269301][T23812] ? __lock_acquire+0x1382/0x2b00 [ 585.274314][T23812] alloc_skb_with_frags+0xab/0x660 [ 585.279433][T23812] sock_alloc_send_pskb+0x928/0xa60 [ 585.284645][T23812] ? sock_kzfree_s+0x50/0x50 [ 585.289230][T23812] ? rcu_read_lock_sched_held+0x89/0x130 [ 585.294873][T23812] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 585.300846][T23812] __ip_append_data+0x2378/0x37c0 [ 585.305875][T23812] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 585.311852][T23812] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 585.316709][T23812] ? rcu_lock_release+0x9/0x20 [ 585.321459][T23812] ? ip_setup_cork+0x840/0x840 [ 585.326213][T23812] ? ipv4_mtu+0x28a/0x380 [ 585.330534][T23812] ? ip_setup_cork+0x479/0x840 [ 585.335290][T23812] ip_make_skb+0x1d3/0x480 [ 585.339704][T23812] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 585.344547][T23812] ? ip_flush_pending_frames+0x260/0x260 [ 585.350186][T23812] udp_sendmsg+0x2397/0x34f0 [ 585.354786][T23812] ? rcu_read_lock_sched_held+0x89/0x130 [ 585.360413][T23812] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 585.365253][T23812] ? udp_cmsg_send+0x340/0x340 [ 585.370015][T23812] ? mark_lock+0x191/0x1e00 [ 585.374511][T23812] ? __print_lock_name+0x1d0/0x1d0 [ 585.379622][T23812] udpv6_sendmsg+0xaaa/0x35f0 [ 585.384301][T23812] ? xfrm6_policy_check+0x590/0x590 [ 585.389500][T23812] ? smack_socket_sendmsg+0x16e/0x530 [ 585.394875][T23812] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 585.401282][T23812] ? tomoyo_socket_bind_permission+0x360/0x360 [ 585.407418][T23812] ? __might_fault+0xb8/0x110 [ 585.412084][T23812] ? rcu_read_lock_sched_held+0x89/0x130 [ 585.417702][T23812] ? sock_rps_record_flow+0x12/0x370 [ 585.422978][T23812] ? inet_send_prepare+0x55/0x250 [ 585.427992][T23812] ? inet6_compat_ioctl+0x560/0x560 [ 585.433175][T23812] ____sys_sendmsg+0x5b9/0x910 [ 585.437932][T23812] ? __sys_sendmsg_sock+0x30/0x30 [ 585.442954][T23812] __sys_sendmmsg+0x57e/0x800 [ 585.447628][T23812] ? __ia32_sys_sendmsg+0x90/0x90 [ 585.452669][T23812] ? rcu_read_lock_sched_held+0x89/0x130 [ 585.458318][T23812] ? __lock_acquire+0x2b00/0x2b00 [ 585.463336][T23812] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 585.469319][T23812] ? print_irqtrace_events+0x220/0x220 [ 585.474774][T23812] ? vtime_user_exit+0x2b2/0x3e0 [ 585.479708][T23812] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 585.485690][T23812] __x64_sys_sendmmsg+0x9c/0xb0 [ 585.490543][T23812] do_syscall_64+0x44/0xd0 [ 585.494953][T23812] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 585.500831][T23812] RIP: 0033:0x7f4fb6455a39 [ 585.505238][T23812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.524836][T23812] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 585.533235][T23812] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 585.541193][T23812] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 585.549154][T23812] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 585.557107][T23812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.565059][T23812] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 585.574508][ T8531] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 585.582306][ T2973] usb 5-1: new high-speed USB device number 62 using dummy_hcd 03:42:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 585.647651][ T8526] usb 1-1: device descriptor read/64, error 18 [ 585.657043][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 585.916901][ T8526] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 585.997060][ T8531] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.007365][ T2973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.018289][ T8531] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 586.029023][ T2973] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.038580][ T2973] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 586.047996][ T8531] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 586.058045][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 586.069282][ T2973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.077587][ T8531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.085778][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 586.102440][ T2973] usb 5-1: config 0 descriptor?? [ 586.113389][ T8526] usb 1-1: device descriptor read/64, error 18 [ 586.113643][ T8531] usb 3-1: config 0 descriptor?? [ 586.136941][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.153158][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 586.164191][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.183252][ T31] usb 2-1: config 0 descriptor?? [ 586.194807][ T8531] ldusb 3-1:0.0: Interrupt in endpoint not found [ 586.247773][ T8526] usb usb1-port1: attempt power cycle [ 586.278531][ T31] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 586.303496][ T31] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 586.401055][ T31] usb 5-1: USB disconnect, device number 62 [ 586.417680][ T8531] usb 3-1: USB disconnect, device number 5 [ 586.486469][ T20] usb 2-1: USB disconnect, device number 35 [ 586.502977][ T20] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 586.656922][ T8526] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 586.827178][ T8526] usb 1-1: device descriptor read/8, error -61 [ 587.096870][ T8526] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 587.267617][ T8526] usb 1-1: device descriptor read/8, error -61 [ 587.284258][ T20] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 587.386977][ T8526] usb usb1-port1: unable to enumerate USB device [ 587.677260][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 587.687928][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 587.699966][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.713291][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 587.722943][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.733649][ T20] usb 2-1: config 0 descriptor?? [ 587.788453][ T20] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 587.817302][ T20] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 03:42:17 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 39) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:17 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400"], 0x0) 03:42:17 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905000000000000"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:17 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) 03:42:17 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x2, 0x3, 0x4, 0x3}}, 0x26) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x5b, {0x5b, 0x8, "1d65ea35bdc9cedfbe0edf28289e2cc5f10c0cf5638ddd931072810049601e96cf6546341b1a103463206cbed72514383752f6bfcafe7a2a817be65a096e4a20d223b4e0af378c303faa226c33cbd063c61f32a6eb093ce199"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x2, 0x9, "4c60bdac", "602ab3b4"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x3, 0x6, 0x0, 0x5, 0x1000}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x40, 0xe, 0x40, "a34e487a9adf994ba41f6f8700a488132faa6d1b34c067397cdb527117d1fbcd889ae06435543942a357c58435598cbe5e235649333e52dfa3f57f1d1dfd302a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf0]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0xa1}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, 'A/'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x3921}, &(0x7f0000000480)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, &(0x7f0000000500)={0x40, 0x19, 0x2, "0298"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000005c0)={0x40, 0x1e, 0x1}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x9}}) read$char_usb(r2, 0x0, 0x0) [ 587.846761][ T20] usb 2-1: USB disconnect, device number 36 [ 587.855083][ T20] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 587.930728][T23891] FAULT_INJECTION: forcing a failure. [ 587.930728][T23891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.993114][T23891] CPU: 1 PID: 23891 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 588.002180][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.012250][T23891] Call Trace: [ 588.015543][T23891] dump_stack_lvl+0x201/0x2d8 [ 588.020258][T23891] ? show_regs_print_info+0x12/0x12 [ 588.025485][T23891] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 588.031216][T23891] ? __might_fault+0xb8/0x110 [ 588.035909][T23891] ? rcu_read_lock_sched_held+0x89/0x130 [ 588.041562][T23891] should_fail+0x384/0x4b0 [ 588.046006][T23891] _copy_from_user+0x2d/0x170 [ 588.050696][T23891] __copy_msghdr_from_user+0xaf/0x730 [ 588.056081][T23891] ? __ia32_sys_shutdown+0x60/0x60 [ 588.061199][T23891] __sys_sendmmsg+0x3b7/0x800 [ 588.065875][T23891] ? __ia32_sys_sendmsg+0x90/0x90 [ 588.070916][T23891] ? rcu_read_lock_sched_held+0x89/0x130 [ 588.076559][T23891] ? __lock_acquire+0x2b00/0x2b00 [ 588.081588][T23891] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 588.087555][T23891] ? print_irqtrace_events+0x220/0x220 [ 588.093003][T23891] ? vtime_user_exit+0x2b2/0x3e0 [ 588.097929][T23891] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 588.103903][T23891] __x64_sys_sendmmsg+0x9c/0xb0 [ 588.108745][T23891] do_syscall_64+0x44/0xd0 [ 588.113151][T23891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 588.119031][T23891] RIP: 0033:0x7f4fb6455a39 [ 588.123434][T23891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:42:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000059010000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 588.143042][T23891] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 588.151445][T23891] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 588.159405][T23891] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 588.167360][T23891] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 588.175315][T23891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.183280][T23891] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:17 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 588.374794][ T2973] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 588.382406][ T31] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 588.390176][ T8531] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 588.396001][T23915] FAULT_INJECTION: forcing a failure. [ 588.396001][T23915] name failslab, interval 1, probability 0, space 0, times 0 [ 588.435608][T23915] CPU: 0 PID: 23915 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 588.444440][T23915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.454512][T23915] Call Trace: [ 588.457804][T23915] dump_stack_lvl+0x201/0x2d8 [ 588.462494][T23915] ? show_regs_print_info+0x12/0x12 [ 588.467702][T23915] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 588.473423][T23915] ? __might_sleep+0x110/0x110 [ 588.478185][T23915] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 588.484345][T23915] should_fail+0x384/0x4b0 [ 588.488762][T23915] ? __alloc_skb+0xd8/0x580 [ 588.493258][T23915] should_failslab+0x5/0x20 [ 588.497768][T23915] kmem_cache_alloc_node+0x77/0x340 [ 588.502962][T23915] __alloc_skb+0xd8/0x580 [ 588.507287][T23915] ? __lock_acquire+0x1382/0x2b00 [ 588.512315][T23915] alloc_skb_with_frags+0xab/0x660 [ 588.517430][T23915] sock_alloc_send_pskb+0x928/0xa60 [ 588.522637][T23915] ? sock_kzfree_s+0x50/0x50 [ 588.527226][T23915] ? rcu_read_lock_sched_held+0x89/0x130 [ 588.532877][T23915] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 588.538855][T23915] __ip_append_data+0x2378/0x37c0 [ 588.543893][T23915] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 588.549873][T23915] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 588.554720][T23915] ? rcu_lock_release+0x9/0x20 [ 588.559477][T23915] ? ip_setup_cork+0x840/0x840 [ 588.564231][T23915] ? ipv4_mtu+0x28a/0x380 [ 588.568552][T23915] ? ip_setup_cork+0x479/0x840 [ 588.573311][T23915] ip_make_skb+0x1d3/0x480 [ 588.577723][T23915] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 588.582564][T23915] ? ip_flush_pending_frames+0x260/0x260 [ 588.588183][T23915] ? lockdep_hardirqs_on+0x95/0x140 [ 588.593391][T23915] ? udp_sendmsg+0x1bf0/0x34f0 [ 588.598141][T23915] ? security_sk_classify_flow+0x12/0x90 [ 588.603776][T23915] udp_sendmsg+0x2397/0x34f0 [ 588.608373][T23915] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 588.613213][T23915] ? udp_cmsg_send+0x340/0x340 [ 588.617992][T23915] ? mark_lock+0x191/0x1e00 [ 588.622491][T23915] ? __print_lock_name+0x1d0/0x1d0 [ 588.627612][T23915] udpv6_sendmsg+0xaaa/0x35f0 [ 588.632291][T23915] ? xfrm6_policy_check+0x590/0x590 [ 588.637499][T23915] ? smack_socket_sendmsg+0x16e/0x530 [ 588.642861][T23915] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 588.649270][T23915] ? tomoyo_socket_bind_permission+0x360/0x360 [ 588.655410][T23915] ? __might_fault+0xb8/0x110 [ 588.660077][T23915] ? rcu_read_lock_sched_held+0x89/0x130 [ 588.665695][T23915] ? sock_rps_record_flow+0x12/0x370 [ 588.670969][T23915] ? inet_send_prepare+0x55/0x250 [ 588.675983][T23915] ? inet6_compat_ioctl+0x560/0x560 [ 588.681166][T23915] ____sys_sendmsg+0x5b9/0x910 [ 588.685925][T23915] ? __sys_sendmsg_sock+0x30/0x30 [ 588.690950][T23915] __sys_sendmmsg+0x57e/0x800 [ 588.695621][T23915] ? __ia32_sys_sendmsg+0x90/0x90 [ 588.700676][T23915] ? rcu_read_lock_sched_held+0x89/0x130 [ 588.706316][T23915] ? __lock_acquire+0x2b00/0x2b00 [ 588.711341][T23915] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 588.717310][T23915] ? print_irqtrace_events+0x220/0x220 [ 588.722754][T23915] ? vtime_user_exit+0x2b2/0x3e0 [ 588.727689][T23915] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 588.733659][T23915] __x64_sys_sendmmsg+0x9c/0xb0 [ 588.738499][T23915] do_syscall_64+0x44/0xd0 [ 588.742904][T23915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 588.748783][T23915] RIP: 0033:0x7f4fb6455a39 [ 588.753189][T23915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 588.772780][T23915] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 588.781184][T23915] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 588.789145][T23915] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 588.797103][T23915] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 588.805076][T23915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.813135][T23915] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:18 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 41) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000099010000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 589.033554][T23923] FAULT_INJECTION: forcing a failure. [ 589.033554][T23923] name failslab, interval 1, probability 0, space 0, times 0 [ 589.047215][ T20] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 589.048108][T23923] CPU: 0 PID: 23923 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 589.063534][T23923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.073598][T23923] Call Trace: [ 589.076886][T23923] dump_stack_lvl+0x201/0x2d8 [ 589.081591][T23923] ? show_regs_print_info+0x12/0x12 [ 589.086802][T23923] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 589.092537][T23923] ? __might_sleep+0x110/0x110 [ 589.097318][T23923] should_fail+0x384/0x4b0 [ 589.101751][T23923] ? alloc_skb_with_frags+0xab/0x660 [ 589.107073][T23923] should_failslab+0x5/0x20 [ 589.111589][T23923] __kmalloc_node_track_caller+0x97/0x3e0 [ 589.117320][T23923] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 589.123141][T23923] ? kmem_cache_alloc_node+0x250/0x340 [ 589.128612][T23923] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 589.134604][T23923] ? __alloc_skb+0xd8/0x580 [ 589.139123][T23923] ? alloc_skb_with_frags+0xab/0x660 [ 589.144415][T23923] __alloc_skb+0x127/0x580 [ 589.148838][T23923] ? __lock_acquire+0x1382/0x2b00 [ 589.153874][T23923] alloc_skb_with_frags+0xab/0x660 [ 589.159011][T23923] sock_alloc_send_pskb+0x928/0xa60 [ 589.164255][T23923] ? sock_kzfree_s+0x50/0x50 [ 589.168862][T23923] ? rcu_read_lock_sched_held+0x89/0x130 [ 589.174508][T23923] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 589.180509][T23923] __ip_append_data+0x2378/0x37c0 [ 589.185560][T23923] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 589.191561][T23923] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 589.197727][T23923] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 589.202588][T23923] ? ip_setup_cork+0x840/0x840 [ 589.207370][T23923] ? ip_setup_cork+0x479/0x840 [ 589.212130][T23923] ip_make_skb+0x1d3/0x480 [ 589.216541][T23923] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 589.221389][T23923] ? ip_flush_pending_frames+0x260/0x260 [ 589.227023][T23923] udp_sendmsg+0x2397/0x34f0 [ 589.231620][T23923] ? __lock_acquire+0x1382/0x2b00 [ 589.236638][T23923] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 589.241485][T23923] ? udp_cmsg_send+0x340/0x340 [ 589.246251][T23923] ? mark_lock+0x191/0x1e00 [ 589.250749][T23923] ? __print_lock_name+0x1d0/0x1d0 [ 589.255855][T23923] ? udp_sendmsg+0x7ec/0x34f0 [ 589.260524][T23923] udpv6_sendmsg+0xaaa/0x35f0 [ 589.265209][T23923] ? xfrm6_policy_check+0x590/0x590 [ 589.270411][T23923] ? smack_socket_sendmsg+0x16e/0x530 [ 589.275773][T23923] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 589.282178][T23923] ? tomoyo_socket_bind_permission+0x360/0x360 [ 589.288319][T23923] ? __might_fault+0xb8/0x110 [ 589.292988][T23923] ? rcu_read_lock_sched_held+0x89/0x130 [ 589.298612][T23923] ? sock_rps_record_flow+0x12/0x370 [ 589.303886][T23923] ? inet_send_prepare+0x55/0x250 [ 589.308902][T23923] ? inet6_compat_ioctl+0x560/0x560 [ 589.314085][T23923] ____sys_sendmsg+0x5b9/0x910 [ 589.318847][T23923] ? __sys_sendmsg_sock+0x30/0x30 [ 589.323870][T23923] __sys_sendmmsg+0x57e/0x800 [ 589.328550][T23923] ? __ia32_sys_sendmsg+0x90/0x90 [ 589.333594][T23923] ? rcu_read_lock_sched_held+0x89/0x130 [ 589.339234][T23923] ? __lock_acquire+0x2b00/0x2b00 [ 589.344688][T23923] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 589.350657][T23923] ? print_irqtrace_events+0x220/0x220 [ 589.356101][T23923] ? vtime_user_exit+0x2b2/0x3e0 [ 589.361031][T23923] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 589.367018][T23923] __x64_sys_sendmmsg+0x9c/0xb0 [ 589.371871][T23923] do_syscall_64+0x44/0xd0 [ 589.376288][T23923] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 589.382178][T23923] RIP: 0033:0x7f4fb6455a39 [ 589.386583][T23923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.406175][T23923] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 589.414680][T23923] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 589.423077][T23923] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 589.431039][T23923] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.439001][T23923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.446964][T23923] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:19 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 42) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 589.587194][ T8531] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.597691][ T2973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.607876][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.627404][ T31] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 589.637131][ T2973] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 589.648374][ T20] usb 2-1: device descriptor read/64, error 18 [ 589.650935][T23937] FAULT_INJECTION: forcing a failure. [ 589.650935][T23937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.655011][ T8531] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 589.682572][T23937] CPU: 0 PID: 23937 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 589.691356][T23937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.701411][T23937] Call Trace: [ 589.704682][T23937] dump_stack_lvl+0x201/0x2d8 [ 589.709356][T23937] ? show_regs_print_info+0x12/0x12 [ 589.714555][T23937] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 589.720262][T23937] ? __might_fault+0xb8/0x110 [ 589.724935][T23937] ? rcu_read_lock_sched_held+0x89/0x130 [ 589.730565][T23937] should_fail+0x384/0x4b0 [ 589.734977][T23937] _copy_from_user+0x2d/0x170 [ 589.739646][T23937] __copy_msghdr_from_user+0xaf/0x730 [ 589.745014][T23937] ? __ia32_sys_shutdown+0x60/0x60 [ 589.750133][T23937] __sys_sendmmsg+0x3b7/0x800 [ 589.754832][T23937] ? __ia32_sys_sendmsg+0x90/0x90 [ 589.759843][T23937] ? rcu_read_lock_sched_held+0x89/0x130 [ 589.765516][T23937] ? rcu_read_lock_sched_held+0x89/0x130 [ 589.771154][T23937] ? print_irqtrace_events+0x220/0x220 [ 589.776609][T23937] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 589.782783][T23937] __x64_sys_sendmmsg+0x9c/0xb0 [ 589.787628][T23937] do_syscall_64+0x44/0xd0 [ 589.792031][T23937] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 589.797910][T23937] RIP: 0033:0x7f4fb6455a39 [ 589.802313][T23937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.822019][T23937] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 589.830421][T23937] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 589.838414][T23937] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 589.846370][T23937] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.854325][T23937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.862282][T23937] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 589.881290][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.891825][ T2973] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 589.910585][ T31] usb 5-1: config 0 descriptor?? [ 589.915713][ T2973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.924977][ T8531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.936697][ T2973] usb 3-1: config 0 descriptor?? [ 589.952161][ T8531] usb 1-1: config 0 descriptor?? [ 589.968058][ T31] ldusb 5-1:0.0: Interrupt in endpoint not found [ 589.978372][ T2973] ldusb 3-1:0.0: Interrupt in endpoint not found [ 590.007960][ T8531] ldusb 1-1:0.0: Interrupt in endpoint not found [ 590.036842][ T20] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 590.180089][ T8531] usb 5-1: USB disconnect, device number 63 [ 590.187969][ T8526] usb 3-1: USB disconnect, device number 6 [ 590.211105][ T2973] usb 1-1: USB disconnect, device number 8 [ 590.246758][ T20] usb 2-1: device descriptor read/64, error 18 [ 590.378554][ T20] usb usb2-port1: attempt power cycle 03:42:20 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) 03:42:20 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 43) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:20 executing program 0: syz_usb_connect(0x6, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="010100001913a16e40110f359c6a83f8010000000000000109062300010ce8d379e843bba92b627035d80d17356e11b748c89f50502bfb4e35bed6c64c85cb46d99ae51492429190fd48f8470d1b8c4169788b149e4f3791905020e0322d53b27772618f1df0b0452f08abac80286de2f66cdf952709b0203dea267495708097273a7bbc0489289e00c2800e1de9be6a722b9a189f7886f58df028699656bb83a5"], 0x0) syz_usb_connect$hid(0x9443adc9ff3e26d6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd4, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x3, 0x1, 0xd98ea926bab457e2, 0x8, {0x9, 0x21, 0x5, 0x1f, 0x1, {0x22, 0x8a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xff, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0x3, 0xd0}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x80, 0xff, 0xe7, 0x1}, 0x0, 0x0, 0x5, [{0x28, &(0x7f0000000140)=@string={0x28, 0x3, "9b195bf694ad653ff3628ebbc8ee00de90a6dc4cc1b659e23876d39e3a55b9f5991946ff8287"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x140c}}]}) [ 590.798793][T23970] FAULT_INJECTION: forcing a failure. [ 590.798793][T23970] name failslab, interval 1, probability 0, space 0, times 0 [ 590.823595][T23970] CPU: 0 PID: 23970 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 590.824575][ T20] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 590.832376][T23970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.832392][T23970] Call Trace: [ 590.832401][T23970] dump_stack_lvl+0x201/0x2d8 [ 590.857926][T23970] ? show_regs_print_info+0x12/0x12 [ 590.863135][T23970] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 590.868874][T23970] ? __might_sleep+0x110/0x110 [ 590.873661][T23970] should_fail+0x384/0x4b0 [ 590.878093][T23970] ? __alloc_skb+0xd8/0x580 [ 590.882604][T23970] should_failslab+0x5/0x20 [ 590.887205][T23970] kmem_cache_alloc_node+0x77/0x340 [ 590.892422][T23970] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 590.898423][T23970] __alloc_skb+0xd8/0x580 [ 590.902762][T23970] ? __lock_acquire+0x1382/0x2b00 [ 590.907801][T23970] alloc_skb_with_frags+0xab/0x660 [ 590.912937][T23970] sock_alloc_send_pskb+0x928/0xa60 [ 590.918165][T23970] ? sock_kzfree_s+0x50/0x50 [ 590.922771][T23970] ? rcu_read_lock_sched_held+0x89/0x130 [ 590.928420][T23970] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 590.934446][T23970] __ip_append_data+0x2378/0x37c0 [ 590.939514][T23970] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 590.944380][T23970] ? lockdep_hardirqs_on+0x95/0x140 [ 590.949613][T23970] ? ip_setup_cork+0x840/0x840 [ 590.954393][T23970] ? ipv4_mtu+0x28a/0x380 [ 590.958742][T23970] ? ip_setup_cork+0x479/0x840 [ 590.963525][T23970] ip_make_skb+0x1d3/0x480 [ 590.967960][T23970] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 590.972826][T23970] ? ip_flush_pending_frames+0x260/0x260 [ 590.978493][T23970] udp_sendmsg+0x2397/0x34f0 [ 590.983126][T23970] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 590.987987][T23970] ? udp_cmsg_send+0x340/0x340 [ 590.992776][T23970] ? mark_lock+0x191/0x1e00 [ 590.997300][T23970] ? __print_lock_name+0x1d0/0x1d0 [ 591.002433][T23970] ? udpv6_sendmsg+0xb0/0x35f0 [ 591.007209][T23970] udpv6_sendmsg+0xaaa/0x35f0 [ 591.011918][T23970] ? xfrm6_policy_check+0x590/0x590 [ 591.017134][T23970] ? smack_socket_sendmsg+0x16e/0x530 [ 591.022492][T23970] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 591.028893][T23970] ? tomoyo_socket_bind_permission+0x360/0x360 [ 591.035030][T23970] ? lockdep_hardirqs_on+0x95/0x140 [ 591.040256][T23970] ? sock_rps_record_flow+0x12/0x370 [ 591.045537][T23970] ? inet_send_prepare+0x55/0x250 [ 591.050741][T23970] ? inet6_compat_ioctl+0x560/0x560 [ 591.055947][T23970] ____sys_sendmsg+0x5b9/0x910 [ 591.060715][T23970] ? __sys_sendmsg_sock+0x30/0x30 [ 591.065754][T23970] __sys_sendmmsg+0x57e/0x800 [ 591.070436][T23970] ? __ia32_sys_sendmsg+0x90/0x90 [ 591.075469][T23970] ? rcu_read_lock_sched_held+0x89/0x130 [ 591.081105][T23970] ? __lock_acquire+0x2b00/0x2b00 [ 591.086118][T23970] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 591.092080][T23970] ? print_irqtrace_events+0x220/0x220 [ 591.097522][T23970] ? vtime_user_exit+0x2b2/0x3e0 [ 591.102448][T23970] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 591.108415][T23970] __x64_sys_sendmmsg+0x9c/0xb0 [ 591.113254][T23970] do_syscall_64+0x44/0xd0 [ 591.117672][T23970] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 591.123546][T23970] RIP: 0033:0x7f4fb6455a39 [ 591.127974][T23970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 591.147559][T23970] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 591.155965][T23970] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 591.163918][T23970] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 591.171871][T23970] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.179839][T23970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.187795][T23970] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:20 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905000000000000"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:20 executing program 1: syz_usb_connect(0x5, 0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="e0f94f50e3561c5257c737ab2d3a0a31bca988f56a0454acb7916c8e71664aff3d2b618a1bbef7a449b6864eba73e97db4a998fc94be1293406cdd249f6d43ac220490fc1d6aa96201b16aa587ed1daacd7e471de98b4546ef9556dd2f1a9be8d416cb05a56e78e76a2e9b2911c77b2fdd74e905b6074568320b6c0cdcafe5ecf635cac909342f2f6bd0749396924e25e279ab30a273f222a76663d87899578a5f70b93750031c3f5179f660517a1daeb7f081710f4667237ed998a7b889a608b55fb176df952e728066", @ANYBLOB="299ee7d0dc18bf82f0fc6e68021e05d9604e63df6fc9bfdde6023609fd1021f0de6109ace9fe18ef46f8d9966a406ab50f80eb24a7b2d925469b2c34782bdee52e"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r1, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x65, {0x65, 0x4, "84e1f8031feb4e9aff552edd974edc43aa55c8a766312f2f29ad201e44a49c7481cb5e2d2d6eefdfc3388dfac3fbf44a42a3df36f3b4a1e3a6f0336c336aabfb1bb253df0e689e8198d24c73702469ad0f45239d236f2a10b3428c3eb31dddafb17330"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2015}}, &(0x7f00000000c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x5, 0x1}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x7, 0x3f, '^63!', "3b7ac86f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe0, 0x80, 0x7f, 0xd7, 0x7, 0x6, 0xfffa}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0x15, 0xe1, "f3ca7a55c8bb5be99cb230da44776e8b21a370de0eca5fb24762580d853b238485a50c993e17548e9733b58dc6c55675c23a541c8e5f25b8a3ebce500f9bb01611e450f2774199211d4df3b1c81bf1a31da072c8809c081eb97413a43893cfcabf8a3fe6826d9fe806106182ff6c6b4ff01f53c3ce0612610ebeda9c8bfbdb9fd09f0c084584456321b6d1849b8016d441ef674a7a905a6954af99ded786cc2c47773473e8a1ed784a267404a62df0fea9df46e6c77839ef04c4f585e4a8f19d04f847a43cb1c774a9d4c3ec55dc3610ccb424e0c4e7f004c72e88132ffb338a65"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0xa0, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xd4f}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'WG'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "944d"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x1e, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x3}}) read$char_usb(r0, 0x0, 0x0) 03:42:20 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 44) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 591.296736][ T20] usb 2-1: device descriptor read/8, error -71 03:42:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b70200001c020000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 591.356655][ T8526] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 591.457828][T23997] FAULT_INJECTION: forcing a failure. [ 591.457828][T23997] name failslab, interval 1, probability 0, space 0, times 0 [ 591.483725][T23997] CPU: 0 PID: 23997 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 591.492515][T23997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.502562][T23997] Call Trace: [ 591.505834][T23997] dump_stack_lvl+0x201/0x2d8 [ 591.510517][T23997] ? show_regs_print_info+0x12/0x12 [ 591.515716][T23997] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 591.521435][T23997] ? __might_sleep+0x110/0x110 [ 591.526203][T23997] should_fail+0x384/0x4b0 [ 591.530614][T23997] ? alloc_skb_with_frags+0xab/0x660 [ 591.535887][T23997] should_failslab+0x5/0x20 [ 591.540378][T23997] __kmalloc_node_track_caller+0x97/0x3e0 [ 591.546095][T23997] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 591.551889][T23997] ? kmem_cache_alloc_node+0x250/0x340 [ 591.557336][T23997] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 591.563314][T23997] ? __alloc_skb+0xd8/0x580 [ 591.567820][T23997] ? alloc_skb_with_frags+0xab/0x660 [ 591.573097][T23997] __alloc_skb+0x127/0x580 [ 591.577515][T23997] ? __lock_acquire+0x1382/0x2b00 [ 591.582535][T23997] alloc_skb_with_frags+0xab/0x660 [ 591.587649][T23997] sock_alloc_send_pskb+0x928/0xa60 [ 591.592856][T23997] ? sock_kzfree_s+0x50/0x50 [ 591.597437][T23997] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 591.603584][T23997] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 591.608433][T23997] __ip_append_data+0x2378/0x37c0 [ 591.613472][T23997] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 591.618320][T23997] ? ip_setup_cork+0x840/0x840 [ 591.623070][T23997] ? ipv4_mtu+0x28a/0x380 [ 591.627388][T23997] ? ip_setup_cork+0x479/0x840 [ 591.632143][T23997] ip_make_skb+0x1d3/0x480 [ 591.636554][T23997] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 591.641399][T23997] ? ip_flush_pending_frames+0x260/0x260 [ 591.647036][T23997] udp_sendmsg+0x2397/0x34f0 [ 591.651666][T23997] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 591.656506][T23997] ? udp_cmsg_send+0x340/0x340 [ 591.661271][T23997] ? mark_lock+0x191/0x1e00 [ 591.665770][T23997] ? __print_lock_name+0x1d0/0x1d0 [ 591.670896][T23997] udpv6_sendmsg+0xaaa/0x35f0 [ 591.675576][T23997] ? xfrm6_policy_check+0x590/0x590 [ 591.680767][T23997] ? lockdep_hardirqs_on+0x95/0x140 [ 591.685962][T23997] ? smack_socket_sendmsg+0x16e/0x530 [ 591.691323][T23997] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 591.697731][T23997] ? tomoyo_socket_bind_permission+0x360/0x360 [ 591.703883][T23997] ? __might_fault+0xb8/0x110 [ 591.708549][T23997] ? rcu_read_lock_sched_held+0x89/0x130 [ 591.714346][T23997] ? sock_rps_record_flow+0x12/0x370 [ 591.719617][T23997] ? inet_send_prepare+0x55/0x250 [ 591.724629][T23997] ? inet6_compat_ioctl+0x560/0x560 [ 591.729813][T23997] ____sys_sendmsg+0x5b9/0x910 [ 591.734577][T23997] ? __sys_sendmsg_sock+0x30/0x30 [ 591.739600][T23997] __sys_sendmmsg+0x57e/0x800 [ 591.744277][T23997] ? __ia32_sys_sendmsg+0x90/0x90 [ 591.749294][T23997] ? print_irqtrace_events+0x220/0x220 [ 591.755182][T23997] ? finish_lock_switch+0x1c0/0x350 [ 591.760370][T23997] ? finish_task_switch+0x140/0x630 [ 591.765631][T23997] ? __schedule+0xb7a/0x1460 [ 591.770222][T23997] ? preempt_schedule_irq+0x136/0x1c0 [ 591.775588][T23997] ? print_irqtrace_events+0x220/0x220 [ 591.781040][T23997] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 591.787191][T23997] __x64_sys_sendmmsg+0x9c/0xb0 [ 591.792030][T23997] do_syscall_64+0x44/0xd0 [ 591.796524][T23997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 591.802405][T23997] RIP: 0033:0x7f4fb6455a39 [ 591.806809][T23997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 591.826406][T23997] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 591.834813][T23997] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 591.842774][T23997] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 591.850729][T23997] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.858697][T23997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.866653][T23997] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:21 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x34, {0x34, 0x22, "de8cd57f0496e12066c525125fac3863c0aee997d0e11dc8cf64a19ad331ee4a5ab0604907a38233f757872fe67cf01df553"}}, &(0x7f0000000040)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "c5185693ec93d6c26dca461fbbc355aa6c2c93616f5fbeab4f7bd3e4"}}, &(0x7f0000000100)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x24, "13fcb9bb697db369b12ca8f2d124a38d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x7b, 0x5, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x5, 0xff0f, 0xcb, [0xffc0f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "13ea28ec7b80dce0d3e700c8bd919566"}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x16, 0xba, 0x80, "12692a0a", "5c4c4dda"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x5, 0x5, 0x5, 0x6, 0x9}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x20, 0x14, 0x4f, "372ddbb0a12b356fcccb95c4296887cc08e138b1ebee687781ac8ba558e5375efb8d70c2a9e3364ad21e7fadc0252ee6136aacda19314b4b691c719d1b0fa09322294556e63aa7784527612de4d55a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, '\rn'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000500)={0x40, 0x19, 0x2, "8e76"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x8}}) 03:42:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020000a9020000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 591.956473][ T8361] usb 3-1: new high-speed USB device number 7 using dummy_hcd 03:42:21 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 45) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 592.120515][T24013] FAULT_INJECTION: forcing a failure. [ 592.120515][T24013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.126976][ T8526] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.152955][T24013] CPU: 0 PID: 24013 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 592.161760][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.171830][T24013] Call Trace: [ 592.175124][T24013] dump_stack_lvl+0x201/0x2d8 [ 592.179828][T24013] ? show_regs_print_info+0x12/0x12 [ 592.185048][T24013] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 592.190788][T24013] ? __might_fault+0xb8/0x110 [ 592.195621][T24013] ? rcu_read_lock_sched_held+0x89/0x130 [ 592.201277][T24013] should_fail+0x384/0x4b0 [ 592.205733][T24013] _copy_from_user+0x2d/0x170 [ 592.210431][T24013] __copy_msghdr_from_user+0xaf/0x730 [ 592.215829][T24013] ? __ia32_sys_shutdown+0x60/0x60 [ 592.220978][T24013] __sys_sendmmsg+0x3b7/0x800 [ 592.225683][T24013] ? __ia32_sys_sendmsg+0x90/0x90 [ 592.230767][T24013] ? rcu_read_lock_sched_held+0x89/0x130 [ 592.236582][T24013] ? __lock_acquire+0x2b00/0x2b00 [ 592.241630][T24013] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 592.247635][T24013] ? print_irqtrace_events+0x220/0x220 [ 592.253210][T24013] ? vtime_user_exit+0x2b2/0x3e0 [ 592.258169][T24013] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 592.264164][T24013] __x64_sys_sendmmsg+0x9c/0xb0 [ 592.269030][T24013] do_syscall_64+0x44/0xd0 [ 592.273466][T24013] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 592.279372][T24013] RIP: 0033:0x7f4fb6455a39 [ 592.283799][T24013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 592.303453][T24013] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 592.311857][T24013] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 592.319816][T24013] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 592.327877][T24013] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 592.335836][T24013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.343792][T24013] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 592.356694][ T20] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 592.359366][ T8526] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 592.373659][ T8526] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 592.382977][ T8526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.395948][ T8526] usb 5-1: config 0 descriptor?? [ 592.506916][ T8361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.524915][ T8361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 592.537500][ T8141] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 592.545484][ T8361] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 592.555838][ T8361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.566742][ T20] usb 2-1: device descriptor read/8, error -61 [ 592.571749][ T8361] usb 3-1: config 0 descriptor?? [ 592.617472][ T8361] ldusb 3-1:0.0: Interrupt in endpoint not found [ 592.644664][ T8361] usb 5-1: USB disconnect, device number 64 [ 592.686667][ T20] usb usb2-port1: unable to enumerate USB device [ 592.823370][ T20] usb 3-1: USB disconnect, device number 7 [ 592.896968][ T8141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.908026][ T8141] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 592.918992][ T8141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.932787][ T8141] usb 1-1: config 0 descriptor?? [ 592.977945][ T8141] ldusb 1-1:0.0: Interrupt in endpoint not found 03:42:22 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) 03:42:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:22 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 46) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 593.186164][ T20] usb 1-1: USB disconnect, device number 9 [ 593.249461][T24050] FAULT_INJECTION: forcing a failure. [ 593.249461][T24050] name failslab, interval 1, probability 0, space 0, times 0 [ 593.263715][T24050] CPU: 0 PID: 24050 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 593.272506][T24050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.282570][T24050] Call Trace: [ 593.285868][T24050] dump_stack_lvl+0x201/0x2d8 [ 593.290549][T24050] ? show_regs_print_info+0x12/0x12 [ 593.295744][T24050] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 593.301459][T24050] ? __might_sleep+0x110/0x110 [ 593.306216][T24050] should_fail+0x384/0x4b0 [ 593.310629][T24050] ? __alloc_skb+0xd8/0x580 [ 593.315121][T24050] should_failslab+0x5/0x20 [ 593.319609][T24050] kmem_cache_alloc_node+0x77/0x340 [ 593.324796][T24050] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 593.330773][T24050] __alloc_skb+0xd8/0x580 [ 593.335092][T24050] ? __lock_acquire+0x1382/0x2b00 [ 593.340110][T24050] alloc_skb_with_frags+0xab/0x660 [ 593.345226][T24050] sock_alloc_send_pskb+0x928/0xa60 [ 593.350437][T24050] ? sock_kzfree_s+0x50/0x50 [ 593.355022][T24050] ? rcu_read_lock_sched_held+0x89/0x130 [ 593.360646][T24050] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 593.366620][T24050] __ip_append_data+0x2378/0x37c0 [ 593.371669][T24050] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 593.377648][T24050] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 593.382495][T24050] ? rcu_lock_release+0x9/0x20 [ 593.387262][T24050] ? ip_setup_cork+0x840/0x840 [ 593.392012][T24050] ? ipv4_mtu+0x28a/0x380 [ 593.396332][T24050] ? ip_setup_cork+0x479/0x840 [ 593.401087][T24050] ip_make_skb+0x1d3/0x480 [ 593.405521][T24050] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 593.410362][T24050] ? ip_flush_pending_frames+0x260/0x260 [ 593.415998][T24050] udp_sendmsg+0x2397/0x34f0 [ 593.420598][T24050] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 593.425437][T24050] ? udp_cmsg_send+0x340/0x340 [ 593.430192][T24050] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 593.436162][T24050] ? mark_lock+0x191/0x1e00 [ 593.440660][T24050] ? __print_lock_name+0x1d0/0x1d0 [ 593.445765][T24050] ? kasan_check_range+0x95/0x2f0 [ 593.450784][T24050] udpv6_sendmsg+0xaaa/0x35f0 [ 593.455464][T24050] ? xfrm6_policy_check+0x590/0x590 [ 593.460685][T24050] ? smack_socket_sendmsg+0x16e/0x530 [ 593.466076][T24050] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 593.472509][T24050] ? tomoyo_socket_bind_permission+0x360/0x360 [ 593.478660][T24050] ? __might_fault+0xb8/0x110 [ 593.483333][T24050] ? rcu_read_lock_sched_held+0x89/0x130 [ 593.488953][T24050] ? sock_rps_record_flow+0x12/0x370 [ 593.494228][T24050] ? inet_send_prepare+0x55/0x250 [ 593.499241][T24050] ? inet6_compat_ioctl+0x560/0x560 [ 593.504432][T24050] ____sys_sendmsg+0x5b9/0x910 [ 593.509229][T24050] ? __sys_sendmsg_sock+0x30/0x30 [ 593.514274][T24050] __sys_sendmmsg+0x57e/0x800 [ 593.518968][T24050] ? __ia32_sys_sendmsg+0x90/0x90 [ 593.523984][T24050] ? rcu_read_lock_sched_held+0x89/0x130 [ 593.529634][T24050] ? rcu_read_lock_sched_held+0x89/0x130 [ 593.535275][T24050] ? print_irqtrace_events+0x220/0x220 [ 593.540840][T24050] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 593.547003][T24050] __x64_sys_sendmmsg+0x9c/0xb0 [ 593.551851][T24050] do_syscall_64+0x44/0xd0 [ 593.556264][T24050] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 593.562147][T24050] RIP: 0033:0x7f4fb6455a39 [ 593.566562][T24050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 593.586161][T24050] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 03:42:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 593.594582][T24050] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 593.602547][T24050] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 593.610526][T24050] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.618491][T24050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.628013][T24050] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 03:42:23 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905000000000000"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 593.802384][ T31] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 594.066457][ T8141] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 594.236324][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.249005][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.259375][ T31] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 594.269275][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.293282][ T31] usb 5-1: config 0 descriptor?? 03:42:23 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) (fail_nth: 47) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000073030000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 594.316282][ T20] usb 1-1: new high-speed USB device number 10 using dummy_hcd 03:42:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 594.428535][ T8141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.454902][T24080] FAULT_INJECTION: forcing a failure. [ 594.454902][T24080] name failslab, interval 1, probability 0, space 0, times 0 [ 594.477631][ T8141] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 594.510617][ T8141] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 594.521274][T24080] CPU: 0 PID: 24080 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 594.530047][T24080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.540097][T24080] Call Trace: [ 594.543456][T24080] dump_stack_lvl+0x201/0x2d8 [ 594.548132][T24080] ? show_regs_print_info+0x12/0x12 [ 594.553319][T24080] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 594.559122][T24080] ? __might_sleep+0x110/0x110 [ 594.563886][T24080] should_fail+0x384/0x4b0 [ 594.568293][T24080] ? alloc_skb_with_frags+0xab/0x660 [ 594.573569][T24080] should_failslab+0x5/0x20 [ 594.578059][T24080] __kmalloc_node_track_caller+0x97/0x3e0 [ 594.583766][T24080] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 594.589561][T24080] ? kmem_cache_alloc_node+0x250/0x340 [ 594.595010][T24080] ? __alloc_skb+0xd8/0x580 [ 594.599507][T24080] ? alloc_skb_with_frags+0xab/0x660 [ 594.604778][T24080] __alloc_skb+0x127/0x580 [ 594.609182][T24080] ? rcu_read_lock_sched_held+0x89/0x130 [ 594.614806][T24080] alloc_skb_with_frags+0xab/0x660 [ 594.619914][T24080] sock_alloc_send_pskb+0x928/0xa60 [ 594.625293][T24080] ? sock_kzfree_s+0x50/0x50 [ 594.629891][T24080] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 594.636038][T24080] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 594.640884][T24080] ? __ip_append_data+0x215f/0x37c0 [ 594.646156][T24080] ? __ip_append_data+0x216e/0x37c0 [ 594.651357][T24080] __ip_append_data+0x2378/0x37c0 [ 594.656469][T24080] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 594.662445][T24080] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 594.668588][T24080] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 594.673434][T24080] ? ip_setup_cork+0x840/0x840 [ 594.678192][T24080] ? ip_setup_cork+0x479/0x840 [ 594.682947][T24080] ip_make_skb+0x1d3/0x480 [ 594.687797][T24080] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 594.692635][T24080] ? ip_flush_pending_frames+0x260/0x260 [ 594.698272][T24080] udp_sendmsg+0x2397/0x34f0 [ 594.702852][T24080] ? reacquire_held_locks+0x620/0x620 [ 594.708247][T24080] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 594.713090][T24080] ? udp_cmsg_send+0x340/0x340 [ 594.717854][T24080] ? mark_lock+0x191/0x1e00 [ 594.722348][T24080] ? __print_lock_name+0x1d0/0x1d0 [ 594.727462][T24080] udpv6_sendmsg+0xaaa/0x35f0 [ 594.732143][T24080] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 594.738202][T24080] ? xfrm6_policy_check+0x590/0x590 [ 594.743412][T24080] ? lockdep_hardirqs_on+0x95/0x140 [ 594.748605][T24080] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 594.754765][T24080] ? smack_socket_sendmsg+0x16e/0x530 [ 594.760123][T24080] ? __sanitizer_cov_trace_switch+0xb/0x100 [ 594.766005][T24080] ? tomoyo_socket_sendmsg_permission+0x28b/0x410 [ 594.772411][T24080] ? tomoyo_socket_bind_permission+0x360/0x360 [ 594.778548][T24080] ? __might_fault+0xb8/0x110 [ 594.783214][T24080] ? rcu_read_lock_sched_held+0x89/0x130 [ 594.788838][T24080] ? sock_rps_record_flow+0x12/0x370 [ 594.794112][T24080] ? inet_send_prepare+0x55/0x250 [ 594.799127][T24080] ? inet6_compat_ioctl+0x560/0x560 [ 594.804326][T24080] ____sys_sendmsg+0x5b9/0x910 [ 594.809086][T24080] ? __sys_sendmsg_sock+0x30/0x30 [ 594.814110][T24080] __sys_sendmmsg+0x57e/0x800 [ 594.818785][T24080] ? __ia32_sys_sendmsg+0x90/0x90 [ 594.823793][T24080] ? rcu_read_lock_sched_held+0x89/0x130 [ 594.829442][T24080] ? rcu_read_lock_sched_held+0x89/0x130 [ 594.835077][T24080] ? __lock_acquire+0x2b00/0x2b00 [ 594.840100][T24080] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 594.846086][T24080] ? print_irqtrace_events+0x220/0x220 [ 594.851529][T24080] ? vtime_user_exit+0x2b2/0x3e0 [ 594.856545][T24080] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 594.862515][T24080] __x64_sys_sendmmsg+0x9c/0xb0 [ 594.867355][T24080] do_syscall_64+0x44/0xd0 [ 594.871767][T24080] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 594.877733][T24080] RIP: 0033:0x7f4fb6455a39 [ 594.882138][T24080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.901741][T24080] RSP: 002b:00007f4fb39cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 594.910142][T24080] RAX: ffffffffffffffda RBX: 00007f4fb6558f60 RCX: 00007f4fb6455a39 [ 594.918098][T24080] RDX: 00000000000000aa RSI: 0000000020004d80 RDI: 0000000000000004 [ 594.926056][T24080] RBP: 00007f4fb39cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.934011][T24080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.941966][T24080] R13: 00007fff126c1a2f R14: 00007f4fb39cb300 R15: 0000000000022000 [ 594.968197][ T8531] usb 5-1: USB disconnect, device number 65 [ 594.983912][ T8141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.019854][ T8141] usb 3-1: config 0 descriptor?? 03:42:24 executing program 0: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xfffffffc, 0x90000000, 0x8, 0x2, 0x0, "e9dac792f370e4660802445076136ed1c7b8e6", 0x9, 0x4}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) 03:42:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 595.068330][ T8141] ldusb 3-1:0.0: Interrupt in endpoint not found [ 595.179388][ T20] usb 1-1: device descriptor read/all, error -71 03:42:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 595.273528][ T8141] usb 3-1: USB disconnect, device number 8 03:42:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:25 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) 03:42:25 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 595.576406][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd 03:42:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:25 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905000000000000000705"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:25 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x2, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 595.866510][ T8531] usb 5-1: new high-speed USB device number 66 using dummy_hcd 03:42:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020000000b0000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 595.966869][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.993705][ T20] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 596.040097][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.062307][ T20] usb 1-1: config 0 descriptor?? [ 596.127847][ T20] ldusb 1-1:0.0: Interrupt in endpoint not found [ 596.227732][ T8361] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 596.296738][ T8531] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.307044][ T8531] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.316497][ T8531] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 596.325548][ T8531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.336252][ T8531] usb 5-1: config 0 descriptor?? [ 596.346942][ T8526] usb 1-1: USB disconnect, device number 11 [ 596.586772][ T8361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 596.597269][ T8361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 596.605402][ T8531] usb 5-1: USB disconnect, device number 66 [ 596.622857][ T8361] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.645692][ T8361] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 596.661878][ T8361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.673781][ T8361] usb 3-1: config 0 descriptor?? [ 596.727538][ T8361] ldusb 3-1:0.0: Interrupt in endpoint not found 03:42:26 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x147, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x135, 0x1, 0x1, 0xff, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "435b86"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x9}, [@mdlm_detail={0xf7, 0x24, 0x13, 0x8, "e2685c83d4b8e9b516d92da8a872be64e224838f42866aca0737a3d0fbc8982d13dcba0ad2f9dc0f94e3bdf62744597fb3a95d3bf42dc6b9b183aa6043cf979098325cfccf6b5eef4fa236c283685eb6dd266d5e676c088960b65e2c93c7ecfc6012caa5d6d0a3e5d36ea1e7d0f32c65e6ff5640365eee72e444765c6cf54e1676761c21f6d180a59a832817367bafabd661ee6960175dbb0edbc61b636a61e0e0f8f7c4e8e262bd6f902b55b534fe82417a49a205f608c948a5bd2251eab93c467aa9cfd2f33999cc8b8cfe68941e9c8cbc53a6d71bd9f24d059e9a228fa3a8b4b4c3658119d5ef794171c760401171549dad"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x5, 0x8c}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x4, 0x4, 0x80, 0x20, 0x81}, 0x38, &(0x7f0000000040)={0x5, 0xf, 0x38, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x9, 0x0, 0x1, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x43c, 0xf0f, 0x401, [0x3f00, 0xff000f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x3, 0x800}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x8, 0x88, 0x6}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x463}}, {0xf3, &(0x7f0000000300)=@string={0xf3, 0x3, "1500880fbcb708b6f82c44c040f957b2f7589e4077c6c3ac91a8729142ab36a2c22c76b7108fb256dcd1bd1c943a7d42e6d8a3daabd1028bf0524a1241855d76131689ed831715f8ed775c3ad91678346ce7b87f5ae16ff92c6aaf90c5d6f3833b2cca607eb727b260a13104ebd304354914cd728a3715b579a7ab7e73de8550f92d73e466513e4ea09a0b1812555d738a0a911db343f986ef9a9e5b13e9a0179e169f14a3a97efe9f01ce24a3003c8f36b7366ae67a64713238b3304a3fa5714777465a012a866415e8328a70edf81b7e5f399f38db82fa52cb8ff823e59db815e8441ec480ff47129facc856ac2b3579"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x81, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "8a19cb"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x79, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0xf1, 0x25}, [@country_functional={0x12, 0x24, 0x7, 0x2, 0x2, [0x1, 0x8, 0x4621, 0x2471, 0x7, 0xfb]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x8, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x828, 0x0, 0x40, 0x90}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0x8, 0x8b}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0xf5, 0xff, 0x8, 0x20, 0x9f}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x1, [{0x8e, &(0x7f0000000600)=@string={0x8e, 0x3, "9741b3bcf9ca8a196797cc4aea1d5ea1280e396375163f465bee75dae5a6a91b63162c313086a7a33799a2af7f31ead0e7dae2733ef882383a41d78e90f36d0498767cb5eb1026b68e886d22508c7e19ff64b68368363c9aa3d7301709bceda3cc88f5b99f915b129d329602536e11e41fb31def7c2377004f5e4879a4be106b925dfbca33f0db4896fc027b"}}]}) 03:42:26 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x3, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:26 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, r0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013a16e400222000100000000090400000149284800090500000000000000070589cf5100"/50], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 596.933100][ T8361] usb 3-1: USB disconnect, device number 9 03:42:26 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) 03:42:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:26 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x4, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 597.228338][ T8531] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 597.237388][ T8141] usb 2-1: new high-speed USB device number 41 using dummy_hcd 03:42:27 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905000000000000000705"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:27 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x7, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 597.436192][ T8361] usb 5-1: new high-speed USB device number 67 using dummy_hcd 03:42:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 597.626965][ T8531] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.637496][ T8531] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 597.646940][ T8141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 597.649839][ T8531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.662755][ T8141] usb 2-1: can't read configurations, error -61 [ 597.696667][ T8531] usb 1-1: config 0 descriptor?? [ 597.767618][ T8531] ldusb 1-1:0.0: Interrupt in endpoint not found [ 597.796124][ T8361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.806939][ T8361] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 597.816376][ T8141] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 597.824315][ T8361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.835448][ T8361] usb 5-1: config 0 descriptor?? [ 597.866136][ T20] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 597.877700][ T8361] ldusb 5-1:0.0: Interrupt in endpoint not found [ 597.969940][T24171] udc-core: couldn't find an available UDC or it's busy [ 597.976964][T24171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 597.985225][T24171] udc-core: couldn't find an available UDC or it's busy [ 597.995479][T24171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 598.004710][ T8361] usb 1-1: USB disconnect, device number 12 [ 598.079126][ T8526] usb 5-1: USB disconnect, device number 67 [ 598.226109][ T8141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 598.233867][ T8141] usb 2-1: can't read configurations, error -61 [ 598.241216][ T8141] usb usb2-port1: attempt power cycle [ 598.276223][ T20] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 598.287913][ T20] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 598.298785][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.312260][ T20] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 598.322085][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.335520][ T20] usb 3-1: config 0 descriptor?? [ 598.398085][ T20] ldusb 3-1:0.0: Interrupt in endpoint not found [ 598.601853][ T8526] usb 3-1: USB disconnect, device number 10 [ 598.656321][ T8141] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 598.776074][ T8361] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 598.906155][ T8141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 598.913862][ T8141] usb 2-1: can't read configurations, error -61 [ 599.066086][ T8141] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 599.137624][ T8361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.156283][ T8361] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 599.176163][ T8361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.190561][ T8361] usb 1-1: config 0 descriptor?? [ 599.227399][ T8361] ldusb 1-1:0.0: Interrupt in endpoint not found [ 599.316242][ T8141] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 599.323830][ T8141] usb 2-1: can't read configurations, error -61 [ 599.332909][ T8141] usb usb2-port1: unable to enumerate USB device [ 599.427520][T24171] udc-core: couldn't find an available UDC or it's busy [ 599.427572][T24258] udc-core: couldn't find an available UDC or it's busy [ 599.434482][T24171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 599.441465][T24258] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 599.468518][ T8141] usb 1-1: USB disconnect, device number 13 03:42:29 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e220001000000000904"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1f, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x49, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9c, 0x10}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x33, 0xff, 0x56, 0xff, 0x80}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3e, 0x5, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xb0, 0xff, 0xec, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x3f, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x8, 0xf00f, 0x81, [0xffc000, 0xffc01e, 0x0, 0xff00c0]}]}, 0x4, [{0xce, &(0x7f00000003c0)=@string={0xce, 0x3, "d3544fa9ed6161184a18dd00ccfc8a2e646fe0491d0807309eec8bbae9e12e79b27ffef3b80ffe468570e823d82a8c47c5ae092c94366b457c1b391c9bb6a6ea5fab2ca592e56d5518868b877b8d7e76e88fbc9bd41a1090ea891076719ae5139f0174287cd40871f67be255463c867d09ee039950fd6082349ca35597138fe6c3ade46c30107afb3039ad7a5e856b2881e60f07d7dd1118dd46dc2cf13ce4e1b9196dca09d77856b9e4bbcce7b14da6261d686801b64e1d8f3fc3ab6e7f4e969d77f45f6cc54ccd335bfe7e"}}, {0x74, &(0x7f00000004c0)=@string={0x74, 0x3, "64a242c94dd8cab08fefd3899680c8f011b6bb620adf3a0729b63fadf4d9895abe93ebf762a9d530efd1498817d1a8fdae2aa1ec329faf08df00aeedfc9d9b17a397d3d90f3cb9394d28f9917f106e7f69aafb94798697bad8350133beb1b459d08be01f22c7a836b2c3212adc7f85206ed7"}}, {0xd6, &(0x7f0000000540)=@string={0xd6, 0x3, "44ddfb6c27131e2ecb17be0e9c00075abe31bad643861fe4c18df37dad1d3033d6156d09f9eda29628e88806bdaabcb4147f544e5f300ff729c5bfd38a053bec15c3d8f2d9573e9066ae6c4bc54d26d6f8ea4d741b7f8136b56783b226b89f099fe3208e130c81dce6c368a98421bdbf8a16abb63fb4ca9dc9aa01be3af4d6ad5520e1b392d9f5abad277141cd531dbebd1fb1c2f8c7011ecf976e3c4b6fdd97feb80714f84395e8d232c0731f387d8860278827fefca1f5c817943f5b4940159ff33c8ea929ede7d6ece6ec6d920e1f5ea8b5a5"}}, {0x60, &(0x7f0000000640)=@string={0x60, 0x3, "433b64557b02e4edc8479c1b05eec0447f99676815725ea584791392db812d941ba9e859798e103f2aa3205a6103241af9f378499beaf1fa0c5698c0f3bff1831bc0ac70fd1851739b3287d2ceb48453a1d71085b54dcf1f61d056ea2767"}}]}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x25a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x10, 0x1, {0x22, 0xc49}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x40, 0x6}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x7, 0x4, 0x66, 0x20, 0xb0}, 0xf9, &(0x7f0000000100)={0x5, 0xf, 0xf9, 0x2, [@ptm_cap={0x3}, @generic={0xf1, 0x10, 0xb, "06e2bb9bf1ae2c8251369c5a7e4068951a2eeeac5ae2ba51982e0190ee03c4090030224e9bfedc78644061cf89c917bd20c0326ccc6ef1db7f6aaa282a74e797b1ce24d20995a3b946f6e789c8448e04e8abfdaacde8a9317d68189ec3459affbd825cf23d5d70c3667a913f8fa68d5f67232a34aaacbad37e1537022b8ece67c6dd55ecc330b63778f1af28908a7097e8fef859096f1e2d984e5a0f34aef97f4013b0f09edf156ca78e8f143d6bc4f523a97b4d50cce335c40c15d8c7bd8e08c1f1f55d33071ece4308724e87a8247817bf27bbb062885a191480473c96ac88408e57790229ab2a09ddcbb2d3fa"}]}, 0x3, [{0x3e, &(0x7f0000000080)=@string={0x3e, 0x3, "61c76f3403802757db50dfbe38f0ad53f2991631805528bde8bb448f225e548161e0bc314d72b90e50a8740b1648e19641b3291f05307bc4a6395697"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x809}}, {0x13, &(0x7f0000000240)=@string={0x13, 0x3, "2d1973e6755f49cf6bcf42843021db5820"}}]}) 03:42:29 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x8, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:29 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) [ 599.836202][ T8361] usb 5-1: new high-speed USB device number 68 using dummy_hcd 03:42:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:29 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904000001492848000905000000000000000705"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:29 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0xa, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:29 executing program 1: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0xd, 0x9e, {0x9e, 0x4, "3621ebf2b0a79d3e6deb122496c12ee18dfdecec485c9560bada58f4e5e98a75d68a6983ecee0c12d219dd301be549c2f66ea31d69cdff039a6ef97a37ce2f6fc5e5a6338ef8205b0ccb4c09f9b85cdcf28193553496d1de6b4f85465630f820b08ae0843a2bceccb5407637e7bdcc4c3fe4f05f0bcfbbc37012ff423b8beb3cb7b4d41b9dc93cd94f21402982de29beac9808740aaa2c5a47696bc7"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000000fc0)=ANY=[@ANYBLOB="000f6700db0509000c100a1f20001000f001001410044b7041cc5ed6a66119e34589890ac757291410043f6649d86ae7d86113205635464153ecb324100a062600200000f0070d0000000000c0000000c0000030ff000040250533607e4e95ab3f91a6af7eebbf7b82fde18c746d5c176cffbcf6e76c6e59dc43"], &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6c, 0x60, 0x2d, 0x1, "1dbe0b7c", "6e037e30"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x1, 0x6, 0x6, 0x6, 0xff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x30, 0xfd, "7c2372e34c6e26fa78261999730be631d32f43355da73204d91d680ddc3578aeb0de98eb3ef0f9b09ffc3b1a594b470d63d7267a70753ce7a27d96c26c27e0d66dfd4cc9ed74b4add476c4d71f293abda09368f4cd6e7c3180dce12af155bb61cd2e19aba751e34f921051aea50c02bc63382caae309a112e84db3a394bd329b7077e35c9ae8ef47f9e78163bf450751ef03dff878c5bd5fcf9c1093b2a9a8b47b71829ab4224be6892e401c3f2f78fab1704f64ac5b01c496530dbed8c3a66d17c9f535f8ab802adde7f3cc68e58676711415ff96b3e5e9f34874005ceec080d5980eb5587b46c57b900c228097b494b2b09edfbe1dbc5fcc3a54ab0c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "174f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "bb12"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x7f}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) r3 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x550c376c8fda971c, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xa0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ptm_cap={0x3}]}}) syz_usb_control_io$uac1(r3, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x40, 0x23, 0x67, {0x67, 0x24, "7ee77724c7877f442c276aaa333fd6eac95bd204963ea7dd3a7abb41b2aa1b35e011cbcd3d55db6d427cbe860a947564cdc939739645c73523a4115db15fe3890f322a606161b4672a46742a597b30d066700e90d1277300186a1f929d71295f8b4256f58a"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000980)={0x0, 0xf, 0x6a, {0x5, 0xf, 0x6a, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xd6da, 0xf00f, 0x7, [0xc0f0, 0xff00, 0x3f00, 0xffc030, 0xdf80, 0xffc00f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7, 0x4d, 0x1000, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0xab, 0x4}, @ptm_cap={0x3}, @generic={0x29, 0x10, 0xa, "edc1f04d78f2315d9f1abcdfb14a713b9e4de7c7b136166471e74909f25f3442bc68754cdc6c"}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x60, 0xeb, 0x3f, "931f8176", "e7297457"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x0, 0x5, 0x80, 0x8, 0x8}}}, &(0x7f0000000f00)={0x84, &(0x7f0000000ac0)={0x40, 0xc, 0x53, "1211ce2ffe94a7b628771ff8be5bf782e113fde21be62a2ba497be61f825764f5cf6026a66e0f9bc285c2fca8de83cf80cb46e0036cb703966debe64cbd915d160d983d835c97c7444001da908e8c5e06713bc"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0xa0, 0x2}}, &(0x7f0000000c40)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000c80)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, '9E'}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000d40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "aff1"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000e40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000ec0)={0x40, 0x21, 0x1, 0x6}}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$char_usb(r2, &(0x7f0000000840)="4f2990e1766a67212dfdf9ad359e736521031c1ce5f3d13dfc163bce2e2dbf3eb6f652e99077bef7281d32684fb8602dcd41449f1ab33bab0f0bd532d9e9ce165aabc00ccf0b05536d8d4ffd97ef552a78dac8d073bd5fcd9930d3e8d2b17f146ed5c1ad3892a1b2cd916196a428fd8e98", 0x71) [ 599.985965][ T8141] usb 1-1: new high-speed USB device number 14 using dummy_hcd 03:42:29 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0xf, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:29 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x11, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 600.175989][ T8141] usb 1-1: device descriptor read/64, error 18 [ 600.196245][ T8361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 03:42:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000250000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220008006a0a00fe00000000850000002b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3b061773f00a2082ba8cedf8510e63f8cc924bbaf42e8df38ef3b217e0f6ae30b92ff1ae9e4ae83549f672dd503547197443cb949bdeaa4eed1ffc8759e99469eb514622440047769ad30fe700ac8412b54f2487dd2cf9d44d55d5566f854a32dba4ca288bf1a20e2bd45085680a42b798bcf65ed8de1073eaf6efeac7c87862d7c106c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 600.239735][ T8361] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.266125][ T20] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 600.303689][ T8361] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 600.339012][ T8361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.375882][ T7808] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 600.387199][ T8361] usb 5-1: config 0 descriptor?? [ 600.445998][ T8141] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 600.632354][ T8361] usb 5-1: USB disconnect, device number 68 [ 600.638721][ T8141] usb 1-1: device descriptor read/64, error 18 [ 600.696051][ T20] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.707859][ T20] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.718896][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 600.732433][ T20] usb 3-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 600.736155][ T7808] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.742214][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.756242][ T8141] usb usb1-port1: attempt power cycle [ 600.763398][ T20] usb 3-1: config 0 descriptor?? [ 600.792745][ T7808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 600.806277][ T7808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 600.817255][ T20] ldusb 3-1:0.0: Interrupt in endpoint not found [ 600.824637][ T7808] usb 2-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 600.837813][ T7808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.850348][ T7808] usb 2-1: config 0 descriptor?? [ 600.907778][ T7808] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 600.932957][ T7808] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 601.022655][ T20] usb 3-1: USB disconnect, device number 11 [ 601.205860][ T8141] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 601.296141][ T8141] usb 1-1: Invalid ep0 maxpacket: 34 [ 601.445900][ T8141] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 601.466293][T24340] udc-core: couldn't find an available UDC or it's busy [ 601.473246][T24340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 601.536105][ T8141] usb 1-1: Invalid ep0 maxpacket: 34 [ 601.541846][ T8141] usb usb1-port1: unable to enumerate USB device 03:42:32 executing program 0: r0 = memfd_secret(0x80000) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000001740)) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902220001000000000904"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x925, 0x8866, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfc, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x1ff, 0x68, 0x1, {0x22, 0x610}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2d, 0x6f, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0xd5af601b7771d2e1, 0x3, 0x9, 0x10}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x8a, 0xf7, 0x20, 0xff}, 0x22, &(0x7f0000000080)={0x5, 0xf, 0x22, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1f, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x1, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x40, 0xf000, 0x9}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc07}}, {0x47, &(0x7f0000000180)=@string={0x47, 0x3, "de6426f5e91ecd09f87198427ea9b56337638e9602bc0887c7af0db5faa0efff388d6070175ab54f217db7f7b9eeb075fd6a209e01b9547eca8f48096661a98f3b42a8348f"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}, {0x68, &(0x7f0000000240)=@string={0x68, 0x3, "f7878cce23eb4fd005b22567c6de59ee771e473845dfb58fc89aa5ea8991c5ffb966279efe69f905d2b90b136aea81eb0957194e17d23423a3ea6c7214efbb8acc58bcf03716318303a36db2d00c19a7cf781e622b1e1e1083b49e9ee382d1748fc6456b7cf0"}}, {0x3c, &(0x7f00000002c0)=@string={0x3c, 0x3, "11936e5a34efd0b0a21083c122a9612df3806762ea8b18eeb23b9f1d552514e1edb9320872ba08a89b859fe54bed6d3319cf7f4416be91a41ae5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x444}}, {0x6f, &(0x7f0000000340)=@string={0x6f, 0x3, "fc6bf28c2167f6df96ca70dbce8a6175f1eea4509909792f0d1c8c9235f6f3504d285d9bec9a7cfc47b8322976a611ec188900fca29f2d8404a6d158cec97465c3cc89816f58a47ce51fa56fe6a777667f7e67a5d7bb34b79ad6648e8b9fabc4a2b08edbae9794d012a3eeb8bb"}}, {0x102, &(0x7f00000003c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}]}) r1 = syz_usb_connect(0x3, 0x369, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xb6, 0xc0, 0x38, 0x10, 0x10b8, 0x2384, 0x304, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x357, 0x2, 0xa9, 0xda, 0x50, 0x90, [{{0x9, 0x4, 0xb9, 0x0, 0x1, 0x42, 0xa5, 0x5d, 0x44, [], [{{0x9, 0x5, 0x5, 0x4, 0x3e7, 0xa8, 0x7, 0x7, [@generic={0x58, 0x3, "b953b4b23cf15faf24e0dfa52fb792c5fc7049c039a2dc82714cc933d037e509ea49b7c81e811903d3116a18c5716637ff445a617db3642955e21a67ba1bfca90435885ce544dc7ff73b7b1e48bf371dcc5c28215047"}]}}]}}, {{0x9, 0x4, 0x2, 0x2, 0xa, 0xce, 0xc5, 0x21, 0x7, [], [{{0x9, 0x5, 0xc, 0x2, 0x440, 0x3f, 0x9c, 0x9, [@generic={0x2c, 0x30, "6a97ddd11aefc93253e461a99d95f8e37a031a28efea505235c9f47b27dce3a63f0f5e23b8ccc8dd753e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x9, 0x80, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}, @generic={0xd, 0xf, "5646d7ad6eb583abb417b5"}]}}, {{0x9, 0x5, 0x80, 0x13, 0x3ff, 0x3, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2c, 0xfb35}, @generic={0x86, 0x6, "f1fecf859256c73cc43f8fc67029bedb9f0e4a8bc7dff5a6ddb63f9676c1606481a63c1dad3223bcd29be40ee03988f1647a082c9105dd22635cef3e8462ff61e1f2283a47fab6812fd863a59a3e6c8b3236fbb5e59dced0c4bf76219abf6e53c6b095d9049708906da2a168f8b8fd79dd636773929afd000b7b9006b5e0dd7b8b4e3545"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x80, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xb5, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x5e6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x20, 0x4b, [@generic={0xbb, 0xa, "32a92457d6680ce0e2c8b748cf0408dcf85fa9dc08b9d0115b799eed039e29dce38d27edd6ee706e85d55ede7a38fdbb7fccbd0a147981cd088bc45f7417e7865aa287ec86e65b3c3215ac17c381ea1cd1402c1eacd947fba462ce4175eb1ebd07d6a46eb473f85ecd2814bfe2a5b8feb06de5232b0660d47bc1854384f76a24837a3c7e94f054c5cadac1f835f2e5e7e969b3e37efba7bb3bdc19f54fca97ec248fc96b11efd198fa2b96f06cb1d13874014f78077832f324"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x2, 0xbd, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x5}]}}, {{0x9, 0x5, 0x1a, 0x10, 0x20, 0x7, 0x40, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xe9, 0xcb}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x8, 0x1, 0x4, [@generic={0xc1, 0x10, "beec2ac225844a7add98a59506f4c97735670147f003f4df711bd3736674a9ef12675a625f4c987bbbcd2eb50e2764b0f7c12c8ddd23beddee3fb7df97753a8575ff9145ab24bcb1639606f9c448fbbe19ebbb67361242b334d83600f8cd49b6e82b2c73460a8e27f0d7c601f2c23742b241cc364301e63146d09a3c729c06105696e871278c02aefbc033546cdcac8896b614a883935b3eb3243973508650863a842ea8189b589af0b5153ca92b2fef220c6a67e45664025179320834d759"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0xfff}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x0, 0x0, 0xff, 0x68, 0x9}, 0x63, &(0x7f00000009c0)={0x5, 0xf, 0x63, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x20, 0x0, 0x2, 0xf, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0xffff, 0xf0f, 0x7, [0x60, 0xc0f0, 0x0, 0xc000, 0x3f00]}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0xf000, 0xffff, [0xff, 0xf, 0xf0, 0x18000, 0xc000, 0x0]}, @generic={0x3, 0x10, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x7, 0x645d, 0x5}]}, 0xa, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1c09}}, {0x97, &(0x7f0000000a80)=@string={0x97, 0x3, "23b4f6bdb809ed1dad84877bb0c3efd56680d57ca781ef8b3515511e94b0eda71e6cdfc07ba6d7f4adc35abcea15f983ac3f6cf66214aa7d6b6e3fbd34a030c8e91f54380872192998f12d5f9b0a4c206e2b2d306bac2e286a193ab853125d70f6e07411ea4fef482040930f7c376e5657314c33fe0328f9ae460e1911067dfc2cb0f51ab74c8af5fe9babdbd4024d0c8c9e389c90"}}, {0x98, &(0x7f0000000b40)=@string={0x98, 0x3, "2332d1d3a71fc307f131fadc190de4d7c2ba2411c4336c33515554d04f7a7125c99d3862a7ba307f90baa7d9f880fd2633b9923252b859dee1aabb4e384066eb4ed548f144c0f39f91a6d741e32ffeacde31ab20552cb4c68ddab0449eb48df834299e1f09ac39f89a076bf2168894548c12131eb57cd4588c4fe55513a11b5964967aecbf115dea9e71f02f613094d72f5c2c948192"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x41f}}, {0x6f, &(0x7f0000000c40)=@string={0x6f, 0x3, "001aa31ae60741a63abc831928b57d892ab1db1c3552552ac4dfac491b808f9ef3e968b86c628ac551acf6cbeecfefc30286c55a1a9a0623e66e52d91c1442f38e394e8e7213344ba45ae9be4a8fecc051015759374e7288888f5616e41cb70fbf0663c2c5386d8526de8ef910"}}, {0x65, &(0x7f0000000cc0)=@string={0x65, 0x3, "9c35819f0b7a0bb841b56a9dff74880ca6f58f0bf6424116f31b363cf3bb134d06d94a87e686e584704ab6081b1d47c8e6df597bbbe9bcc73787963edc0bbee661bb866a29db55d429be83df771cbb1ea88c8fafc06575fdfe427d729c09a7f9924e96"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x80a}}, {0x5f, &(0x7f0000000d80)=@string={0x5f, 0x3, "7994313b21c1780284f23d4ad763edf45b1a078cf2c656384a9d0b858a7b6b439c8d1fd6f798c0c1ae9b7e7e152786e93454b1a06855debd7644dab0885f638e5665fba740ea4813e2ceccc9f79f080b4fb7d83d1eec37076dd39b8100"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0xfcff}}, {0xba, &(0x7f0000000e40)=@string={0xba, 0x3, "9f8d464787e06efedda433d13bb17f2badb9046729b9ceaaf4f131204357a3aa90faa880aed64a17aaca528331f1659df0d20db7642afda4356b560d2c62131c655aa889d5ab310ff1bf7bfd4dc1572941453eecca7d4b0dcc19ca0206fa7c003d320f654951b3f6f24a16f26cf8b4587a0de444059f610fdc928e807e8d5c5ad531ee36a35ba23140cde2dcf8c20015ba454d78b3a23b3a420aa14c7e160a770599b79fb820ee2148ace6ea94ffa322bdd32a7db1c3b1c2"}}]}) syz_usb_control_io(r1, &(0x7f0000001240)={0x2c, &(0x7f0000000fc0)={0x40, 0x9, 0x83, {0x83, 0x11, "e34b8abe269a71f23a320b0e5caf88545e5dd960efe528695a6345ddec76a2751b787c987698f838e26ee550049f863c76e99a098ba9f79c34cb16d8347d3aec3405a4112afbbf39c3d4fc6de66f1980bf19d97c58b9e731d22d1da743f85bcf0d67729981678a3d44c4013e753e001282bfe6bcb6b749e69efc8653ed002bfac6"}}, &(0x7f0000001080)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "8bb734c49d179ebf483f4eed10820dfb842b04897bb63d9c0e247301517883058f9448f382006073fd550ddc2bd97eda370806f508f181ba0779c8101f8a08671316e658d4a2cf2a3ee7c272e7ef05422bad6183b4a65d4f8848e4ebd4659deffc75e46da7d33d35ea2e8b406650e960e9f45ac1bc8dcf70a99e08e433a96cadd1394a041afb5216bb974972fb4a249b986f34b7a5a81804a91aa2f4d796beafa44724541ead93650bd4b03c39f49afb8a3682bad1d2445fb98ec868b0f042d5470322be46821bd00a59c22c9e64d3d8973eb7d8fb82561bc4ca21286eb73acefdc2e25b8c8036995e57774d51baac643556"}}, &(0x7f0000001180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000011c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x60, 0x80, 0x6, "f621fa25", "bba40c16"}}, &(0x7f0000001200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x1f, 0xd4, 0x1, 0x6d23, 0x9}}}, &(0x7f0000001680)={0x84, &(0x7f0000001280)={0x40, 0x0, 0x1b, "b6255d86f57232a76dc2bb9fbb0305b2c1eab9e410343e18468869"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0xa0, 0x10}}, &(0x7f00000013c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001400)={0x40, 0x9, 0x1, 0x97}, &(0x7f0000001440)={0x40, 0xb, 0x2, "ee5f"}, &(0x7f0000001480)={0x40, 0xf, 0x2}, &(0x7f00000014c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001500)={0x40, 0x17, 0x6}, &(0x7f0000001540)={0x40, 0x19, 0x2, "5ae1"}, &(0x7f0000001580)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000015c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001600)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001640)={0x40, 0x21, 0x1, 0x3}}) 03:42:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:32 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x1c, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:32 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff950000000109022200010000000009"], 0x0) 03:42:32 executing program 2: syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf"], 0x0) io_uring_setup(0x6d61, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:42:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 602.671976][T24357] ------------[ cut here ]------------ [ 602.684885][T24357] refcount_t: addition on 0; use-after-free. [ 602.699925][T24357] WARNING: CPU: 0 PID: 24357 at lib/refcount.c:25 refcount_warn_saturate+0x13d/0x1a0 [ 602.759205][T24357] Modules linked in: [ 602.772769][T24357] CPU: 0 PID: 24357 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 602.793668][T24357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.817182][T24357] RIP: 0010:refcount_warn_saturate+0x13d/0x1a0 [ 602.844554][T24357] Code: c7 80 e1 b3 8a 31 c0 e8 31 8e 3b fd 0f 0b eb a3 e8 b8 79 71 fd c6 05 43 86 b6 09 01 48 c7 c7 e0 e1 b3 8a 31 c0 e8 13 8e 3b fd <0f> 0b eb 85 e8 9a 79 71 fd c6 05 26 86 b6 09 01 48 c7 c7 40 e2 b3 [ 602.882365][T24357] RSP: 0018:ffffc90003d9fed0 EFLAGS: 00010246 [ 602.896985][T24357] RAX: cbe1ca16509c0500 RBX: 0000000000000002 RCX: 0000000000040000 [ 602.916008][T24357] RDX: ffffc90002cf1000 RSI: 0000000000003dd8 RDI: 0000000000003dd9 [ 602.924285][T24357] RBP: 0000000000000002 R08: ffffffff81695fe2 R09: ffffed10173857a8 [ 602.933628][T24357] R10: ffffed10173857a8 R11: 0000000000000000 R12: ffff8880a70dc780 [ 602.941386][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 602.942348][ T7808] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 602.955919][T24357] R13: ffff88808c855e90 R14: 0000000000000003 R15: dffffc0000000000 [ 602.978547][T24357] FS: 00007fd26f691700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 602.989724][T24357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.998478][T24357] CR2: 0000557443141498 CR3: 000000009fac1000 CR4: 00000000003506f0 [ 603.008578][T24357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 603.008840][ T8531] usb 2-1: USB disconnect, device number 45 [ 603.022708][ T2973] usb 1-1: new high-speed USB device number 18 using dummy_hcd 03:42:32 executing program 1: syz_usb_connect(0x1, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff9500000001090222000100000000090400000149284800090500000000000000070589cf51"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x5, 0x16c, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x96, 0x54, 0xf9, 0x8, 0x17ef, 0x3062, 0x3664, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15a, 0x1, 0x0, 0x1, 0x90, 0x3, [{{0x9, 0x4, 0x7f, 0x0, 0x5, 0xff, 0x40, 0x8d, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0xf938, 0x59}, [@processing_unit={0x9, 0x24, 0x7, 0x6, 0x1, 0x1f, "af02"}]}], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x14, 0xfb, 0x7f, [@generic={0xab, 0x9, "7677643df794e0274268345a198b7afc1eb16596cd7cf0e27c3c6081f1d0b950aa4f44dd9c30c06c5e9d09edbd9b2e733c1e932dd171a3400d5fcd8e1e006b1e7e96068401dc1f6386b80ef0bf28667d7460bd5c7c5d32da7e26f920c61801e3e838b266c4120868169cb76667131eb141aa6fc0446d4189676ad1118fe36a3d9dbde1d032b84c2292826bbd24e4645e99b36f93298c61c3143d39a8c7a18bde26dd24c532b1d21971"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x96, 0x64}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x6, 0x0, 0x0, [@generic={0x49, 0x23, "819a494962f3a293d9f069ff26aa318199d08c6de12bc3d218f0f91b7ec3da77b7c7d4664bbac344264910782fd7b6c3bbbb92f11f79f434fbcd848e02658aef1f14c4805cf402"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x17, 0x40, 0x40}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x81, 0x3f, 0x80}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x40, 0x81, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x61, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x47, 0x80}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0xbb, 0x4, 0x8, 0x7}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7, 0x6, 0xfff, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x1}, @ptm_cap={0x3}]}, 0xa, [{0x55, &(0x7f0000000280)=@string={0x55, 0x3, "11c3589e00ac9bd6c45d795a77052250109f4c0b5c1c84f0aa217ae02975c699977ff278b897d1cbfad2774c962f82766a631cf006c709f9863ce83e8eb89af5811a8d467facd2781f287a711374cce0ef9131"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2001}}, {0xcf, &(0x7f0000000300)=@string={0xcf, 0x3, "207b7e0ec44f6515805794badef11f84734aa0536ca7c912a1c17701d4c05835f7a87728e529364b281834ff2d0a3dd47eb9c756549743422c46acaa43ca1210067f4370f5ab0548ba590b42f56925ec992eeb6a216eec7ab958da40eff7bec448a1c043332e770512f73ec5a3d676621a00a8945003ed8e1fc278c7beddc80802aa2bc8daf5c01e213ec67cb6c9b861da046cd6f265b538604a0762e6e5d08acf8daa8e096837a4a5c4eab6f2018254a7cc6da6f99bdab5a29aed95de14a3c16716f2a3793d755c422f212cbb"}}, {0xe9, &(0x7f0000000400)=@string={0xe9, 0x3, "5c6997e372d31595a6728a3f21fd7a3d39ae8a66007ef7e1b04af8a3d080d814e9b6165bca0daf38020f478e3593d1c1e327aaac071fcea1eeb0ba1f0c70385c08b8dfd989eb99db6ba45a78946eac6e323640a835c67a2d431fc2106a6b3bd5d53cb6c2425ec0014ec8767116b26571e059750adf37cab85405c1b2464d81b57605b70ac03f5ede3178609dbe0c06348ca2730baa317d596f3e1cc7bc8bbd4a8cc9b46656ab51d972e33e654cc713d49dd9707e1181f91f97829660a2bee408cec53f3e46dc8ca6535f6fea16c3bac2ba1e9e88baaf78eeca6bf61dccae36d687313e6def4fbc"}}, {0x38, &(0x7f0000000500)=@string={0x38, 0x3, "49698aae235a1b7d1cdd3946d13967a3adea8b009eaa9f5d61024b756319ef01a01a9efae4bd3e6059aff7fb01d629ea9e37a1a865ac"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3801}}, {0xff, &(0x7f00000005c0)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40e}}]}) read$char_usb(r0, 0x0, 0x0) 03:42:32 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x30, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:42:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 603.027073][T24357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 603.058757][ T8531] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 603.086368][T24357] Call Trace: [ 603.094708][T24357] __se_sys_memfd_secret+0x2ea/0x350 [ 603.120350][T24357] do_syscall_64+0x44/0xd0 [ 603.129990][T24357] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 603.149336][T24357] RIP: 0033:0x7fd27211ba39 03:42:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 03:42:32 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0xa9, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 603.162308][T24357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 603.208760][T24357] RSP: 002b:00007fd26f691188 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 603.219605][T24357] RAX: ffffffffffffffda RBX: 00007fd27221ef60 RCX: 00007fd27211ba39 [ 603.229982][T24357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 603.247633][T24357] RBP: 00007fd272175e8f R08: 0000000000000000 R09: 0000000000000000 [ 603.281176][T24357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.306334][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 03:42:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) [ 603.326283][T24357] R13: 00007ffcf4f8e62f R14: 00007fd26f691300 R15: 0000000000022000 [ 603.339083][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 603.366153][T24357] Kernel panic - not syncing: panic_on_warn set ... [ 603.372747][T24357] CPU: 0 PID: 24357 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 603.381513][T24357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.385639][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 603.391570][T24357] Call Trace: [ 603.391583][T24357] dump_stack_lvl+0x1dc/0x2d8 [ 603.391613][T24357] ? show_regs_print_info+0x12/0x12 [ 603.391633][T24357] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 603.391666][T24357] panic+0x2d6/0x810 [ 603.424033][T24357] ? __warn+0x13e/0x270 [ 603.428269][T24357] ? nmi_panic+0x90/0x90 [ 603.432547][T24357] __warn+0x26a/0x270 [ 603.436545][T24357] ? refcount_warn_saturate+0x13d/0x1a0 [ 603.442103][T24357] ? refcount_warn_saturate+0x13d/0x1a0 [ 603.444542][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.447652][T24357] report_bug+0x1b1/0x2e0 [ 603.447683][T24357] handle_bug+0x3d/0x70 [ 603.447703][T24357] exc_invalid_op+0x16/0x40 [ 603.447720][T24357] asm_exc_invalid_op+0x12/0x20 [ 603.447737][T24357] RIP: 0010:refcount_warn_saturate+0x13d/0x1a0 [ 603.447757][T24357] Code: c7 80 e1 b3 8a 31 c0 e8 31 8e 3b fd 0f 0b eb a3 e8 b8 79 71 fd c6 05 43 86 b6 09 01 48 c7 c7 e0 e1 b3 8a 31 c0 e8 13 8e 3b fd <0f> 0b eb 85 e8 9a 79 71 fd c6 05 26 86 b6 09 01 48 c7 c7 40 e2 b3 [ 603.447773][T24357] RSP: 0018:ffffc90003d9fed0 EFLAGS: 00010246 [ 603.447792][T24357] RAX: cbe1ca16509c0500 RBX: 0000000000000002 RCX: 0000000000040000 [ 603.447806][T24357] RDX: ffffc90002cf1000 RSI: 0000000000003dd8 RDI: 0000000000003dd9 [ 603.447817][T24357] RBP: 0000000000000002 R08: ffffffff81695fe2 R09: ffffed10173857a8 [ 603.447829][T24357] R10: ffffed10173857a8 R11: 0000000000000000 R12: ffff8880a70dc780 [ 603.447841][T24357] R13: ffff88808c855e90 R14: 0000000000000003 R15: dffffc0000000000 [ 603.447861][T24357] ? wake_up_klogd+0xb2/0xf0 [ 603.447888][T24357] __se_sys_memfd_secret+0x2ea/0x350 [ 603.476151][ T2973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.478581][T24357] do_syscall_64+0x44/0xd0 [ 603.478613][T24357] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 603.485277][ T2973] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff [ 603.504349][T24357] RIP: 0033:0x7fd27211ba39 [ 603.504381][T24357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 603.504394][T24357] RSP: 002b:00007fd26f691188 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 603.504413][T24357] RAX: ffffffffffffffda RBX: 00007fd27221ef60 RCX: 00007fd27211ba39 [ 603.504426][T24357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 603.504437][T24357] RBP: 00007fd272175e8f R08: 0000000000000000 R09: 0000000000000000 [ 603.504448][T24357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.504460][T24357] R13: 00007ffcf4f8e62f R14: 00007fd26f691300 R15: 0000000000022000 [ 603.510874][T24357] Kernel Offset: disabled [ 603.666721][T24357] Rebooting in 86400 seconds..