r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 551.946330][ T2494] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 552.196263][ T2494] usb 1-1: Using ep0 maxpacket: 16 [ 552.316563][ T2494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.333371][ T2494] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.353089][ T2494] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 552.365957][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.386556][ T2494] usb 1-1: config 0 descriptor?? [ 552.867693][ T2494] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 552.886915][ T2494] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0010/input/input24 [ 552.968621][ T2494] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 553.270457][ T2693] usb 1-1: USB disconnect, device number 29 21:56:36 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:36 executing program 3: set_mempolicy(0x2, &(0x7f0000000040)=0xfffffffffffffff6, 0x4) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') 21:56:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:36 executing program 5: request_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, &(0x7f0000000080)=')Wd\f\xc9\a\x15\xeb\x1dn\x16t\xe3\xf0\xa7\xba)G\xadR\xc2\n\x0e\xb0{\xd2qo\xc1~\xf4\xc0\x8f\xbc\x19B1\x9d\xea\x8b\x13\x10\xdb\xad3>r t`\xa0\xae\x8cl.\xae\xaa\xc2', 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0xfffffffffffffe3b) creat(0x0, 0x0) creat(0x0, 0x98) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x40) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240), 0x40) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 21:56:36 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [], "4c94cba77678fab46aa4"}, 0x4a) 21:56:36 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b9b073b00000000000000000000000000000000000900000000000000000000000000000000000058"], 0x4a) 21:56:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:36 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) 21:56:36 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:37 executing program 1: [ 554.052827][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.093479][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.106434][ T23] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 554.124045][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.141886][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.158176][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.169587][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.186040][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.193586][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.209601][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.226236][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.233721][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.249009][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.261102][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.272387][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.282764][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.292573][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.302350][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.312013][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.322353][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.330129][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.338585][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.349216][ T2693] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.356042][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 554.364045][ T2693] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on sz1 [ 554.401318][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.412934][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.427263][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.434656][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.446826][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.454213][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.465037][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.473203][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.476462][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.480963][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.501129][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.508485][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.508531][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.508544][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.523358][ T23] usb 1-1: config 0 descriptor?? [ 554.536347][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.557104][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.564577][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.579546][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.594493][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.603267][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.610935][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.618560][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.626290][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.633833][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.641505][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.649171][ T2693] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 554.661128][ T2693] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on sz1 [ 555.017605][ T23] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.035638][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0013/input/input25 [ 555.126359][ T23] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 555.425517][ T2494] usb 1-1: USB disconnect, device number 30 21:56:38 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:38 executing program 5: 21:56:38 executing program 1: 21:56:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:38 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:38 executing program 3: 21:56:38 executing program 1: 21:56:39 executing program 5: 21:56:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x37) syz_open_procfs(0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) tkill(r1, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 21:56:39 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:39 executing program 5: 21:56:39 executing program 1: 21:56:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:39 executing program 5: 21:56:39 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:39 executing program 1: [ 556.305848][ T2494] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 556.555820][ T2494] usb 1-1: Using ep0 maxpacket: 16 [ 556.676837][ T2494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.687849][ T2494] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 556.701017][ T2494] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 556.710369][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.719664][ T2494] usb 1-1: config 0 descriptor?? [ 557.197118][ T2494] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 557.211139][ T2494] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0014/input/input26 [ 557.300912][ T2494] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 557.602298][ T8150] usb 1-1: USB disconnect, device number 31 21:56:41 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:41 executing program 3: 21:56:41 executing program 5: 21:56:41 executing program 1: 21:56:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:41 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:41 executing program 3: 21:56:41 executing program 1: 21:56:41 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:41 executing program 5: 21:56:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:41 executing program 3: [ 558.475573][ T2494] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 558.715564][ T2494] usb 1-1: Using ep0 maxpacket: 16 [ 558.836611][ T2494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.847515][ T2494] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 558.860631][ T2494] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 558.869987][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.879343][ T2494] usb 1-1: config 0 descriptor?? [ 559.357176][ T2494] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 559.374607][ T2494] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0015/input/input27 [ 559.469961][ T2494] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 559.759411][ T2494] usb 1-1: USB disconnect, device number 32 21:56:43 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:43 executing program 5: 21:56:43 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) pipe(0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x0) connect$inet6(r4, 0x0, 0x0) 21:56:43 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:43 executing program 3: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000400)={0x77359400}) 21:56:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:43 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:43 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 21:56:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES32], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000000580), 0x10000005c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r3, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x4139569a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x80000011, 0x0) 21:56:43 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:43 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf}, 0xf) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) [ 560.625330][ T8150] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 560.895568][ T8150] usb 1-1: Using ep0 maxpacket: 16 [ 561.037341][ T8150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.048408][ T8150] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 561.061614][ T8150] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 561.070776][ T8150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.080270][ T8150] usb 1-1: config 0 descriptor?? [ 561.577159][ T8150] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 561.590357][ T8150] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0016/input/input28 [ 561.669323][ T8150] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 561.980241][ T2494] usb 1-1: USB disconnect, device number 33 21:56:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:45 executing program 5: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005040), 0x15f, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 21:56:45 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) dup3(r0, r1, 0x0) 21:56:45 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 562.552123][T28954] input: syz0 as /devices/virtual/input/input29 [ 562.599419][ T2421] blk_update_request: I/O error, dev loop11, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.611466][ T2421] blk_update_request: I/O error, dev loop11, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.623629][T28965] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 21:56:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 562.673554][ T2421] blk_update_request: I/O error, dev loop11, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.684959][T28965] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 562.703522][T28965] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 562.714547][T28965] UDF-fs: Scanning with blocksize 512 failed 21:56:45 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 562.721378][ T2421] blk_update_request: I/O error, dev loop11, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.734499][ T2422] blk_update_request: I/O error, dev loop11, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.736000][T28985] input: syz0 as /devices/virtual/input/input30 [ 562.749617][T28965] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 21:56:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) 21:56:45 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) [ 562.819099][ T2421] blk_update_request: I/O error, dev loop11, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.833902][T28965] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 562.858376][T28965] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 562.867049][T28965] UDF-fs: Scanning with blocksize 1024 failed [ 562.873611][ T2421] blk_update_request: I/O error, dev loop11, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.886866][ T2422] blk_update_request: I/O error, dev loop11, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.899224][T28965] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 [ 562.925260][ T5] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 562.936748][ T2422] blk_update_request: I/O error, dev loop11, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.948402][T28965] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 562.969330][T28965] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 562.981806][T28965] UDF-fs: Scanning with blocksize 2048 failed [ 562.991929][ T2422] blk_update_request: I/O error, dev loop11, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 563.011808][T28965] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 21:56:46 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:46 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='iso9660\x00', 0x0, 0x0) [ 563.023030][T28965] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 563.032985][T28965] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 563.040958][T28965] UDF-fs: Scanning with blocksize 4096 failed [ 563.047262][T28965] UDF-fs: warning (device loop11): udf_fill_super: No partition found (1) [ 563.057757][T28958] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 [ 563.105937][T28958] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 563.126188][T28958] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 563.134246][T28958] UDF-fs: Scanning with blocksize 512 failed [ 563.143811][T28958] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 [ 563.155098][T28958] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 563.175336][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 563.185054][T28958] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 563.196170][T28958] UDF-fs: Scanning with blocksize 1024 failed [ 563.203463][T28958] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 [ 563.214612][T28958] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 563.225185][T28958] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 563.232887][T28958] UDF-fs: Scanning with blocksize 2048 failed [ 563.239904][T28958] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 21:56:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0xa0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}]}) 21:56:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, 0x0, 0x2d, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f00000001c0)="ee", 0x1) [ 563.249761][T28958] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 563.259894][T28958] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 563.267680][T28958] UDF-fs: Scanning with blocksize 4096 failed [ 563.273730][T28958] UDF-fs: warning (device loop11): udf_fill_super: No partition found (1) [ 563.297667][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.312153][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 563.360001][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 563.391295][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.419052][ T5] usb 1-1: config 0 descriptor?? [ 563.886532][ T5] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 563.904613][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0017/input/input31 [ 563.989310][ T5] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 564.302785][T27672] usb 1-1: USB disconnect, device number 34 21:56:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:47 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 21:56:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) 21:56:47 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:56:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:47 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:47 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/timer\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 21:56:47 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000740)=ANY=[], 0x65) 21:56:47 executing program 5: prctl$PR_GET_NAME(0x10, &(0x7f0000000440)=""/62) 21:56:47 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:48 executing program 5: r0 = socket(0x25, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 565.175229][ T23] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 565.415123][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 565.545538][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.556503][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 565.569771][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 565.579048][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.588596][ T23] usb 1-1: config 0 descriptor?? [ 566.056721][ T23] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 566.074173][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0018/input/input32 [ 566.164331][ T23] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 566.473088][ T23] usb 1-1: USB disconnect, device number 35 21:56:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:56:49 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:56:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x3}]}, 0x3c}}, 0x0) preadv(r0, 0x0, 0xffffffffffffffcf, 0x200000) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)=""/249, 0x37, 0xf9, 0x1}, 0x20) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(0x0, 0x149042, 0x0) syz_open_procfs(0x0, 0x0) 21:56:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x9, &(0x7f0000000140)=ANY=[@ANYRES64=r1], &(0x7f0000000080)=0x3f8) 21:56:50 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:56:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 21:56:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:56:50 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 567.317616][ T5] usb 1-1: new high-speed USB device number 36 using dummy_hcd 21:56:50 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 21:56:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 567.585308][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 567.755721][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.785830][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.800488][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 567.811374][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.826097][ T5] usb 1-1: config 0 descriptor?? [ 568.316603][ T5] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 568.333494][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input33 [ 568.421642][ T5] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 568.726076][ T5] usb 1-1: USB disconnect, device number 36 21:56:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:52 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) 21:56:52 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r4, 0x8b8e0eb13081c495, 0x0, 0x0, {{0x1, 0x0, 0x5901}, {0x0, 0x4107}, {0xa, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 21:56:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:56:52 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 21:56:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 21:56:52 executing program 3: syz_mount_image$minix(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x4c4) sendfile(r0, r0, &(0x7f0000000480), 0xa198) 21:56:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r2, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005500)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1, 0xffff}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:56:52 executing program 2: 21:56:52 executing program 2: 21:56:52 executing program 3: [ 569.635962][ T5] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 569.910816][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 570.035181][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.058900][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.088289][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 570.114938][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.133460][ T5] usb 1-1: config 0 descriptor?? [ 570.617308][ T5] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 570.633829][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input34 [ 570.717540][ T5] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 571.019985][ T5] usb 1-1: USB disconnect, device number 37 21:56:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:54 executing program 5: 21:56:54 executing program 2: 21:56:54 executing program 3: 21:56:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:56:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:54 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 21:56:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x141404, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x7c, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\xf4^e&++\x00'}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 21:56:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a022, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) set_tid_address(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x400, 0x20001000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x40) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xfffffffffffffea1) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000180)={{0x4, @addr=0x4}, "f555528696fa7a47a3b720e75826327768716a4d235196f3f6530ab80bb07d6b", 0x4}) clone3(&(0x7f0000001680)={0x8800, 0x0, 0x0, 0x0, {0x29}, 0x0, 0xffffffffffffff78, 0x0, 0x0}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 571.743941][ T29] audit: type=1804 audit(1593035814.719:7253): pid=29271 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir242895963/syzkaller.4yf2vy/884/bus" dev="sda1" ino=16375 res=1 21:56:54 executing program 5: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0xfe0e, 0x0}}], 0x2, 0x0) [ 571.855815][ T29] audit: type=1804 audit(1593035814.779:7254): pid=29275 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir242895963/syzkaller.4yf2vy/884/bus" dev="sda1" ino=16375 res=1 [ 571.884929][T27672] usb 1-1: new high-speed USB device number 38 using dummy_hcd 21:56:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 572.124829][T29287] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 572.137825][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 572.162782][T29288] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:56:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 572.265319][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.356033][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.443682][T29292] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 572.458955][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 572.502313][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.547177][T27672] usb 1-1: config 0 descriptor?? [ 572.600541][T29274] debugfs: Directory '29274-5' with parent 'kvm' already present! [ 572.739126][ T0] NOHZ: local_softirq_pending 08 [ 573.046444][T27672] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 573.062955][T27672] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001B/input/input35 [ 573.149383][T27672] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 573.455439][ T2474] usb 1-1: USB disconnect, device number 38 21:56:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:56:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:56:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x141404, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x7c, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\xf4^e&++\x00'}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 21:56:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x141404, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40801) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r3, 0x100, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}]}, 0x70}}, 0x40) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x5890, 0x0) getpid() umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 21:56:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 574.030427][T29333] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:56:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:56:57 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x7fff) [ 574.273851][T29352] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:56:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 574.403377][ T8150] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 574.435349][T29355] new mount options do not match the existing superblock, will be ignored 21:56:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 574.493517][T29355] new mount options do not match the existing superblock, will be ignored 21:56:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006219"], 0x20}}, 0x0) r0 = fsopen(&(0x7f0000000140)='gfs2\x00', 0x0) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x3, &(0x7f0000000000)='ro\x00', &(0x7f0000000040), 0x0) 21:56:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 574.664792][ T8150] usb 1-1: Using ep0 maxpacket: 16 [ 574.786010][ T8150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.803538][ T8150] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 574.825685][ T8150] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 574.840099][ T8150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.852363][ T8150] usb 1-1: config 0 descriptor?? [ 575.336273][ T8150] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 575.349516][ T8150] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001C/input/input36 [ 575.431662][ T8150] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 575.757009][ T23] usb 1-1: USB disconnect, device number 39 21:56:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:56:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_names\x00') 21:56:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:56:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x17, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 21:56:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 576.314859][T29400] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:56:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:56:59 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) 21:56:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:56:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:56:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 576.451005][T29413] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:56:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x21, 0x0, 0x0) 21:56:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:56:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21:56:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:56:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') socket$bt_cmtp(0x1f, 0x3, 0x5) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:56:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:56:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_names\x00') [ 576.894220][T29428] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:56:59 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:57:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') socket$bt_cmtp(0x1f, 0x3, 0x5) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:57:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:00 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:57:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:00 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:00 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:57:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') socket$bt_cmtp(0x1f, 0x3, 0x5) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:57:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_names\x00') 21:57:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:00 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x100000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 21:57:00 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:57:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) get_robust_list(0x0, &(0x7f00000002c0)=&(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f0000000300)=0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000001b80)='asymmetric\x00', 0x0) 21:57:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_names\x00') 21:57:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:57:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x83, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x50) 21:57:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:57:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) dup2(r2, r0) [ 578.384595][T27672] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 578.664498][T27672] usb 1-1: device descriptor read/64, error 18 [ 579.054453][T27672] usb 1-1: device descriptor read/64, error 18 [ 579.324426][T27672] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 579.605971][T27672] usb 1-1: device descriptor read/64, error 18 [ 579.994366][T27672] usb 1-1: device descriptor read/64, error 18 [ 580.115063][T27672] usb usb1-port1: attempt power cycle [ 580.834323][T27672] usb 1-1: new high-speed USB device number 42 using dummy_hcd 21:57:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:04 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 21:57:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:04 executing program 2: [ 581.025739][T27672] usb 1-1: device descriptor read/8, error -61 21:57:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:04 executing program 2: 21:57:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:57:04 executing program 2: unshare(0x40000000) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) keyctl$revoke(0x3, r3) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x1, r4) keyctl$reject(0x13, r3, 0xfe3, 0x80000001, r4) socket(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3a) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xcb, &(0x7f0000000000), 0x3) [ 581.234490][T27672] usb 1-1: device descriptor read/8, error -71 21:57:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 581.387315][T29542] IPVS: ftp: loaded support on port[0] = 21 [ 581.505921][T29542] IPVS: ftp: loaded support on port[0] = 21 [ 581.764327][T27672] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 581.814279][T10176] tipc: TX() has been purged, node left! [ 581.953041][T27672] usb 1-1: device descriptor read/8, error -61 [ 582.234411][T27672] usb 1-1: device descriptor read/8, error -61 [ 582.354384][T27672] usb usb1-port1: unable to enumerate USB device [ 584.014338][T10176] tipc: TX() has been purged, node left! 21:57:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001b80)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) select(0x40, &(0x7f0000000140), &(0x7f00000001c0), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 21:57:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:57:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:57:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 584.562199][T29624] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 584.664387][T27672] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 584.934122][T27672] usb 1-1: device descriptor read/64, error 18 [ 585.334106][T27672] usb 1-1: device descriptor read/64, error 18 [ 585.604053][T27672] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 585.884056][T27672] usb 1-1: device descriptor read/64, error 18 [ 586.314031][T27672] usb 1-1: device descriptor read/64, error 18 [ 586.434240][T27672] usb usb1-port1: attempt power cycle 21:57:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:57:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:10 executing program 3: [ 587.174013][T27672] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 587.232729][T29639] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:57:10 executing program 3: 21:57:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:57:10 executing program 3: 21:57:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 587.403110][T29650] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:57:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 587.576641][T29657] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 587.684121][T27672] usb 1-1: device not accepting address 46, error -71 [ 588.084058][T27672] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 588.264050][T27672] usb 1-1: device descriptor read/8, error -61 [ 588.544235][T27672] usb 1-1: device descriptor read/8, error -61 [ 588.678676][T27672] usb usb1-port1: unable to enumerate USB device 21:57:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:13 executing program 3: 21:57:13 executing program 2: 21:57:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 590.299094][T29668] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:57:13 executing program 2: 21:57:13 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6018, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000140)=""/145, 0x91) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r3, &(0x7f0000000080)=""/167, 0xa7) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @private=0xa010106}, {0x2, 0x4e20, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010) 21:57:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x37) syz_open_procfs(0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x1, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) tkill(r1, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 590.502423][T29685] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:57:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 590.631485][T29696] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 590.646053][ T23] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 590.913751][ T23] usb 1-1: device descriptor read/64, error 18 [ 591.303737][ T23] usb 1-1: device descriptor read/64, error 18 [ 591.573691][ T23] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 591.843660][ T23] usb 1-1: device descriptor read/64, error 18 [ 592.233665][ T23] usb 1-1: device descriptor read/64, error 18 [ 592.354277][ T23] usb usb1-port1: attempt power cycle [ 593.063640][ T23] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 593.233707][ T23] usb 1-1: device descriptor read/8, error -61 21:57:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:16 executing program 2: mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x400, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x87) 21:57:16 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:16 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x5c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000580)=0x9646) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000440)=""/142) socketpair(0x11, 0x4, 0x1, &(0x7f0000000100)) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)={0x20, 0x0, 0xc8ef0a4335e6829f, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}}, 0x0) 21:57:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 593.358242][T29708] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 593.368059][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 593.368098][ C1] sd 0:0:1:0: [sg0] tag#5181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 593.386355][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB: Test Unit Ready [ 593.392785][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.402533][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.412151][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.421753][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.431345][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.440935][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:57:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 593.450531][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.460120][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.462122][T29718] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 593.469706][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.469730][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.469753][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.469775][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.469793][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[c0]: 00 00 00 00 00 00 00 00 21:57:16 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 593.618175][T29724] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 593.633889][ T23] usb 1-1: device descriptor read/8, error -71 21:57:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 593.742513][T29734] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 593.760525][ C1] sd 0:0:1:0: [sg0] tag#5182 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 593.771033][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB: Test Unit Ready [ 593.777512][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.787116][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.796710][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.806311][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.815914][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.825511][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.835125][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.844724][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.854320][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.863940][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.873541][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.883082][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 593.892789][ C1] sd 0:0:1:0: [sg0] tag#5182 CDB[c0]: 00 00 00 00 00 00 00 00 [ 594.213568][ T23] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 594.383581][ T23] usb 1-1: device descriptor read/8, error -61 [ 594.653472][ T23] usb 1-1: device descriptor read/8, error -61 [ 594.773577][ T23] usb usb1-port1: unable to enumerate USB device 21:57:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001385d460076f6af", @ANYBLOB="ef12836643a16236636e8ccc70796b059e83ce89395998e5f31aaf75898992cf4ec05908d5a5cd0941367c5fdadca678f641d90955c5cb5ff0cf99d9b6", @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="1000"], 0x64, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bridge\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x8, 0xa96, [0x1ff, 0x0, 0x3f, 0x0]}}) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 21:57:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 596.423956][T29755] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 596.447859][T29758] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:57:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 596.743206][ T2506] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 596.993437][ T2506] usb 1-1: Using ep0 maxpacket: 16 [ 597.113934][ T2506] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.136713][ T2506] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 597.174253][ T2506] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 597.203475][ T2506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.221988][ T2506] usb 1-1: config 0 descriptor?? 21:57:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 599.432213][ T23] usb 1-1: USB disconnect, device number 52 21:57:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 21:57:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 21:57:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 599.952791][ T23] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 600.214062][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 600.332944][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.343166][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.352197][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 600.362202][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.371274][ T23] usb 1-1: config 0 descriptor?? 21:57:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 21:57:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 602.508177][ T2494] usb 1-1: USB disconnect, device number 53 21:57:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 603.012498][ T2494] usb 1-1: new high-speed USB device number 54 using dummy_hcd 21:57:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 603.262658][ T2494] usb 1-1: Using ep0 maxpacket: 16 21:57:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 603.382717][ T2494] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.406919][ T2494] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 603.446306][ T2494] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 603.460025][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.491482][ T2494] usb 1-1: config 0 descriptor?? 21:57:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 605.563601][ T5] usb 1-1: USB disconnect, device number 54 21:57:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 21:57:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) [ 606.032179][ T5] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 606.273555][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 606.392479][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.402774][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 606.416023][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 606.425396][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.438684][ T5] usb 1-1: config 0 descriptor?? [ 606.485299][ T5] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 21:57:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 21:57:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 608.624401][ T5] usb 1-1: USB disconnect, device number 55 21:57:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 608.716850][T29951] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:57:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 609.111970][ T5] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 609.362107][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 609.491973][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.515313][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 609.555903][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 609.574698][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.591658][ T5] usb 1-1: config 0 descriptor?? [ 609.642963][ T5] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 21:57:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 611.685700][ T2474] usb 1-1: USB disconnect, device number 56 21:57:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 612.201868][ T2474] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 612.481649][ T2474] usb 1-1: Using ep0 maxpacket: 16 [ 612.621756][ T2474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.632395][ T2474] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 612.647058][ T2474] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 612.657135][ T2474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.667354][ T2474] usb 1-1: config 0 descriptor?? [ 612.727196][ T2474] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 613.693029][ T0] NOHZ: local_softirq_pending 08 21:57:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 614.751822][T29588] usb 1-1: USB disconnect, device number 57 21:57:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 615.231488][T29588] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 615.501416][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 615.641695][T29588] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.651818][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 615.665060][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 615.674236][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.683517][T29588] usb 1-1: config 0 descriptor?? [ 615.732514][T29588] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 21:57:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:40 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 617.813379][T27672] usb 1-1: USB disconnect, device number 58 21:57:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:41 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 618.271361][T27672] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 618.511183][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 618.631275][T27672] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.641809][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 618.655851][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.665434][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.675268][T27672] usb 1-1: config 0 descriptor?? [ 618.714190][T27672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 21:57:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:43 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 620.862470][ T2474] usb 1-1: USB disconnect, device number 59 21:57:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 621.341260][ T2474] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 621.620976][ T2474] usb 1-1: Using ep0 maxpacket: 16 [ 621.751046][ T2474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.761287][ T2474] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 621.774578][ T2474] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.783718][ T2474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.796855][ T2474] usb 1-1: config 0 descriptor?? [ 621.851938][ T2474] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 21:57:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 21:57:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 623.909048][T27672] usb 1-1: USB disconnect, device number 60 21:57:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 21:57:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) [ 624.460945][T27672] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 624.700799][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 624.820892][T27672] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 624.831412][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 624.845949][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 624.855906][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.866112][T27672] usb 1-1: config 0 descriptor?? [ 624.913861][T27672] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 21:57:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 627.007702][ T2494] usb 1-1: USB disconnect, device number 61 21:57:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 627.340627][T29588] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 627.510637][ T2494] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 627.580647][T29588] usb 2-1: Using ep0 maxpacket: 16 [ 627.710913][T29588] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.721242][T29588] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 627.736192][T29588] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.745951][T29588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.750649][ T2494] usb 1-1: Using ep0 maxpacket: 16 [ 627.764529][T29588] usb 2-1: config 0 descriptor?? [ 627.804510][T29588] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 627.870723][ T2494] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 627.881645][ T2494] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.895852][ T2494] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.905744][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.915316][ T2494] usb 1-1: config 0 descriptor?? [ 627.953695][ T2494] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 21:57:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:53 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") [ 630.049710][T27672] usb 2-1: USB disconnect, device number 4 [ 630.073413][ T2506] usb 1-1: USB disconnect, device number 62 21:57:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 630.620552][ T2506] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 630.628405][T27672] usb 2-1: new high-speed USB device number 5 using dummy_hcd 21:57:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:53 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 630.880539][ T2506] usb 1-1: Using ep0 maxpacket: 16 [ 630.885955][T27672] usb 2-1: Using ep0 maxpacket: 16 [ 631.020639][ T2506] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 631.031257][T27672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.042280][ T2506] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.057052][T27672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.070775][ T2506] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 631.079912][ T2506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.089056][T27672] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 631.098828][T27672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.110684][ T2506] usb 1-1: config 0 descriptor?? [ 631.116203][T27672] usb 2-1: config 0 descriptor?? [ 631.151406][ T2506] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 631.602169][T27672] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 631.619635][T27672] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001D/input/input37 [ 631.702386][T27672] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 632.032928][T29588] usb 2-1: USB disconnect, device number 5 21:57:55 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 632.840375][T29588] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 633.080289][T29588] usb 2-1: Using ep0 maxpacket: 16 21:57:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 633.138257][ T2506] usb 1-1: USB disconnect, device number 63 21:57:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 633.200666][T29588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.231571][T29588] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 21:57:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 633.289067][T29588] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 21:57:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 633.341638][T29588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:57:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 633.385292][T29588] usb 2-1: config 0 descriptor?? 21:57:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 633.650324][ T2506] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 633.891769][T29588] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 633.910318][ T2506] usb 1-1: Using ep0 maxpacket: 16 [ 633.911120][T29588] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001E/input/input38 [ 633.993066][T29588] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 634.033708][ T2506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.047861][ T2506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.058843][ T2506] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.072573][ T2506] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.082262][ T2506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.115719][ T2506] usb 1-1: config 0 descriptor?? [ 634.175129][ T0] NOHZ: local_softirq_pending 08 [ 634.309936][ T2474] usb 2-1: USB disconnect, device number 6 [ 634.632024][ T2506] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 634.645445][ T2506] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001F/input/input39 [ 634.735761][ T2506] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 21:57:57 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 634.833291][T29588] usb 1-1: USB disconnect, device number 64 [ 635.130198][ T2474] usb 2-1: new high-speed USB device number 7 using dummy_hcd 21:57:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:57:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:57:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 635.380114][ T2474] usb 2-1: Using ep0 maxpacket: 16 21:57:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 635.500416][ T2474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.536832][ T2474] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 21:57:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:57:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 635.587268][ T2474] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 635.598481][ T2474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.646578][ T2474] usb 2-1: config 0 descriptor?? 21:57:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 635.692898][T27672] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 635.960102][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 636.080340][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.091316][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.102884][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 636.116808][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 636.121726][ T2474] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 636.129972][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.154451][ T2474] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0020/input/input40 [ 636.154603][T27672] usb 1-1: config 0 descriptor?? [ 636.232304][ T2474] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 636.539128][ T2506] usb 2-1: USB disconnect, device number 7 [ 636.675900][T27672] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 636.689243][T27672] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0021/input/input41 [ 636.784754][T27672] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 636.873365][ T2506] usb 1-1: USB disconnect, device number 65 21:58:00 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) 21:58:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 637.340031][ T5] usb 2-1: new high-speed USB device number 8 using dummy_hcd 21:58:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 637.610573][ T5] usb 2-1: Using ep0 maxpacket: 16 21:58:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 637.740190][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.751128][T29588] usb 1-1: new high-speed USB device number 66 using dummy_hcd 21:58:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 637.778134][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 637.831193][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 637.865672][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.881941][ T5] usb 2-1: config 0 descriptor?? [ 638.000044][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 638.130258][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.141533][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.152612][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 638.166197][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 638.175941][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.189198][T29588] usb 1-1: config 0 descriptor?? [ 638.351777][ T5] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 638.368482][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0022/input/input42 [ 638.460822][ T5] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 638.552276][ T5] usb 2-1: USB disconnect, device number 8 [ 638.662140][T29588] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 638.686731][T29588] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0023/input/input43 [ 638.768131][T29588] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 638.871441][ T2494] usb 1-1: USB disconnect, device number 66 21:58:02 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) 21:58:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 21:58:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 639.339996][ T2506] usb 2-1: new high-speed USB device number 9 using dummy_hcd 21:58:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 21:58:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 639.580112][ T2506] usb 2-1: Using ep0 maxpacket: 16 21:58:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 21:58:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 639.700256][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.723505][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 21:58:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") [ 639.758606][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 639.787642][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.800140][ T5] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 639.859019][ T2506] usb 2-1: config 0 descriptor?? 21:58:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 640.070584][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 640.149949][ T2494] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 640.200227][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.229994][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 640.312801][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 640.351809][ T2506] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 640.357843][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.389939][ T2494] usb 3-1: Using ep0 maxpacket: 16 [ 640.396571][ T2506] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0024/input/input44 [ 640.419996][ T5] usb 1-1: config 0 descriptor?? [ 640.510085][ T2494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.536579][ T2506] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 640.559927][ T2494] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 640.605425][ T2506] usb 2-1: USB disconnect, device number 9 [ 640.617188][ T2494] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 640.631676][ T2494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.646373][ T2494] usb 3-1: config 0 descriptor?? 21:58:04 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) [ 641.151608][ T2494] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 641.173216][ T2494] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0025/input/input45 [ 641.210056][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 641.216232][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 641.224582][ T5] usb 1-1: USB disconnect, device number 67 [ 641.256012][ T2494] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 641.349843][ T2506] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 641.570901][ T2494] usb 3-1: USB disconnect, device number 11 [ 641.589855][ T2506] usb 2-1: Using ep0 maxpacket: 16 21:58:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 641.710145][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.772069][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 21:58:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 641.840016][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 641.853851][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.868219][ T2506] usb 2-1: config 0 descriptor?? 21:58:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 642.050994][T27672] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 642.309754][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 642.351175][ T2506] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 642.370236][ T2506] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0026/input/input46 [ 642.439926][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.451344][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 642.465101][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 642.474585][ T2506] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 642.496710][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.522699][T27672] usb 1-1: config 0 descriptor?? [ 642.554850][ T2506] usb 2-1: USB disconnect, device number 10 21:58:06 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 643.269762][T27672] usbhid 1-1:0.0: can't add hid device: -71 [ 643.276304][T27672] usbhid: probe of 1-1:0.0 failed with error -71 [ 643.285281][T27672] usb 1-1: USB disconnect, device number 68 [ 643.359765][ T5] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 643.630190][ T5] usb 2-1: Using ep0 maxpacket: 16 21:58:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 643.769971][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.788175][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 643.811410][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 21:58:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 643.853106][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.889969][ T5] usb 2-1: config 0 descriptor?? 21:58:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 644.039884][ T8150] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 644.059687][T27672] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 644.299674][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 644.299679][ T8150] usb 3-1: Using ep0 maxpacket: 16 [ 644.421085][ T8150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.430658][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.432829][ T8150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 644.448702][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 644.459427][ T8150] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 644.474276][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 644.480164][ T8150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.486963][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.497214][ T8150] usb 3-1: config 0 descriptor?? [ 644.516938][T27672] usb 1-1: config 0 descriptor?? [ 644.649779][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 644.657130][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 644.673091][ T5] usb 2-1: USB disconnect, device number 11 [ 644.981230][ T8150] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 644.998891][ T8150] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input47 21:58:08 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 645.091686][ T8150] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 645.259607][T27672] usbhid 1-1:0.0: can't add hid device: -71 [ 645.265834][T27672] usbhid: probe of 1-1:0.0 failed with error -71 [ 645.279275][T27672] usb 1-1: USB disconnect, device number 69 [ 645.389665][ T2506] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 645.423858][ T5] usb 3-1: USB disconnect, device number 12 [ 645.629588][ T2506] usb 2-1: Using ep0 maxpacket: 16 21:58:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 645.754270][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.765231][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 645.783667][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 645.793376][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.806970][ T2506] usb 2-1: config 0 descriptor?? 21:58:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:58:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 645.989965][T27672] usb 1-1: new high-speed USB device number 70 using dummy_hcd 21:58:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 646.239544][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 646.275489][ T5] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 646.364577][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.375600][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 646.393647][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 646.403415][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.419324][T27672] usb 1-1: config 0 descriptor?? [ 646.559484][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 646.559556][ T2506] usbhid 2-1:0.0: can't add hid device: -71 [ 646.575488][ T2506] usbhid: probe of 2-1:0.0 failed with error -71 [ 646.583987][ T2506] usb 2-1: USB disconnect, device number 12 [ 646.679715][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.694684][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 646.708148][ T5] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 646.720678][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.732995][ T5] usb 3-1: config 0 descriptor?? 21:58:10 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 647.159527][T27672] usbhid 1-1:0.0: can't add hid device: -71 [ 647.165561][T27672] usbhid: probe of 1-1:0.0 failed with error -71 [ 647.181563][T27672] usb 1-1: USB disconnect, device number 70 [ 647.212690][ T5] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 647.228104][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0028/input/input48 [ 647.299609][ T2474] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 647.329903][ T5] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 647.539515][ T2474] usb 2-1: Using ep0 maxpacket: 16 21:58:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 647.638173][T29588] usb 3-1: USB disconnect, device number 13 [ 647.679527][ T2474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.691080][ T2474] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 647.704923][ T2474] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 647.718458][ T2474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.741805][ T2474] usb 2-1: config 0 descriptor?? [ 647.890130][ T5] usb 1-1: new high-speed USB device number 71 using dummy_hcd 21:58:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) 21:58:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:58:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 648.149468][ T5] usb 1-1: Using ep0 maxpacket: 16 21:58:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 21:58:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 648.290128][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.311460][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 21:58:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 21:58:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:58:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) [ 648.336758][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 648.372071][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.408202][ T5] usb 1-1: config 0 descriptor?? [ 648.480050][ T2474] usbhid 2-1:0.0: can't add hid device: -71 [ 648.489804][ T2474] usbhid: probe of 2-1:0.0 failed with error -71 [ 648.530941][ T2474] usb 2-1: USB disconnect, device number 13 [ 648.549523][T29588] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 648.819408][T29588] usb 3-1: Using ep0 maxpacket: 16 21:58:11 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 648.959616][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.970665][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 648.984931][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 648.995006][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.005294][T29588] usb 3-1: config 0 descriptor?? [ 649.169484][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 649.175713][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 649.185063][ T5] usb 1-1: USB disconnect, device number 71 [ 649.189952][ T2506] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 649.439361][ T2506] usb 2-1: Using ep0 maxpacket: 16 [ 649.490804][T29588] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 649.505731][T29588] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0029/input/input49 [ 649.559644][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.570842][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.594082][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 21:58:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) [ 649.594356][T29588] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 649.627381][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.655214][ T2506] usb 2-1: config 0 descriptor?? [ 649.693253][T29588] usb 3-1: USB disconnect, device number 14 [ 649.939329][T27672] usb 1-1: new high-speed USB device number 72 using dummy_hcd 21:58:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) 21:58:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 21:58:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21:58:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) [ 650.179288][T27672] usb 1-1: Using ep0 maxpacket: 16 21:58:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:13 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:13 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 650.315410][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.362142][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 650.408987][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 650.419260][ T2506] usbhid 2-1:0.0: can't add hid device: -71 [ 650.425776][ T2506] usbhid: probe of 2-1:0.0 failed with error -71 21:58:13 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:13 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 650.450983][ T2506] usb 2-1: USB disconnect, device number 14 [ 650.458684][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.484342][T27672] usb 1-1: config 0 descriptor?? [ 650.629416][ T2693] usb 3-1: new high-speed USB device number 15 using dummy_hcd 21:58:13 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 650.899508][ T2693] usb 3-1: Using ep0 maxpacket: 16 [ 651.029389][ T2693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.040431][ T2693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 651.054793][ T2693] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 651.064956][ T2693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.075200][ T2693] usb 3-1: config 0 descriptor?? [ 651.129446][T29588] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 651.229356][T27672] usbhid 1-1:0.0: can't add hid device: -71 [ 651.235577][T27672] usbhid: probe of 1-1:0.0 failed with error -71 [ 651.251295][T27672] usb 1-1: USB disconnect, device number 72 [ 651.399345][T29588] usb 2-1: Using ep0 maxpacket: 16 [ 651.561083][ T2693] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 651.569395][T29588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.569413][T29588] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 651.598993][ T2693] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002A/input/input50 21:58:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 651.611009][T29588] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 651.621547][T29588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.636717][T29588] usb 2-1: config 0 descriptor?? [ 651.695269][ T2693] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 651.779419][ T2693] usb 3-1: USB disconnect, device number 15 [ 651.999195][ T23] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 652.239191][ T23] usb 1-1: Using ep0 maxpacket: 16 21:58:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) 21:58:15 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) socket$nl_audit(0x10, 0x3, 0x9) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000100)={0x1ff, 0x6, 0x4, 0x36}) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x10, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9}, 0xd8) 21:58:15 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:15 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 652.359915][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.378904][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 652.399583][T29588] usbhid 2-1:0.0: can't add hid device: -71 [ 652.410370][T29588] usbhid: probe of 2-1:0.0 failed with error -71 21:58:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 21:58:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES64], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 652.466709][T29588] usb 2-1: USB disconnect, device number 15 [ 652.467524][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 21:58:15 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 652.516727][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.536762][ T23] usb 1-1: config 0 descriptor?? 21:58:15 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 652.659480][ T2693] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 652.729970][ T0] NOHZ: local_softirq_pending 08 21:58:15 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 652.949147][ T2693] usb 3-1: Using ep0 maxpacket: 16 [ 653.079291][ T2693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.090841][ T2693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.099166][ T2506] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 653.104266][ T2693] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.121894][ T2693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.140288][ T2693] usb 3-1: config 0 descriptor?? [ 653.269272][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 653.275508][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 653.287307][ T23] usb 1-1: USB disconnect, device number 73 [ 653.359189][ T2506] usb 2-1: Using ep0 maxpacket: 16 [ 653.489484][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.501169][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.515461][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.525259][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.534727][ T2506] usb 2-1: config 0 descriptor?? [ 653.611009][ T2693] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 653.629828][ T2693] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002B/input/input51 21:58:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:16 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) [ 653.715528][ T2693] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 653.822723][ T2693] usb 3-1: USB disconnect, device number 16 [ 654.049126][T27672] usb 1-1: new high-speed USB device number 74 using dummy_hcd 21:58:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0xd, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x9, 0x8, 0x10, 0x4}, @jmp={0x5, 0x1, 0x8, 0xa, 0x1, 0xfffffffffffffffe, 0x10}, @map={0x18, 0xb, 0x1, 0x0, r0}, @alu={0x4, 0x1, 0x0, 0xa, 0x7, 0x2, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, @call={0x85, 0x0, 0x0, 0x17}, @jmp={0x5, 0x1, 0x3, 0x8, 0x5, 0xc, 0x1}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xf], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xd880, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r1, 0x0, 0x3, 0x0, &(0x7f0000000040)) 21:58:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 21:58:17 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) [ 654.279162][ T2506] usbhid 2-1:0.0: can't add hid device: -71 [ 654.285457][ T2506] usbhid: probe of 2-1:0.0 failed with error -71 [ 654.295281][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 654.302016][ T2506] usb 2-1: USB disconnect, device number 16 21:58:17 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:17 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) [ 654.419466][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.435054][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 654.451290][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 654.462147][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.476040][T27672] usb 1-1: config 0 descriptor?? 21:58:17 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:17 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000100)) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x0, 0x0, 0x80000001}]}) syz_open_procfs(0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 21:58:17 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 654.650277][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd 21:58:17 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") [ 654.889133][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 655.009345][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.020424][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 655.034573][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 655.044406][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.057155][ T23] usb 3-1: config 0 descriptor?? [ 655.209209][T27672] usbhid 1-1:0.0: can't add hid device: -71 [ 655.215481][T27672] usbhid: probe of 1-1:0.0 failed with error -71 [ 655.227647][T27672] usb 1-1: USB disconnect, device number 74 21:58:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:18 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 655.809071][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 655.815206][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 655.826656][ T23] usb 3-1: USB disconnect, device number 17 [ 655.979028][T29588] usb 1-1: new high-speed USB device number 75 using dummy_hcd 21:58:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:19 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 21:58:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 21:58:19 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:19 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 656.258960][T29588] usb 1-1: Using ep0 maxpacket: 16 21:58:19 executing program 4: syz_open_dev$sg(0x0, 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 656.307627][ C1] sd 0:0:1:0: [sg0] tag#5181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 656.318073][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB: Test Unit Ready [ 656.324570][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.334266][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.343879][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.353581][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.363186][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.372797][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.382399][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.389369][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:58:19 executing program 4: syz_open_dev$sg(0x0, 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:19 executing program 4: syz_open_dev$sg(0x0, 0x0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 656.391985][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.405909][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 656.412384][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.412408][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.412442][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:19 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 656.412464][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 656.412485][ C1] sd 0:0:1:0: [sg0] tag#5181 CDB[c0]: 00 00 00 00 00 00 00 00 [ 656.425873][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 656.481663][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.508474][T29588] usb 1-1: config 0 descriptor?? 21:58:19 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(0x0) r0 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) [ 656.649042][ T2693] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 656.918905][ T2693] usb 3-1: Using ep0 maxpacket: 16 [ 657.049469][ T2693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.060446][ T2693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 657.074925][ T2693] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 657.084909][ T2693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.099775][ T2693] usb 3-1: config 0 descriptor?? [ 657.218998][T29588] usbhid 1-1:0.0: can't add hid device: -71 [ 657.225075][T29588] usbhid: probe of 1-1:0.0 failed with error -71 [ 657.237412][T29588] usb 1-1: USB disconnect, device number 75 21:58:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES64], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") [ 657.858998][ T2693] usbhid 3-1:0.0: can't add hid device: -71 [ 657.865000][ T2693] usbhid: probe of 3-1:0.0 failed with error -71 [ 657.874904][ T2693] usb 3-1: USB disconnect, device number 18 [ 657.968829][T29588] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 658.228839][T29588] usb 1-1: Using ep0 maxpacket: 16 21:58:21 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:21 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(0x0) r0 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 21:58:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES64], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:21 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(0x0) r0 = syz_open_dev$video(0x0, 0x40000003, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) [ 658.369231][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.380756][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.400683][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 21:58:21 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 21:58:21 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 658.426589][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.456438][T29588] usb 1-1: config 0 descriptor?? [ 658.477612][ C0] sd 0:0:1:0: [sg0] tag#5182 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 658.488035][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB: Test Unit Ready [ 658.494536][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.504121][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.513708][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:21 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 658.523317][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.532895][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.542503][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.552080][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.561688][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:21 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 658.571285][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.580878][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.590470][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.600057][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.609656][ C0] sd 0:0:1:0: [sg0] tag#5182 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:21 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 658.734929][ C0] sd 0:0:1:0: [sg0] tag#5183 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 658.745406][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB: Test Unit Ready [ 658.751872][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.761470][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.771062][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.780663][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.790251][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.799837][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.809417][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.819009][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.828577][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.838173][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.847766][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.857366][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 658.866972][ C0] sd 0:0:1:0: [sg0] tag#5183 CDB[c0]: 00 00 00 00 00 00 00 00 [ 658.948680][ T2693] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 659.218627][ T2693] usb 3-1: Using ep0 maxpacket: 16 [ 659.348785][T29588] usbhid 1-1:0.0: can't add hid device: -71 [ 659.354883][ T2693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.365864][T29588] usbhid: probe of 1-1:0.0 failed with error -71 [ 659.376487][ T2693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.392305][T29588] usb 1-1: USB disconnect, device number 76 [ 659.402432][ T2693] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 659.414191][ T2693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.426776][ T2693] usb 3-1: config 0 descriptor?? 21:58:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:22 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:22 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:22 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000100)) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x0, 0x0, 0x80000001}]}) syz_open_procfs(0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 660.108534][ T2506] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 660.168658][ T2693] usbhid 3-1:0.0: can't add hid device: -71 [ 660.174744][T29588] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 660.182520][ T2693] usbhid: probe of 3-1:0.0 failed with error -71 [ 660.191616][ T2693] usb 3-1: USB disconnect, device number 19 [ 660.348510][ T2506] usb 2-1: Using ep0 maxpacket: 16 [ 660.448515][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 660.468733][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.479677][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.492760][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 660.502599][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.511956][ T2506] usb 2-1: config 0 descriptor?? 21:58:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:23 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) r0 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 21:58:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000100)) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x0, 0x0, 0x80000001}]}) syz_open_procfs(0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 660.588564][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.599802][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.614329][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 660.624206][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.648244][T29588] usb 1-1: config 0 descriptor?? 21:58:23 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) r0 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 21:58:23 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) r0 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 21:58:23 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 21:58:23 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 660.863349][ C0] sd 0:0:1:0: [sg0] tag#5120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 660.873777][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB: Test Unit Ready [ 660.880256][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.889830][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.899416][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.909021][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.918625][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.928186][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.937796][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.947405][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.957006][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.966598][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.976232][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.985860][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 660.995467][ C0] sd 0:0:1:0: [sg0] tag#5120 CDB[c0]: 00 00 00 00 00 00 00 00 [ 661.010251][ T2506] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 661.023844][ T2506] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002C/input/input52 [ 661.088484][ T2693] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 661.106217][ T2506] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 661.358390][ T2693] usb 3-1: Using ep0 maxpacket: 16 [ 661.426458][ T2506] usb 2-1: USB disconnect, device number 17 [ 661.488683][T29588] usbhid 1-1:0.0: can't add hid device: -71 [ 661.494715][T29588] usbhid: probe of 1-1:0.0 failed with error -71 [ 661.503723][T29588] usb 1-1: USB disconnect, device number 77 [ 661.511169][ T2693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.529921][ T2693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 661.549651][ T2693] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 661.563198][ T2693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.579363][ T2693] usb 3-1: config 0 descriptor?? 21:58:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 21:58:24 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 21:58:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 661.994476][ C1] sd 0:0:1:0: [sg0] tag#5121 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 662.004925][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB: Test Unit Ready [ 662.011433][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.021041][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.030637][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.040247][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.049849][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.059434][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.069023][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.078613][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.088209][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.097799][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.107483][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.117187][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.126788][ C1] sd 0:0:1:0: [sg0] tag#5121 CDB[c0]: 00 00 00 00 00 00 00 00 [ 662.238262][T29588] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 662.288455][ T5] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 662.338976][ T2693] usbhid 3-1:0.0: can't add hid device: -71 [ 662.345359][ T2693] usbhid: probe of 3-1:0.0 failed with error -71 [ 662.354642][ T2693] usb 3-1: USB disconnect, device number 20 [ 662.498308][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 662.568286][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 662.638469][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.649477][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 662.665005][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 662.674792][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.687519][T29588] usb 1-1: config 0 descriptor?? [ 662.698479][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.710611][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 662.724856][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 21:58:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:25 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 21:58:25 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) [ 662.735527][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.753930][ T5] usb 2-1: config 0 descriptor?? 21:58:25 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 662.858104][ C1] sd 0:0:1:0: [sg0] tag#5151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 662.867608][ C0] sd 0:0:1:0: [sg0] tag#5152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 662.868643][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB: Test Unit Ready [ 662.879050][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB: Test Unit Ready [ 662.879072][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.885456][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.885478][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.891882][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.901426][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.910954][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.910975][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.920511][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.930132][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.939685][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.949201][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.958751][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.968280][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.977897][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.987434][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 662.996973][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.006503][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.016040][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.016061][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.025590][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.035128][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.044664][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:26 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 663.054208][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.063736][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.073272][ C1] sd 0:0:1:0: [sg0] tag#5151 CDB[c0]: 00 00 00 00 00 00 00 00 [ 663.082809][ C0] sd 0:0:1:0: [sg0] tag#5152 CDB[c0]: 00 00 00 00 00 00 00 00 [ 663.183165][ C0] sd 0:0:1:0: [sg0] tag#5153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 663.193599][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB: Test Unit Ready [ 663.200072][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.209670][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.219255][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.228854][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.238433][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.247982][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.257588][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.267186][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.276772][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.286384][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.295995][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.305583][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.315159][ C0] sd 0:0:1:0: [sg0] tag#5153 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:26 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 663.369878][ T5] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 663.388159][ T2474] usb 3-1: new high-speed USB device number 21 using dummy_hcd 21:58:26 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 663.421738][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002D/input/input53 [ 663.453989][ C0] sd 0:0:1:0: [sg0] tag#5154 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 663.464466][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB: Test Unit Ready [ 663.470940][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.480563][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.490169][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.495174][ C1] sd 0:0:1:0: [sg0] tag#5155 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 663.499763][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.510094][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB: Test Unit Ready [ 663.519622][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.526009][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.535660][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.545216][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.554769][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.564329][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.573973][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.573994][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.583528][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.593064][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.602598][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.612133][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.621677][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.631218][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.640762][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.650305][ C0] sd 0:0:1:0: [sg0] tag#5154 CDB[c0]: 00 00 00 00 00 00 00 00 [ 663.659840][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.686358][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.695972][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.705570][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.715171][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 663.724788][ C1] sd 0:0:1:0: [sg0] tag#5155 CDB[c0]: 00 00 00 00 00 00 00 00 [ 663.739481][T29588] usbhid 1-1:0.0: can't add hid device: -71 [ 663.745746][ T5] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 663.788134][T29588] usbhid: probe of 1-1:0.0 failed with error -71 [ 663.808036][ T2474] usb 3-1: Using ep0 maxpacket: 16 [ 663.822269][T29588] usb 1-1: USB disconnect, device number 78 [ 663.935022][ T23] usb 2-1: USB disconnect, device number 18 [ 663.941366][ T2474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.959594][ T2474] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 663.975433][ T2474] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 663.987099][ T2474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.999851][ T2474] usb 3-1: config 0 descriptor?? 21:58:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:27 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 664.231713][ C0] sd 0:0:1:0: [sg0] tag#5156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 664.242187][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB: Test Unit Ready [ 664.248691][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.258409][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.268032][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.277585][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.287172][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.296775][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.306429][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.316025][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.325640][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.335720][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.345314][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.354910][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 664.364628][ C0] sd 0:0:1:0: [sg0] tag#5156 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 664.521728][T29588] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 664.767917][ T2506] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 664.787896][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 664.849120][ T2474] usbhid 3-1:0.0: can't add hid device: -71 [ 664.855088][ T2474] usbhid: probe of 3-1:0.0 failed with error -71 [ 664.863879][ T2474] usb 3-1: USB disconnect, device number 21 [ 664.918457][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.929780][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 664.942937][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 664.952177][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.964788][T29588] usb 1-1: config 0 descriptor?? [ 665.007905][ T2506] usb 2-1: Using ep0 maxpacket: 16 [ 665.128042][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.142191][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 665.155145][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 665.167607][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.181098][ T2506] usb 2-1: config 0 descriptor?? 21:58:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r0, 0x0, 0xd, 0x0, &(0x7f0000000040)) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0x7, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) lseek(r2, 0x2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) write$UHID_INPUT2(r3, &(0x7f00000001c0)={0xc, {0x8c, "c5ec50f6471a0f6894f23f835820efb826d5c20162fd5ff3219bfc4bae7ab9e6077b73fd3c2fa8f9175de0325e3e7779e8d9e88c15242082f4720779882f89c45ebc4c73f77110fe9ea43e61db95fef75c68f24a65142ca78fb5bb0304667e0fca1281c685b6c1017c4d70b59f889bf5255dd7f6c1626e2ca873885e859abfc1c2a4ba250e9cab1e4328bd53"}}, 0x92) 21:58:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:28 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) [ 665.325292][ C1] sd 0:0:1:0: [sg0] tag#5157 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 665.335736][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB: Test Unit Ready [ 665.342231][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.351826][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.361432][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:28 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000580)=0x9646) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) [ 665.371090][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.380692][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.390304][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.399931][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.409550][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 665.419185][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.428887][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.438474][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.448117][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.457664][ C1] sd 0:0:1:0: [sg0] tag#5157 CDB[c0]: 00 00 00 00 00 00 00 00 [ 665.477604][ C1] sd 0:0:1:0: [sg0] tag#5158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 665.488045][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB: Test Unit Ready [ 665.494469][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.504125][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.513707][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:28 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000580)=0x9646) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) [ 665.523297][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.532904][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.542488][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.552078][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.561668][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:28 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000580)=0x9646) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) [ 665.571258][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.580848][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.590440][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.600028][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.609613][ C1] sd 0:0:1:0: [sg0] tag#5158 CDB[c0]: 00 00 00 00 00 00 00 00 [ 665.647764][ C1] sd 0:0:1:0: [sg0] tag#5159 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 665.658152][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB: Test Unit Ready [ 665.664575][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.669652][ T2474] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 665.674194][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.691246][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.700838][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.710430][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.720013][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.729601][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.739228][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.748857][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.758475][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.768227][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.777826][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.787358][ C1] sd 0:0:1:0: [sg0] tag#5159 CDB[c0]: 00 00 00 00 00 00 00 00 [ 665.787846][T29588] usbhid 1-1:0.0: can't add hid device: -71 [ 665.801198][T29588] usbhid: probe of 1-1:0.0 failed with error -71 [ 665.811424][T29588] usb 1-1: USB disconnect, device number 79 [ 665.819009][ T2506] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 665.837092][ T2506] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002E/input/input54 [ 665.938844][ T2474] usb 3-1: Using ep0 maxpacket: 16 [ 665.939039][ T2506] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 666.067981][ T2474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.078900][ T2474] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 666.091728][ T2474] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 666.100815][ T2474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.110041][ T2474] usb 3-1: config 0 descriptor?? 21:58:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:29 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000580)=0x9646) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) [ 666.220368][ T2506] usb 2-1: USB disconnect, device number 19 [ 666.557707][T27672] usb 1-1: new high-speed USB device number 80 using dummy_hcd 21:58:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 666.797738][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 666.857749][ T2474] usbhid 3-1:0.0: can't add hid device: -71 [ 666.857854][ T2474] usbhid: probe of 3-1:0.0 failed with error -71 [ 666.873170][ T2474] usb 3-1: USB disconnect, device number 22 [ 666.918701][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.929783][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 666.943849][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 666.953584][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.963168][T27672] usb 1-1: config 0 descriptor?? 21:58:30 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000580)=0x9646) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000440)=""/142) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x1000000008, 0x0) 21:58:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:30 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000580)=0x9646) lseek(0xffffffffffffffff, 0x0, 0x3) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) 21:58:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 667.342020][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 667.342049][ C0] sd 0:0:1:0: [sg0] tag#5162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 667.343228][ C1] sd 0:0:1:0: [sg0] tag#5163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 667.348746][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB: Test Unit Ready [ 667.359024][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB: Test Unit Ready [ 667.369354][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.375726][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.382134][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.391694][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.401221][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.410756][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.420313][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.429876][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.439410][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.439431][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.448995][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.458532][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.468068][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.477596][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.487121][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.496653][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.506185][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.515719][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.525254][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.534801][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.544341][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.553881][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:58:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 667.563419][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.572968][ C0] sd 0:0:1:0: [sg0] tag#5162 CDB[c0]: 00 00 00 00 00 00 00 00 [ 667.582490][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.618604][ C1] sd 0:0:1:0: [sg0] tag#5163 CDB[c0]: 00 00 00 00 00 00 00 00 21:58:30 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db98200000"], 0x1c3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x54, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x8080) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25070000006c00028008000100ff070000040003803c0003800800020050ffffff07000000000000000800010008000000080002000600000008000200010100000800010001251d60ff00010000fcffff04000400140003800800010401000000080002008100000000020003000000"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x50, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000580)=0x9646) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000440)=""/142) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') 21:58:30 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000100)) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x0, 0x0, 0x80000001}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 667.739593][ C0] sd 0:0:1:0: [sg0] tag#5164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 667.750000][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB: Test Unit Ready [ 667.756434][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.766034][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.775622][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.785226][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.794828][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.804414][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.813994][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.823593][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.833180][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.842758][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.852338][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.861922][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.871502][ C0] sd 0:0:1:0: [sg0] tag#5164 CDB[c0]: 00 00 00 00 00 00 00 00 [ 667.877918][T27672] usbhid 1-1:0.0: can't add hid device: -71 [ 667.898043][T27672] usbhid: probe of 1-1:0.0 failed with error -71 [ 667.965505][T27672] usb 1-1: USB disconnect, device number 80 21:58:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000100008000"/180]) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000100)) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 21:58:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000040)) 21:58:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) 21:58:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000040)) 21:58:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) 21:58:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r0, 0x0, 0x7, 0x0, &(0x7f0000000040)) 21:58:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) [ 668.687784][ T2474] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 668.937544][ T2474] usb 1-1: Using ep0 maxpacket: 16 [ 669.087744][ T2474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.098802][ T2474] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 669.113171][ T2474] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 669.122820][ T2474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.132701][ T2474] usb 1-1: config 0 descriptor?? [ 669.857458][ T2474] usbhid 1-1:0.0: can't add hid device: -71 [ 669.863454][ T2474] usbhid: probe of 1-1:0.0 failed with error -71 [ 669.872800][ T2474] usb 1-1: USB disconnect, device number 81 21:58:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)) 21:58:33 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000100008000"/180]) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 21:58:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000100008000"/180]) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 21:58:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000100008000"/180]) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 21:58:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:33 executing program 4 (fault-call:3 fault-nth:0): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 670.617356][ T2506] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 670.667342][ T3370] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 670.708976][T31843] FAULT_INJECTION: forcing a failure. [ 670.708976][T31843] name failslab, interval 1, probability 0, space 0, times 0 [ 670.732917][T31843] CPU: 1 PID: 31843 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 670.741255][T31843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.751444][T31843] Call Trace: [ 670.754750][T31843] dump_stack+0x1e9/0x30e [ 670.759089][T31843] should_fail+0x433/0x5b0 [ 670.763505][T31843] should_failslab+0x5/0x20 [ 670.768002][T31843] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 670.773702][T31843] ? __kmalloc_node+0x37/0x60 [ 670.778351][T31843] __kmalloc_node+0x37/0x60 [ 670.782947][T31843] kvmalloc_node+0x81/0x110 [ 670.787425][T31843] iov_iter_get_pages_alloc+0xbda/0x1170 [ 670.793048][T31843] default_file_splice_read+0x125/0xa40 [ 670.798614][T31843] ? __mutex_lock_common+0x582/0x2fc0 [ 670.803976][T31843] ? memset+0x1f/0x40 [ 670.807931][T31843] ? fsnotify+0x12c3/0x1370 [ 670.812418][T31843] do_splice+0x15de/0x1a40 [ 670.816808][T31843] ? __fget_files+0x4b9/0x4e0 [ 670.821472][T31843] ? __fdget+0x199/0x220 [ 670.825791][T31843] __x64_sys_splice+0x14f/0x1f0 [ 670.830615][T31843] do_syscall_64+0xf3/0x1b0 [ 670.835092][T31843] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 670.840954][T31843] RIP: 0033:0x45ca59 [ 670.844826][T31843] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 670.864448][T31843] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 670.872834][T31843] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 670.880784][T31843] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 670.888745][T31843] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 670.896706][T31843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 670.904682][T31843] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 671.037236][ T3370] usb 1-1: Using ep0 maxpacket: 16 [ 671.067204][ T2506] usb 2-1: device descriptor read/64, error 18 [ 671.157265][ T3370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.171481][ T3370] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.185551][ T3370] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 671.195442][ T3370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.208046][ T3370] usb 1-1: config 0 descriptor?? [ 671.457252][ T2506] usb 2-1: device descriptor read/64, error 18 [ 671.727189][ T2506] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 671.928405][ T3370] usbhid 1-1:0.0: can't add hid device: -71 [ 671.934433][ T3370] usbhid: probe of 1-1:0.0 failed with error -71 [ 671.945792][ T3370] usb 1-1: USB disconnect, device number 82 [ 672.007389][ T2506] usb 2-1: device descriptor read/64, error 18 21:58:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:35 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:35 executing program 4 (fault-call:3 fault-nth:1): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:35 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 672.397065][ T2506] usb 2-1: device descriptor read/64, error 18 [ 672.436750][T31871] FAULT_INJECTION: forcing a failure. [ 672.436750][T31871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 672.444168][T31873] FAULT_INJECTION: forcing a failure. [ 672.444168][T31873] name failslab, interval 1, probability 0, space 0, times 0 [ 672.466530][T31873] CPU: 1 PID: 31873 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 672.474862][T31873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.484910][T31873] Call Trace: [ 672.488191][T31873] dump_stack+0x1e9/0x30e [ 672.492511][T31873] should_fail+0x433/0x5b0 [ 672.496916][T31873] ? sock_kmalloc+0x98/0x100 [ 672.501490][T31873] should_failslab+0x5/0x20 [ 672.505970][T31873] __kmalloc+0x74/0x330 [ 672.510107][T31873] sock_kmalloc+0x98/0x100 [ 672.514510][T31873] hash_recvmsg+0x1bd/0x810 [ 672.518996][T31873] ? hash_sendmsg+0xb40/0xb40 [ 672.523651][T31873] ____sys_recvmsg+0x24a/0x510 [ 672.528403][T31873] ? import_iovec+0x12a/0x2c0 [ 672.533065][T31873] do_recvmmsg+0x429/0x1500 [ 672.537544][T31873] ? rcu_lock_release+0x5/0x20 [ 672.542303][T31873] ? ksys_write+0x1b1/0x220 [ 672.546785][T31873] ? ksys_write+0x1b1/0x220 [ 672.551276][T31873] ? check_preemption_disabled+0xb0/0x240 [ 672.556969][T31873] ? debug_smp_processor_id+0x5/0x20 [ 672.562234][T31873] __x64_sys_recvmmsg+0x11d/0x1a0 [ 672.567242][T31873] do_syscall_64+0xf3/0x1b0 [ 672.571727][T31873] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 672.577598][T31873] RIP: 0033:0x45ca59 [ 672.581467][T31873] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.601153][T31873] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 672.609540][T31873] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 672.617494][T31873] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 672.625549][T31873] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 672.633514][T31873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 672.641464][T31873] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 672.649444][T31871] CPU: 0 PID: 31871 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 672.657760][T31871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.661833][ T2506] usb usb2-port1: attempt power cycle [ 672.667905][T31871] Call Trace: [ 672.667936][T31871] dump_stack+0x1e9/0x30e [ 672.667951][T31871] should_fail+0x433/0x5b0 [ 672.667969][T31871] prepare_alloc_pages+0x28c/0x4a0 [ 672.667984][T31871] __alloc_pages_nodemask+0xbc/0x5e0 [ 672.668001][T31871] ? trace_kmalloc_node+0xd7/0x130 [ 672.700762][T31871] push_pipe+0x37a/0x630 [ 672.704993][T31871] iov_iter_get_pages_alloc+0xc70/0x1170 [ 672.710604][T31871] default_file_splice_read+0x125/0xa40 [ 672.716252][T31871] ? __mutex_lock_common+0x582/0x2fc0 [ 672.721598][T31871] ? memset+0x1f/0x40 [ 672.725646][T31871] ? fsnotify+0x12c3/0x1370 [ 672.730127][T31871] do_splice+0x15de/0x1a40 [ 672.734521][T31871] ? __fget_files+0x4b9/0x4e0 [ 672.739176][T31871] ? __fdget+0x199/0x220 [ 672.743411][T31871] __x64_sys_splice+0x14f/0x1f0 [ 672.748236][T31871] do_syscall_64+0xf3/0x1b0 [ 672.752710][T31871] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 672.758570][T31871] RIP: 0033:0x45ca59 [ 672.762433][T31871] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.782013][T31871] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 672.790408][T31871] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 672.798351][T31871] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 672.806299][T31871] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 672.809122][ T23] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 672.814257][T31871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 672.814268][T31871] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 673.007027][ T2474] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 673.056999][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 673.178293][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.189403][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.202283][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 673.211642][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.225968][ T23] usb 1-1: config 0 descriptor?? [ 673.247133][ T2474] usb 3-1: Using ep0 maxpacket: 16 21:58:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:36 executing program 3 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:36 executing program 4 (fault-call:3 fault-nth:2): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 673.374543][T31888] FAULT_INJECTION: forcing a failure. [ 673.374543][T31888] name failslab, interval 1, probability 0, space 0, times 0 [ 673.387967][ T2506] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 673.399480][T31890] FAULT_INJECTION: forcing a failure. [ 673.399480][T31890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 673.402686][ T2474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.413364][T31888] CPU: 1 PID: 31888 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 673.427623][ T2474] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.431920][T31888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.431925][T31888] Call Trace: [ 673.431941][T31888] dump_stack+0x1e9/0x30e [ 673.431958][T31888] should_fail+0x433/0x5b0 [ 673.431977][T31888] ? sock_kmalloc+0x98/0x100 [ 673.431988][T31888] should_failslab+0x5/0x20 [ 673.432003][T31888] __kmalloc+0x74/0x330 [ 673.445527][ T2474] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 673.454887][T31888] sock_kmalloc+0x98/0x100 [ 673.454903][T31888] hash_recvmsg+0x1bd/0x810 [ 673.454919][T31888] ? hash_sendmsg+0xb40/0xb40 [ 673.454932][T31888] ____sys_recvmsg+0x24a/0x510 [ 673.454957][T31888] ? import_iovec+0x12a/0x2c0 [ 673.454973][T31888] do_recvmmsg+0x429/0x1500 [ 673.454994][T31888] ? trace_lock_release+0x119/0x1a0 [ 673.458395][ T2474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.462559][T31888] ? retint_kernel+0x2b/0x2b [ 673.462578][T31888] ? do_syscall_64+0xb5/0x1b0 [ 673.462595][T31888] __x64_sys_recvmmsg+0x11d/0x1a0 [ 673.462610][T31888] do_syscall_64+0xf3/0x1b0 [ 673.462623][T31888] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 673.472763][ T2474] usb 3-1: config 0 descriptor?? [ 673.476049][T31888] RIP: 0033:0x45ca59 [ 673.476060][T31888] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 673.476066][T31888] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 673.591195][T31888] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 673.599143][T31888] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 673.607091][T31888] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 673.615043][T31888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 673.622988][T31888] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 673.630957][T31890] CPU: 0 PID: 31890 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 673.639265][T31890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.649315][T31890] Call Trace: [ 673.652599][T31890] dump_stack+0x1e9/0x30e [ 673.656920][T31890] should_fail+0x433/0x5b0 [ 673.661323][T31890] prepare_alloc_pages+0x28c/0x4a0 [ 673.666405][T31890] __alloc_pages_nodemask+0xbc/0x5e0 [ 673.671671][T31890] push_pipe+0x37a/0x630 [ 673.675889][T31890] iov_iter_get_pages_alloc+0xc70/0x1170 [ 673.681506][T31890] default_file_splice_read+0x125/0xa40 [ 673.687027][T31890] ? __mutex_lock_common+0x582/0x2fc0 [ 673.692369][T31890] ? memset+0x1f/0x40 [ 673.696324][T31890] ? fsnotify+0x12c3/0x1370 [ 673.700802][T31890] do_splice+0x15de/0x1a40 [ 673.705205][T31890] ? __fget_files+0x4b9/0x4e0 [ 673.709857][T31890] ? __fdget+0x199/0x220 [ 673.714087][T31890] __x64_sys_splice+0x14f/0x1f0 [ 673.718932][T31890] do_syscall_64+0xf3/0x1b0 [ 673.723411][T31890] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 673.729273][T31890] RIP: 0033:0x45ca59 [ 673.733137][T31890] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 673.752718][T31890] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 673.761107][T31890] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 21:58:36 executing program 3 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 673.769153][T31890] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 673.777096][T31890] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 673.785037][T31890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 673.793018][T31890] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 21:58:36 executing program 4 (fault-call:3 fault-nth:3): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 673.860254][T31901] FAULT_INJECTION: forcing a failure. [ 673.860254][T31901] name failslab, interval 1, probability 0, space 0, times 0 [ 673.876923][ T2506] usb 2-1: device not accepting address 22, error -71 [ 673.878370][T31901] CPU: 0 PID: 31901 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 673.891991][T31901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.902125][T31901] Call Trace: [ 673.905390][T31901] dump_stack+0x1e9/0x30e [ 673.909737][T31901] should_fail+0x433/0x5b0 [ 673.914157][T31901] ? sock_kmalloc+0x98/0x100 [ 673.918734][T31901] should_failslab+0x5/0x20 [ 673.923215][T31901] __kmalloc+0x74/0x330 [ 673.927356][T31901] sock_kmalloc+0x98/0x100 [ 673.931766][T31901] hash_recvmsg+0x1bd/0x810 [ 673.936271][T31901] ? check_preemption_disabled+0xa2/0x240 [ 673.941986][T31901] ? hash_sendmsg+0xb40/0xb40 [ 673.946649][T31901] ____sys_recvmsg+0x24a/0x510 [ 673.951417][T31901] ? __sanitizer_cov_trace_const_cmp8+0x31/0x90 [ 673.957647][T31901] ? import_iovec+0x12a/0x2c0 [ 673.962325][T31901] do_recvmmsg+0x429/0x1500 [ 673.966852][T31901] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 673.972307][T31901] ? check_preemption_disabled+0xa2/0x240 [ 673.978007][T31901] ? retint_kernel+0x2b/0x2b [ 673.982582][T31901] __x64_sys_recvmmsg+0x11d/0x1a0 [ 673.987594][T31901] do_syscall_64+0xf3/0x1b0 [ 673.992091][T31901] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 673.997971][T31901] RIP: 0033:0x45ca59 [ 673.999593][T31903] FAULT_INJECTION: forcing a failure. [ 673.999593][T31903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 674.001862][T31901] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.034597][T31901] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 674.043000][T31901] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 674.050989][T31901] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 674.058953][T31901] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 674.066913][T31901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 674.074870][T31901] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 674.082925][T31903] CPU: 1 PID: 31903 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 674.091240][T31903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.101279][T31903] Call Trace: [ 674.104562][T31903] dump_stack+0x1e9/0x30e [ 674.108882][T31903] should_fail+0x433/0x5b0 [ 674.113272][T31903] prepare_alloc_pages+0x28c/0x4a0 [ 674.118367][T31903] __alloc_pages_nodemask+0xbc/0x5e0 [ 674.123623][T31903] push_pipe+0x37a/0x630 [ 674.127840][T31903] iov_iter_get_pages_alloc+0xc70/0x1170 [ 674.133445][T31903] default_file_splice_read+0x125/0xa40 [ 674.139102][T31903] ? __mutex_lock_common+0x582/0x2fc0 [ 674.144443][T31903] ? memset+0x1f/0x40 [ 674.148394][T31903] ? fsnotify+0x12c3/0x1370 [ 674.152887][T31903] do_splice+0x15de/0x1a40 [ 674.157279][T31903] ? __fget_files+0x4b9/0x4e0 [ 674.162149][T31903] ? __fdget+0x199/0x220 [ 674.166411][T31903] __x64_sys_splice+0x14f/0x1f0 [ 674.171230][T31903] do_syscall_64+0xf3/0x1b0 [ 674.175701][T31903] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 674.181557][T31903] RIP: 0033:0x45ca59 [ 674.185416][T31903] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.204987][T31903] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 674.213362][T31903] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 674.221302][T31903] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 674.229242][T31903] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 674.237183][T31903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 674.245122][T31903] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 674.254316][ T23] usbhid 1-1:0.0: can't add hid device: -71 21:58:37 executing program 3 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 674.263960][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 674.308721][ T23] usb 1-1: USB disconnect, device number 83 [ 674.336207][T31908] FAULT_INJECTION: forcing a failure. [ 674.336207][T31908] name failslab, interval 1, probability 0, space 0, times 0 [ 674.336408][ T2506] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 674.349744][T31908] CPU: 0 PID: 31908 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 674.364886][T31908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.374929][T31908] Call Trace: [ 674.378217][T31908] dump_stack+0x1e9/0x30e [ 674.382531][T31908] should_fail+0x433/0x5b0 [ 674.386937][T31908] ? sock_kmalloc+0x98/0x100 [ 674.391509][T31908] should_failslab+0x5/0x20 [ 674.395986][T31908] __kmalloc+0x74/0x330 [ 674.400133][T31908] sock_kmalloc+0x98/0x100 [ 674.404541][T31908] hash_recvmsg+0x1bd/0x810 [ 674.409035][T31908] ? hash_sendmsg+0xb40/0xb40 [ 674.413685][T31908] ____sys_recvmsg+0x24a/0x510 [ 674.418437][T31908] ? retint_kernel+0x2b/0x2b [ 674.423014][T31908] ? import_iovec+0x12a/0x2c0 [ 674.427707][T31908] do_recvmmsg+0x429/0x1500 [ 674.432188][T31908] ? retint_kernel+0x2b/0x2b [ 674.436788][T31908] ? ksys_write+0x1b1/0x220 [ 674.441284][T31908] ? ksys_write+0x1b1/0x220 [ 674.445786][T31908] ? check_preemption_disabled+0xb0/0x240 [ 674.451530][T31908] ? debug_smp_processor_id+0x5/0x20 [ 674.456818][T31908] __x64_sys_recvmmsg+0x11d/0x1a0 [ 674.461839][T31908] do_syscall_64+0xf3/0x1b0 [ 674.466323][T31908] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 674.472193][T31908] RIP: 0033:0x45ca59 [ 674.476059][T31908] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.495633][T31908] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 674.504027][T31908] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 674.511980][T31908] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 674.519933][T31908] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 674.527935][T31908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 674.535880][T31908] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 674.537041][ T2506] usb 2-1: device descriptor read/8, error -61 [ 674.559157][ T2474] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 674.584738][ T2474] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002F/input/input55 21:58:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") [ 674.662491][ T2474] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 674.836946][ T2506] usb 2-1: device descriptor read/8, error -61 [ 674.956863][ T2506] usb usb2-port1: unable to enumerate USB device [ 674.972119][ T5] usb 3-1: USB disconnect, device number 23 [ 674.976847][ T23] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 675.216735][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 675.336983][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.351286][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 675.364521][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 675.374006][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.386543][ T23] usb 1-1: config 0 descriptor?? 21:58:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:38 executing program 4 (fault-call:3 fault-nth:4): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:38 executing program 3 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 675.527446][T31950] FAULT_INJECTION: forcing a failure. [ 675.527446][T31950] name failslab, interval 1, probability 0, space 0, times 0 [ 675.536313][T31951] FAULT_INJECTION: forcing a failure. [ 675.536313][T31951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 675.541670][T31950] CPU: 0 PID: 31950 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 675.561734][T31950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.571775][T31950] Call Trace: [ 675.575061][T31950] dump_stack+0x1e9/0x30e [ 675.579390][T31950] should_fail+0x433/0x5b0 [ 675.583800][T31950] ? sock_kmalloc+0x98/0x100 [ 675.588381][T31950] should_failslab+0x5/0x20 [ 675.592881][T31950] __kmalloc+0x74/0x330 [ 675.597044][T31950] sock_kmalloc+0x98/0x100 [ 675.601448][T31950] hash_recvmsg+0x1bd/0x810 [ 675.605931][T31950] ? hash_sendmsg+0xb40/0xb40 [ 675.610594][T31950] ____sys_recvmsg+0x24a/0x510 [ 675.615362][T31950] ? import_iovec+0x12a/0x2c0 [ 675.620033][T31950] do_recvmmsg+0x429/0x1500 [ 675.624534][T31950] ? ksys_write+0x1b1/0x220 [ 675.629025][T31950] ? ksys_write+0x1b1/0x220 [ 675.633520][T31950] ? check_preemption_disabled+0xb0/0x240 [ 675.639228][T31950] ? debug_smp_processor_id+0x5/0x20 [ 675.644495][T31950] __x64_sys_recvmmsg+0x11d/0x1a0 [ 675.649508][T31950] do_syscall_64+0xf3/0x1b0 [ 675.653997][T31950] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 675.659960][T31950] RIP: 0033:0x45ca59 [ 675.663834][T31950] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 675.683411][T31950] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 675.691798][T31950] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 675.699746][T31950] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 675.707701][T31950] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 675.715653][T31950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 675.723605][T31950] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 675.731575][T31951] CPU: 1 PID: 31951 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 675.739886][T31951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.749926][T31951] Call Trace: [ 675.753203][T31951] dump_stack+0x1e9/0x30e [ 675.757529][T31951] should_fail+0x433/0x5b0 [ 675.761940][T31951] prepare_alloc_pages+0x28c/0x4a0 [ 675.767054][T31951] __alloc_pages_nodemask+0xbc/0x5e0 [ 675.772334][T31951] push_pipe+0x37a/0x630 [ 675.776550][T31951] iov_iter_get_pages_alloc+0xc70/0x1170 [ 675.782163][T31951] default_file_splice_read+0x125/0xa40 [ 675.787710][T31951] ? __mutex_lock_common+0x582/0x2fc0 [ 675.793060][T31951] ? memset+0x1f/0x40 [ 675.797023][T31951] ? fsnotify+0x12c3/0x1370 [ 675.801507][T31951] do_splice+0x15de/0x1a40 [ 675.805899][T31951] ? __fget_files+0x4b9/0x4e0 [ 675.810551][T31951] ? __fdget+0x199/0x220 [ 675.814767][T31951] __x64_sys_splice+0x14f/0x1f0 [ 675.819604][T31951] do_syscall_64+0xf3/0x1b0 [ 675.824100][T31951] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 675.829968][T31951] RIP: 0033:0x45ca59 [ 675.833831][T31951] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 675.853401][T31951] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 675.861778][T31951] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 675.869753][T31951] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 675.877696][T31951] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 675.885639][T31951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 675.893595][T31951] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 675.996731][ T5] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 676.176818][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 676.182928][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 676.194610][ T23] usb 1-1: USB disconnect, device number 84 [ 676.246760][ T5] usb 3-1: Using ep0 maxpacket: 16 21:58:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:39 executing program 3 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:39 executing program 4 (fault-call:3 fault-nth:5): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 676.376887][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.399236][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 676.430847][ T5] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 676.449214][T31970] FAULT_INJECTION: forcing a failure. [ 676.449214][T31970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.469397][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.483821][T31970] CPU: 0 PID: 31970 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 676.489813][T31974] FAULT_INJECTION: forcing a failure. [ 676.489813][T31974] name failslab, interval 1, probability 0, space 0, times 0 [ 676.492141][T31970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.492146][T31970] Call Trace: [ 676.492161][T31970] dump_stack+0x1e9/0x30e [ 676.492188][T31970] should_fail+0x433/0x5b0 [ 676.492205][T31970] prepare_alloc_pages+0x28c/0x4a0 [ 676.492221][T31970] __alloc_pages_nodemask+0xbc/0x5e0 [ 676.537158][T31970] push_pipe+0x37a/0x630 [ 676.541398][T31970] iov_iter_get_pages_alloc+0xc70/0x1170 [ 676.547034][T31970] default_file_splice_read+0x125/0xa40 [ 676.552582][T31970] ? __mutex_lock_common+0x582/0x2fc0 [ 676.557954][T31970] ? memset+0x1f/0x40 [ 676.561922][T31970] ? fsnotify+0x12c3/0x1370 [ 676.566423][T31970] do_splice+0x15de/0x1a40 [ 676.570840][T31970] ? __fget_files+0x4b9/0x4e0 [ 676.575511][T31970] ? __fdget+0x199/0x220 [ 676.579765][T31970] __x64_sys_splice+0x14f/0x1f0 [ 676.584609][T31970] do_syscall_64+0xf3/0x1b0 [ 676.589101][T31970] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 676.594975][T31970] RIP: 0033:0x45ca59 [ 676.598855][T31970] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.618444][T31970] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 676.626840][T31970] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 21:58:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 676.634799][T31970] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 676.642759][T31970] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 676.650718][T31970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 676.658674][T31970] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 21:58:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 676.679261][T31974] CPU: 0 PID: 31974 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 676.687584][T31974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.697626][T31974] Call Trace: [ 676.700910][T31974] dump_stack+0x1e9/0x30e [ 676.705253][T31974] should_fail+0x433/0x5b0 [ 676.709723][T31974] ? sock_kmalloc+0x98/0x100 [ 676.714309][T31974] should_failslab+0x5/0x20 [ 676.718802][T31974] __kmalloc+0x74/0x330 [ 676.722959][T31974] sock_kmalloc+0x98/0x100 [ 676.727375][T31974] hash_recvmsg+0x1bd/0x810 21:58:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 676.731877][T31974] ? hash_sendmsg+0xb40/0xb40 [ 676.736550][T31974] ____sys_recvmsg+0x24a/0x510 [ 676.741332][T31974] ? import_iovec+0x12a/0x2c0 [ 676.746016][T31974] do_recvmmsg+0x429/0x1500 [ 676.750515][T31974] ? rcu_lock_release+0x5/0x20 [ 676.755282][T31974] ? lockdep_hardirqs_on_prepare+0x425/0x6e0 [ 676.761279][T31974] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 676.766815][T31974] ? check_preemption_disabled+0xb0/0x240 [ 676.772523][T31974] ? debug_smp_processor_id+0x5/0x20 [ 676.777799][T31974] __x64_sys_recvmmsg+0x11d/0x1a0 [ 676.782818][T31974] do_syscall_64+0xf3/0x1b0 [ 676.787321][T31974] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 676.793203][T31974] RIP: 0033:0x45ca59 [ 676.797090][T31974] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.816680][T31974] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 676.825079][T31974] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 21:58:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c2"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") [ 676.833131][T31974] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 676.841086][T31974] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 676.846600][ T3370] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 676.849033][T31974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 676.849040][T31974] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 676.862147][ T5] usb 3-1: config 0 descriptor?? [ 677.156552][ T3370] usb 2-1: device descriptor read/64, error 18 [ 677.196579][ T2506] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 677.388310][ T5] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 677.402054][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0030/input/input56 [ 677.436586][ T2506] usb 1-1: Using ep0 maxpacket: 16 [ 677.480839][ T5] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 677.546638][ T3370] usb 2-1: device descriptor read/64, error 18 [ 677.557433][ T2506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.568426][ T2506] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 677.582875][ T2506] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 677.592626][ T2506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.616273][ T2506] usb 1-1: config 0 descriptor?? [ 677.805316][ T5] usb 3-1: USB disconnect, device number 24 [ 677.818528][ T3370] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 678.086430][ T3370] usb 2-1: device descriptor read/64, error 18 [ 678.098015][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.105554][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.113514][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.123060][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.134633][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.144323][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.152421][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.159852][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.167268][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.174505][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.181817][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.189172][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.196522][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.203801][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.211236][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.218536][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.225722][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.233231][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.240534][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.248163][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.255376][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.263186][ T2506] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 678.273110][ T2506] microsoft 0003:045E:07DA.0031: No inputs registered, leaving 21:58:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 21:58:41 executing program 4 (fault-call:3 fault-nth:6): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:41 executing program 3 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 678.288019][ T2506] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 678.299449][ T2506] microsoft 0003:045E:07DA.0031: no inputs found [ 678.305770][ T2506] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 678.370562][T32028] FAULT_INJECTION: forcing a failure. [ 678.370562][T32028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 678.402466][T32028] CPU: 0 PID: 32028 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 678.410806][T32028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.410893][T32030] FAULT_INJECTION: forcing a failure. [ 678.410893][T32030] name failslab, interval 1, probability 0, space 0, times 0 [ 678.420851][T32028] Call Trace: [ 678.420870][T32028] dump_stack+0x1e9/0x30e [ 678.420886][T32028] should_fail+0x433/0x5b0 [ 678.420905][T32028] prepare_alloc_pages+0x28c/0x4a0 [ 678.420922][T32028] __alloc_pages_nodemask+0xbc/0x5e0 [ 678.420945][T32028] push_pipe+0x37a/0x630 [ 678.420965][T32028] iov_iter_get_pages_alloc+0xc70/0x1170 21:58:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 678.420988][T32028] default_file_splice_read+0x125/0xa40 [ 678.421015][T32028] ? __mutex_lock_common+0x582/0x2fc0 [ 678.421031][T32028] ? memset+0x1f/0x40 [ 678.421044][T32028] ? fsnotify+0x12c3/0x1370 [ 678.421069][T32028] do_splice+0x15de/0x1a40 [ 678.421094][T32028] ? __fget_files+0x4b9/0x4e0 [ 678.421112][T32028] ? __fdget+0x199/0x220 [ 678.421126][T32028] __x64_sys_splice+0x14f/0x1f0 [ 678.421144][T32028] do_syscall_64+0xf3/0x1b0 [ 678.421158][T32028] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 678.421168][T32028] RIP: 0033:0x45ca59 [ 678.421179][T32028] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.421185][T32028] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 678.421196][T32028] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 678.421202][T32028] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 678.421209][T32028] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 678.421216][T32028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 678.421223][T32028] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 678.502187][ T2474] usb 1-1: USB disconnect, device number 85 [ 678.523126][T32030] CPU: 1 PID: 32030 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 678.603633][T32030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.613666][T32030] Call Trace: [ 678.616928][T32030] dump_stack+0x1e9/0x30e [ 678.621229][T32030] should_fail+0x433/0x5b0 [ 678.625626][T32030] ? sock_kmalloc+0x98/0x100 [ 678.630183][T32030] should_failslab+0x5/0x20 [ 678.634668][T32030] __kmalloc+0x74/0x330 [ 678.638797][T32030] sock_kmalloc+0x98/0x100 [ 678.643226][T32030] hash_recvmsg+0x1bd/0x810 [ 678.647753][T32030] ? hash_sendmsg+0xb40/0xb40 [ 678.652400][T32030] ____sys_recvmsg+0x24a/0x510 [ 678.657146][T32030] ? __sanitizer_cov_trace_const_cmp8+0xd/0x90 [ 678.663404][T32030] ? import_iovec+0x12a/0x2c0 [ 678.668104][T32030] do_recvmmsg+0x429/0x1500 [ 678.672596][T32030] ? rcu_lock_release+0x5/0x20 [ 678.677348][T32030] ? retint_kernel+0x2b/0x2b [ 678.681950][T32030] ? do_syscall_64+0xb5/0x1b0 [ 678.686601][T32030] __x64_sys_recvmmsg+0x11d/0x1a0 [ 678.691594][T32030] do_syscall_64+0xf3/0x1b0 [ 678.696065][T32030] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 678.701937][T32030] RIP: 0033:0x45ca59 [ 678.705811][T32030] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.725395][T32030] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 678.733815][T32030] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 678.741758][T32030] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 678.749698][T32030] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 678.757638][T32030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 678.765580][T32030] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 678.775478][ T3370] usb 2-1: device descriptor read/64, error 18 [ 678.896951][ T3370] usb usb2-port1: attempt power cycle 21:58:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:42 executing program 4 (fault-call:3 fault-nth:7): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:42 executing program 3 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c2"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 679.489951][T32058] FAULT_INJECTION: forcing a failure. [ 679.489951][T32058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 679.514984][T32058] CPU: 1 PID: 32058 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 679.523325][T32058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.528932][T32057] FAULT_INJECTION: forcing a failure. [ 679.528932][T32057] name failslab, interval 1, probability 0, space 0, times 0 [ 679.533367][T32058] Call Trace: [ 679.533385][T32058] dump_stack+0x1e9/0x30e [ 679.533401][T32058] should_fail+0x433/0x5b0 [ 679.533421][T32058] prepare_alloc_pages+0x28c/0x4a0 [ 679.533437][T32058] __alloc_pages_nodemask+0xbc/0x5e0 [ 679.533462][T32058] push_pipe+0x37a/0x630 [ 679.533482][T32058] iov_iter_get_pages_alloc+0xc70/0x1170 [ 679.533503][T32058] default_file_splice_read+0x125/0xa40 [ 679.583949][T32058] ? __mutex_lock_common+0x582/0x2fc0 [ 679.589313][T32058] ? memset+0x1f/0x40 [ 679.593286][T32058] ? fsnotify+0x12c3/0x1370 [ 679.597902][T32058] do_splice+0x15de/0x1a40 [ 679.602316][T32058] ? __fget_files+0x4b9/0x4e0 [ 679.606993][T32058] ? __fdget+0x199/0x220 [ 679.611230][T32058] __x64_sys_splice+0x14f/0x1f0 [ 679.616076][T32058] do_syscall_64+0xf3/0x1b0 [ 679.620568][T32058] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 679.626447][T32058] RIP: 0033:0x45ca59 [ 679.630415][T32058] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.650102][T32058] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 679.658502][T32058] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 679.666470][T32058] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 679.674428][T32058] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 679.682387][T32058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 679.690363][T32058] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 679.701956][T32057] CPU: 0 PID: 32057 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 679.710281][T32057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.720325][T32057] Call Trace: [ 679.723608][T32057] dump_stack+0x1e9/0x30e [ 679.727940][T32057] should_fail+0x433/0x5b0 [ 679.732358][T32057] ? sock_kmalloc+0x98/0x100 [ 679.736944][T32057] should_failslab+0x5/0x20 [ 679.741438][T32057] __kmalloc+0x74/0x330 [ 679.745594][T32057] sock_kmalloc+0x98/0x100 [ 679.750005][T32057] hash_recvmsg+0x1bd/0x810 [ 679.754490][T32057] ? hash_sendmsg+0xb40/0xb40 [ 679.759148][T32057] ____sys_recvmsg+0x24a/0x510 [ 679.763893][T32057] ? import_iovec+0x12a/0x2c0 [ 679.768544][T32057] do_recvmmsg+0x429/0x1500 [ 679.773015][T32057] ? rcu_lock_release+0x5/0x20 [ 679.777760][T32057] ? retint_kernel+0x2b/0x2b [ 679.782323][T32057] ? __x64_sys_recvmmsg+0x109/0x1a0 [ 679.787494][T32057] __x64_sys_recvmmsg+0x11d/0x1a0 [ 679.792490][T32057] do_syscall_64+0xf3/0x1b0 [ 679.796977][T32057] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 679.802995][T32057] RIP: 0033:0x45ca59 [ 679.806860][T32057] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.826437][T32057] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 21:58:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:42 executing program 3 (fault-call:4 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 679.834821][T32057] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 679.843030][T32057] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 679.850975][T32057] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 679.858915][T32057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 679.866291][T27672] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 679.866856][T32057] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:58:42 executing program 4 (fault-call:3 fault-nth:8): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 21:58:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 679.974694][T32068] FAULT_INJECTION: forcing a failure. [ 679.974694][T32068] name failslab, interval 1, probability 0, space 0, times 0 [ 679.996388][T32069] FAULT_INJECTION: forcing a failure. [ 679.996388][T32069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 680.015867][ T3370] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 680.023659][T32068] CPU: 1 PID: 32068 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 680.031972][T32068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.042011][T32068] Call Trace: [ 680.045286][T32068] dump_stack+0x1e9/0x30e [ 680.049601][T32068] should_fail+0x433/0x5b0 [ 680.054003][T32068] ? sock_kmalloc+0x98/0x100 [ 680.058582][T32068] should_failslab+0x5/0x20 [ 680.063065][T32068] __kmalloc+0x74/0x330 [ 680.067206][T32068] sock_kmalloc+0x98/0x100 [ 680.071616][T32068] hash_recvmsg+0x1bd/0x810 [ 680.076097][T32068] ? check_preemption_disabled+0xa2/0x240 [ 680.081800][T32068] ? hash_sendmsg+0xb40/0xb40 [ 680.086462][T32068] ____sys_recvmsg+0x24a/0x510 [ 680.091214][T32068] ? import_iovec+0x12a/0x2c0 [ 680.095869][T32068] do_recvmmsg+0x429/0x1500 [ 680.100371][T32068] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 680.105822][T32068] ? check_preemption_disabled+0xa2/0x240 [ 680.111520][T32068] ? retint_kernel+0x2b/0x2b [ 680.116098][T32068] __x64_sys_recvmmsg+0x11d/0x1a0 [ 680.121114][T32068] do_syscall_64+0xf3/0x1b0 [ 680.125599][T32068] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 680.131471][T32068] RIP: 0033:0x45ca59 [ 680.135347][T32068] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 680.154930][T32068] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 680.163313][T32068] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 680.171261][T32068] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 680.179288][T32068] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 680.187254][T32068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 680.195220][T32068] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 680.203181][T32069] CPU: 0 PID: 32069 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 680.211494][T32069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.221537][T32069] Call Trace: [ 680.224817][T32069] dump_stack+0x1e9/0x30e [ 680.229243][T32069] should_fail+0x433/0x5b0 [ 680.233661][T32069] prepare_alloc_pages+0x28c/0x4a0 [ 680.238771][T32069] __alloc_pages_nodemask+0xbc/0x5e0 [ 680.244066][T32069] push_pipe+0x37a/0x630 [ 680.248312][T32069] iov_iter_get_pages_alloc+0xc70/0x1170 [ 680.253943][T32069] default_file_splice_read+0x125/0xa40 [ 680.259578][T32069] ? __mutex_lock_common+0x582/0x2fc0 [ 680.264934][T32069] ? memset+0x1f/0x40 [ 680.268908][T32069] ? fsnotify+0x12c3/0x1370 [ 680.273390][T32069] do_splice+0x15de/0x1a40 [ 680.277813][T32069] ? __fget_files+0x4b9/0x4e0 [ 680.282602][T32069] ? __fdget+0x199/0x220 [ 680.286829][T32069] __x64_sys_splice+0x14f/0x1f0 [ 680.291778][T32069] do_syscall_64+0xf3/0x1b0 [ 680.296271][T32069] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 680.302239][T32069] RIP: 0033:0x45ca59 [ 680.306103][T32069] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 680.325680][T32069] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 680.334068][T32069] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 680.342022][T32069] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 680.346225][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 680.349979][T32069] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 680.349985][T32069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 680.349992][T32069] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 680.416508][ T3370] usb 2-1: device descriptor read/8, error -61 [ 680.506292][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.520392][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 680.534409][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 680.544318][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.558635][T27672] usb 1-1: config 0 descriptor?? [ 680.686245][ T3370] usb 2-1: device descriptor read/8, error -61 [ 680.956159][ T3370] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 681.037652][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.045008][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.060312][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.070368][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.077971][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.085177][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.092958][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.100487][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.107816][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.115108][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.122587][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.129878][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.137342][ T3370] usb 2-1: device descriptor read/8, error -61 [ 681.143510][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.150776][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.158054][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.165248][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.172503][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.179800][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.187101][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.194308][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.201579][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.208871][T27672] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 681.216417][T27672] microsoft 0003:045E:07DA.0032: No inputs registered, leaving [ 681.232182][T27672] microsoft 0003:045E:07DA.0032: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 681.244002][T27672] microsoft 0003:045E:07DA.0032: no inputs found [ 681.256281][T27672] microsoft 0003:045E:07DA.0032: could not initialize ff, continuing anyway [ 681.406222][ T3370] usb 2-1: device descriptor read/8, error -61 [ 681.445871][ T2474] usb 1-1: USB disconnect, device number 86 [ 681.526314][ T3370] usb usb2-port1: unable to enumerate USB device 21:58:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 21:58:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:45 executing program 3 (fault-call:4 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:45 executing program 4 (fault-call:3 fault-nth:9): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c2"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") [ 682.549517][T32108] FAULT_INJECTION: forcing a failure. [ 682.549517][T32108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 682.552078][T32106] FAULT_INJECTION: forcing a failure. [ 682.552078][T32106] name failslab, interval 1, probability 0, space 0, times 0 [ 682.575012][T32108] CPU: 0 PID: 32108 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 682.584140][T32108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.594190][T32108] Call Trace: [ 682.597473][T32108] dump_stack+0x1e9/0x30e [ 682.601792][T32108] should_fail+0x433/0x5b0 [ 682.606204][T32108] prepare_alloc_pages+0x28c/0x4a0 [ 682.611309][T32108] __alloc_pages_nodemask+0xbc/0x5e0 [ 682.616593][T32108] push_pipe+0x37a/0x630 [ 682.620831][T32108] iov_iter_get_pages_alloc+0xc70/0x1170 [ 682.626462][T32108] default_file_splice_read+0x125/0xa40 [ 682.632027][T32108] ? __mutex_lock_common+0x582/0x2fc0 [ 682.637391][T32108] ? memset+0x1f/0x40 [ 682.641361][T32108] ? fsnotify+0x12c3/0x1370 [ 682.645858][T32108] do_splice+0x15de/0x1a40 [ 682.650274][T32108] ? __fget_files+0x4b9/0x4e0 [ 682.654966][T32108] ? __fdget+0x199/0x220 [ 682.659197][T32108] __x64_sys_splice+0x14f/0x1f0 [ 682.664043][T32108] do_syscall_64+0xf3/0x1b0 [ 682.668537][T32108] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 682.674419][T32108] RIP: 0033:0x45ca59 [ 682.678315][T32108] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 682.697902][T32108] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 682.706295][T32108] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 682.714254][T32108] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 682.722213][T32108] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 682.730171][T32108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 682.738129][T32108] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 21:58:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 682.746217][T32106] CPU: 1 PID: 32106 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 682.754531][T32106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.764576][T32106] Call Trace: [ 682.767874][T32106] dump_stack+0x1e9/0x30e [ 682.772199][T32106] should_fail+0x433/0x5b0 [ 682.776610][T32106] ? sock_kmalloc+0x98/0x100 [ 682.781192][T32106] should_failslab+0x5/0x20 [ 682.785681][T32106] __kmalloc+0x74/0x330 [ 682.789831][T32106] sock_kmalloc+0x98/0x100 [ 682.794253][T32106] hash_recvmsg+0x1bd/0x810 21:58:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 682.798752][T32106] ? hash_sendmsg+0xb40/0xb40 [ 682.803421][T32106] ____sys_recvmsg+0x24a/0x510 [ 682.808194][T32106] ? import_iovec+0x12a/0x2c0 [ 682.812881][T32106] do_recvmmsg+0x429/0x1500 [ 682.817382][T32106] ? rcu_lock_release+0x5/0x20 [ 682.822162][T32106] ? ksys_write+0x1b1/0x220 [ 682.826668][T32106] ? ksys_write+0x1b1/0x220 [ 682.831167][T32106] ? check_preemption_disabled+0xb0/0x240 [ 682.836874][T32106] ? debug_smp_processor_id+0x5/0x20 [ 682.842157][T32106] __x64_sys_recvmmsg+0x11d/0x1a0 21:58:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 682.847176][T32106] do_syscall_64+0xf3/0x1b0 [ 682.851698][T32106] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 682.857577][T32106] RIP: 0033:0x45ca59 [ 682.861477][T32106] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 682.881072][T32106] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 682.889476][T32106] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 21:58:45 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:45 executing program 4 (fault-call:3 fault-nth:10): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:45 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 682.897440][T32106] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 682.905404][T32106] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 682.913368][T32106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 682.921428][T32106] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 682.936023][ T2494] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 682.974235][T32122] FAULT_INJECTION: forcing a failure. [ 682.974235][T32122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 682.992478][T32122] CPU: 1 PID: 32122 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 683.000804][T32122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.010849][T32122] Call Trace: [ 683.014155][T32122] dump_stack+0x1e9/0x30e [ 683.018483][T32122] should_fail+0x433/0x5b0 [ 683.022905][T32122] prepare_alloc_pages+0x28c/0x4a0 [ 683.028001][T32122] __alloc_pages_nodemask+0xbc/0x5e0 [ 683.033356][T32122] push_pipe+0x37a/0x630 [ 683.037707][T32122] iov_iter_get_pages_alloc+0xc70/0x1170 [ 683.043327][T32122] default_file_splice_read+0x125/0xa40 [ 683.048906][T32122] ? __mutex_lock_common+0x582/0x2fc0 [ 683.054307][T32122] ? memset+0x1f/0x40 [ 683.058261][T32122] ? fsnotify+0x12c3/0x1370 [ 683.062743][T32122] do_splice+0x15de/0x1a40 [ 683.067139][T32122] ? __fget_files+0x4b9/0x4e0 [ 683.071805][T32122] ? __fdget+0x199/0x220 [ 683.076030][T32122] __x64_sys_splice+0x14f/0x1f0 [ 683.080945][T32122] do_syscall_64+0xf3/0x1b0 [ 683.085480][T32122] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 683.091351][T32122] RIP: 0033:0x45ca59 [ 683.095235][T32122] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 683.114856][T32122] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 683.123264][T32122] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 683.131342][T32122] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 683.139282][T32122] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 683.147224][T32122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 683.155167][T32122] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 683.366459][ T2494] usb 1-1: Using ep0 maxpacket: 16 [ 683.385974][ T5] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 683.486597][ T2494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.500709][ T2494] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 683.513770][ T2494] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 683.523079][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.537188][ T2494] usb 1-1: config 0 descriptor?? [ 683.665895][ T5] usb 2-1: device descriptor read/64, error 18 [ 684.017320][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.024547][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.031876][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.039175][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.052518][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.059931][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.067304][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.074516][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.075956][ T5] usb 2-1: device descriptor read/64, error 18 [ 684.081834][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.095074][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.102356][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.109638][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.117151][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.124461][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.131887][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.139239][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.146602][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.153807][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.161065][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.168425][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.175617][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.182878][ T2494] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 684.190857][ T2494] microsoft 0003:045E:07DA.0033: No inputs registered, leaving [ 684.202618][ T2494] microsoft 0003:045E:07DA.0033: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 684.214108][ T2494] microsoft 0003:045E:07DA.0033: no inputs found [ 684.220512][ T2494] microsoft 0003:045E:07DA.0033: could not initialize ff, continuing anyway [ 684.365836][ T5] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 684.431696][ T2474] usb 1-1: USB disconnect, device number 87 [ 684.645815][ T5] usb 2-1: device descriptor read/64, error 18 [ 685.055800][ T5] usb 2-1: device descriptor read/64, error 18 [ 685.176011][ T5] usb usb2-port1: attempt power cycle 21:58:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:48 executing program 3 (fault-call:4 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:48 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:48 executing program 4 (fault-call:3 fault-nth:11): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 685.624649][T32162] FAULT_INJECTION: forcing a failure. [ 685.624649][T32162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 685.654009][T32161] FAULT_INJECTION: forcing a failure. [ 685.654009][T32161] name failslab, interval 1, probability 0, space 0, times 0 [ 685.672181][T32161] CPU: 0 PID: 32161 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 685.680611][T32161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.690646][T32161] Call Trace: [ 685.693945][T32161] dump_stack+0x1e9/0x30e [ 685.698278][T32161] should_fail+0x433/0x5b0 [ 685.702688][T32161] ? sock_kmalloc+0x98/0x100 [ 685.707268][T32161] should_failslab+0x5/0x20 [ 685.711755][T32161] __kmalloc+0x74/0x330 [ 685.715906][T32161] sock_kmalloc+0x98/0x100 [ 685.720311][T32161] hash_recvmsg+0x1bd/0x810 [ 685.724810][T32161] ? hash_sendmsg+0xb40/0xb40 [ 685.729483][T32161] ____sys_recvmsg+0x24a/0x510 [ 685.734254][T32161] ? import_iovec+0x12a/0x2c0 [ 685.738932][T32161] do_recvmmsg+0x429/0x1500 [ 685.743429][T32161] ? rcu_lock_release+0x5/0x20 [ 685.748212][T32161] ? retint_kernel+0x2b/0x2b [ 685.752803][T32161] ? do_syscall_64+0xb5/0x1b0 [ 685.757478][T32161] __x64_sys_recvmmsg+0x11d/0x1a0 [ 685.762501][T32161] do_syscall_64+0xf3/0x1b0 [ 685.766996][T32161] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 685.772874][T32161] RIP: 0033:0x45ca59 [ 685.776749][T32161] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 685.796339][T32161] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 685.804732][T32161] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 685.812681][T32161] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 21:58:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 685.820630][T32161] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 685.828576][T32161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 685.836546][T32161] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 685.844519][T32162] CPU: 1 PID: 32162 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 685.852834][T32162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.862875][T32162] Call Trace: [ 685.866157][T32162] dump_stack+0x1e9/0x30e [ 685.870499][T32162] should_fail+0x433/0x5b0 21:58:48 executing program 3 (fault-call:4 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 685.874925][T32162] prepare_alloc_pages+0x28c/0x4a0 [ 685.880033][T32162] __alloc_pages_nodemask+0xbc/0x5e0 [ 685.885321][T32162] push_pipe+0x37a/0x630 [ 685.889570][T32162] iov_iter_get_pages_alloc+0xc70/0x1170 [ 685.895223][T32162] default_file_splice_read+0x125/0xa40 [ 685.900772][T32162] ? __mutex_lock_common+0x582/0x2fc0 [ 685.906145][T32162] ? memset+0x1f/0x40 [ 685.909404][T32170] FAULT_INJECTION: forcing a failure. [ 685.909404][T32170] name failslab, interval 1, probability 0, space 0, times 0 [ 685.910118][T32162] ? fsnotify+0x12c3/0x1370 [ 685.910144][T32162] do_splice+0x15de/0x1a40 [ 685.910168][T32162] ? __fget_files+0x4b9/0x4e0 [ 685.910186][T32162] ? __fdget+0x199/0x220 [ 685.910202][T32162] __x64_sys_splice+0x14f/0x1f0 [ 685.945323][T32162] do_syscall_64+0xf3/0x1b0 [ 685.949821][T32162] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 685.955696][T32162] RIP: 0033:0x45ca59 [ 685.959578][T32162] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 685.979168][T32162] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 685.987581][T32162] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 685.995535][T32162] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 686.003502][T32162] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 686.011455][T32162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 686.019410][T32162] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 686.027400][T32170] CPU: 0 PID: 32170 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 686.033934][ T2494] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 686.035707][T32170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.035712][T32170] Call Trace: [ 686.035726][T32170] dump_stack+0x1e9/0x30e [ 686.035738][T32170] should_fail+0x433/0x5b0 [ 686.035754][T32170] ? sock_kmalloc+0x98/0x100 [ 686.069824][T32170] should_failslab+0x5/0x20 [ 686.074319][T32170] __kmalloc+0x74/0x330 [ 686.078471][T32170] sock_kmalloc+0x98/0x100 [ 686.082882][T32170] hash_recvmsg+0x1bd/0x810 [ 686.087381][T32170] ? hash_sendmsg+0xb40/0xb40 [ 686.092049][T32170] ____sys_recvmsg+0x24a/0x510 [ 686.096804][T32170] ? lock_release+0x3d1/0x760 [ 686.101499][T32170] ? import_iovec+0x12a/0x2c0 [ 686.106178][T32170] do_recvmmsg+0x429/0x1500 [ 686.110709][T32170] ? retint_kernel+0x2b/0x2b [ 686.115300][T32170] ? __x64_sys_recvmmsg+0x109/0x1a0 [ 686.120493][T32170] __x64_sys_recvmmsg+0x11d/0x1a0 21:58:49 executing program 4 (fault-call:3 fault-nth:12): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 686.125522][T32170] do_syscall_64+0xf3/0x1b0 [ 686.130036][T32170] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 686.135918][T32170] RIP: 0033:0x45ca59 [ 686.139821][T32170] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 686.152975][T32173] FAULT_INJECTION: forcing a failure. [ 686.152975][T32173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:58:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 686.159405][T32170] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 686.159416][T32170] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 686.159422][T32170] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 686.159429][T32170] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 686.159435][T32170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 686.159441][T32170] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 686.234408][T32173] CPU: 0 PID: 32173 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 686.242756][T32173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.252798][T32173] Call Trace: [ 686.256125][T32173] dump_stack+0x1e9/0x30e [ 686.260481][T32173] should_fail+0x433/0x5b0 [ 686.264897][T32173] prepare_alloc_pages+0x28c/0x4a0 [ 686.270006][T32173] __alloc_pages_nodemask+0xbc/0x5e0 [ 686.275296][T32173] push_pipe+0x37a/0x630 [ 686.279607][T32173] iov_iter_get_pages_alloc+0xc70/0x1170 [ 686.285339][T32173] default_file_splice_read+0x125/0xa40 [ 686.290878][T32173] ? __mutex_lock_common+0x582/0x2fc0 [ 686.296234][T32173] ? memset+0x1f/0x40 [ 686.300187][T32173] ? fsnotify+0x12c3/0x1370 [ 686.304714][T32173] do_splice+0x15de/0x1a40 [ 686.309127][T32173] ? __fget_files+0x4b9/0x4e0 [ 686.313863][T32173] ? __fdget+0x199/0x220 [ 686.318090][T32173] __x64_sys_splice+0x14f/0x1f0 [ 686.322943][T32173] do_syscall_64+0xf3/0x1b0 [ 686.327440][T32173] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 686.333327][T32173] RIP: 0033:0x45ca59 [ 686.336468][ T2494] usb 1-1: Using ep0 maxpacket: 16 [ 686.337214][T32173] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 686.361877][T32173] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 686.370280][T32173] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 686.378237][T32173] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 686.386192][T32173] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 686.394149][T32173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 686.402094][T32173] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 686.417168][ T5] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 686.424807][T29588] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 686.456814][ T2494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.468507][ T2494] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.482535][ T2494] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 686.492420][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.506987][ T2494] usb 1-1: config 0 descriptor?? [ 686.605783][ T5] usb 2-1: device descriptor read/8, error -61 [ 686.705648][T29588] usb 3-1: device descriptor read/64, error 18 [ 686.906747][ T5] usb 2-1: device descriptor read/8, error -61 [ 686.987014][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 686.994245][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.008395][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.018746][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.026333][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.033523][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.041329][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.048863][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.056329][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.063566][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.071166][ T2494] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 687.078772][ T2494] microsoft 0003:045E:07DA.0034: No inputs registered, leaving [ 687.094327][ T2494] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 687.111259][ T2494] microsoft 0003:045E:07DA.0034: no inputs found [ 687.121485][ T2494] microsoft 0003:045E:07DA.0034: could not initialize ff, continuing anyway [ 687.135645][T29588] usb 3-1: device descriptor read/64, error 18 [ 687.195684][ T5] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 687.385778][ T5] usb 2-1: device descriptor read/8, error -61 [ 687.392653][T27672] usb 1-1: USB disconnect, device number 88 [ 687.425605][T29588] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 687.665685][ T5] usb 2-1: device descriptor read/8, error -61 [ 687.715530][T29588] usb 3-1: device descriptor read/64, error 18 [ 687.785690][ T5] usb usb2-port1: unable to enumerate USB device [ 688.115484][T29588] usb 3-1: device descriptor read/64, error 18 [ 688.236259][T29588] usb usb3-port1: attempt power cycle 21:58:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:51 executing program 3 (fault-call:4 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:51 executing program 4 (fault-call:3 fault-nth:13): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 688.677808][T32218] FAULT_INJECTION: forcing a failure. [ 688.677808][T32218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 688.711377][T32217] FAULT_INJECTION: forcing a failure. [ 688.711377][T32217] name failslab, interval 1, probability 0, space 0, times 0 [ 688.712373][T32218] CPU: 0 PID: 32218 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 688.732764][T32218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.743763][T32218] Call Trace: [ 688.747046][T32218] dump_stack+0x1e9/0x30e [ 688.751387][T32218] should_fail+0x433/0x5b0 [ 688.755798][T32218] prepare_alloc_pages+0x28c/0x4a0 [ 688.760900][T32218] __alloc_pages_nodemask+0xbc/0x5e0 [ 688.766184][T32218] push_pipe+0x37a/0x630 [ 688.770420][T32218] iov_iter_get_pages_alloc+0xc70/0x1170 [ 688.776051][T32218] default_file_splice_read+0x125/0xa40 [ 688.781594][T32218] ? __mutex_lock_common+0x582/0x2fc0 [ 688.786963][T32218] ? memset+0x1f/0x40 [ 688.790939][T32218] ? fsnotify+0x12c3/0x1370 [ 688.795556][T32218] do_splice+0x15de/0x1a40 [ 688.799974][T32218] ? __fget_files+0x4b9/0x4e0 [ 688.804644][T32218] ? __fdget+0x199/0x220 [ 688.808879][T32218] __x64_sys_splice+0x14f/0x1f0 [ 688.813725][T32218] do_syscall_64+0xf3/0x1b0 [ 688.818221][T32218] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 688.824118][T32218] RIP: 0033:0x45ca59 [ 688.828009][T32218] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 688.847600][T32218] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 688.855992][T32218] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 688.863951][T32218] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 21:58:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 688.871905][T32218] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 688.879871][T32218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 688.887829][T32218] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 688.895823][T32217] CPU: 1 PID: 32217 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 688.904143][T32217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.914189][T32217] Call Trace: [ 688.917474][T32217] dump_stack+0x1e9/0x30e [ 688.921803][T32217] should_fail+0x433/0x5b0 [ 688.926235][T32217] ? sock_kmalloc+0x98/0x100 [ 688.930822][T32217] should_failslab+0x5/0x20 [ 688.935316][T32217] __kmalloc+0x74/0x330 [ 688.939470][T32217] sock_kmalloc+0x98/0x100 [ 688.943880][T32217] hash_recvmsg+0x1bd/0x810 [ 688.948370][T32217] ? hash_sendmsg+0xb40/0xb40 [ 688.953021][T32217] ____sys_recvmsg+0x24a/0x510 [ 688.957779][T32217] ? import_iovec+0x12a/0x2c0 [ 688.962442][T32217] do_recvmmsg+0x429/0x1500 [ 688.965437][T29588] usb 3-1: new high-speed USB device number 27 using dummy_hcd 21:58:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 688.966955][T32217] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 688.966972][T32217] __x64_sys_recvmmsg+0x11d/0x1a0 [ 688.985034][T32217] do_syscall_64+0xf3/0x1b0 [ 688.989532][T32217] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 688.995413][T32217] RIP: 0033:0x45ca59 [ 688.999301][T32217] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 689.018893][T32217] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 21:58:52 executing program 4 (fault-call:3 fault-nth:14): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 689.027285][T32217] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 689.035246][T32217] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 689.043207][T32217] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 689.045378][ T5] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 689.051163][T32217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 689.051170][T32217] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:58:52 executing program 3 (fault-call:4 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 689.100645][T32230] FAULT_INJECTION: forcing a failure. [ 689.100645][T32230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 689.121065][T32230] CPU: 1 PID: 32230 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 689.129403][T32230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.139449][T32230] Call Trace: [ 689.142735][T32230] dump_stack+0x1e9/0x30e 21:58:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 689.147062][T32230] should_fail+0x433/0x5b0 [ 689.151476][T32230] prepare_alloc_pages+0x28c/0x4a0 [ 689.156583][T32230] __alloc_pages_nodemask+0xbc/0x5e0 [ 689.159028][T29588] usb 3-1: device descriptor read/8, error -61 [ 689.161896][T32230] push_pipe+0x37a/0x630 [ 689.161918][T32230] iov_iter_get_pages_alloc+0xc70/0x1170 [ 689.177880][T32230] default_file_splice_read+0x125/0xa40 [ 689.183431][T32230] ? __mutex_lock_common+0x582/0x2fc0 [ 689.188806][T32230] ? memset+0x1f/0x40 [ 689.192781][T32230] ? fsnotify+0x12c3/0x1370 [ 689.197293][T32230] do_splice+0x15de/0x1a40 [ 689.199113][T32235] FAULT_INJECTION: forcing a failure. [ 689.199113][T32235] name failslab, interval 1, probability 0, space 0, times 0 [ 689.201739][T32230] ? __fget_files+0x4b9/0x4e0 [ 689.201759][T32230] ? __fdget+0x199/0x220 [ 689.201774][T32230] __x64_sys_splice+0x14f/0x1f0 [ 689.201791][T32230] do_syscall_64+0xf3/0x1b0 [ 689.232535][T32230] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 689.238418][T32230] RIP: 0033:0x45ca59 [ 689.242301][T32230] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 689.261890][T32230] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 689.270290][T32230] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 689.278247][T32230] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 689.286216][T32230] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 689.294176][T32230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 689.302136][T32230] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 689.310126][T32235] CPU: 0 PID: 32235 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 689.318440][T32235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.328481][T32235] Call Trace: [ 689.331764][T32235] dump_stack+0x1e9/0x30e [ 689.336092][T32235] should_fail+0x433/0x5b0 [ 689.340507][T32235] ? sock_kmalloc+0x98/0x100 [ 689.345085][T32235] should_failslab+0x5/0x20 [ 689.349575][T32235] __kmalloc+0x74/0x330 [ 689.353729][T32235] sock_kmalloc+0x98/0x100 [ 689.358139][T32235] hash_recvmsg+0x1bd/0x810 [ 689.362637][T32235] ? hash_sendmsg+0xb40/0xb40 [ 689.367409][T32235] ____sys_recvmsg+0x24a/0x510 [ 689.372183][T32235] ? import_iovec+0x12a/0x2c0 [ 689.376849][T32235] do_recvmmsg+0x429/0x1500 [ 689.381338][T32235] ? rcu_lock_release+0x5/0x20 [ 689.386086][T32235] ? ksys_write+0x1b1/0x220 [ 689.390559][T32235] ? ksys_write+0x1b1/0x220 [ 689.395034][T32235] ? check_preemption_disabled+0xb0/0x240 [ 689.400729][T32235] ? debug_smp_processor_id+0x5/0x20 [ 689.405984][T32235] __x64_sys_recvmmsg+0x11d/0x1a0 [ 689.411079][T32235] do_syscall_64+0xf3/0x1b0 [ 689.415557][T32235] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 689.421467][T32235] RIP: 0033:0x45ca59 [ 689.425335][T32235] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 689.444918][T32235] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 689.453301][T32235] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 689.461243][T32235] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 689.469182][T32235] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 689.477121][T32235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 689.485063][T32235] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 689.495434][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 689.615623][T29588] usb 3-1: device descriptor read/8, error -61 [ 689.621879][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.632793][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 689.645899][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 689.654942][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.667350][ T5] usb 1-1: config 0 descriptor?? [ 689.725519][ T3370] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 689.895314][T29588] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 689.965360][ T3370] usb 2-1: Using ep0 maxpacket: 16 [ 690.085594][ T3370] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.095752][ T3370] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.104680][ T3370] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 690.105412][T29588] usb 3-1: device descriptor read/8, error -61 [ 690.116531][ T3370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.132850][ T3370] usb 2-1: config 0 descriptor?? [ 690.149742][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.159988][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.179591][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.190564][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.198031][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.209177][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.216928][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.224145][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.231686][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.239251][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.246922][ T5] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 690.254421][ T5] microsoft 0003:045E:07DA.0035: No inputs registered, leaving [ 690.263700][ T5] microsoft 0003:045E:07DA.0035: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 690.275590][ T5] microsoft 0003:045E:07DA.0035: no inputs found [ 690.281948][ T5] microsoft 0003:045E:07DA.0035: could not initialize ff, continuing anyway [ 690.416937][T29588] usb 3-1: device descriptor read/8, error -61 [ 690.548294][ T2494] usb 1-1: USB disconnect, device number 89 [ 690.550763][T29588] usb usb3-port1: unable to enumerate USB device 21:58:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:55 executing program 4 (fault-call:3 fault-nth:15): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:55 executing program 3 (fault-call:4 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 692.085295][T29588] usb 2-1: USB disconnect, device number 32 [ 692.184586][T32284] FAULT_INJECTION: forcing a failure. [ 692.184586][T32284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.199621][T32283] FAULT_INJECTION: forcing a failure. [ 692.199621][T32283] name failslab, interval 1, probability 0, space 0, times 0 [ 692.214011][T32283] CPU: 0 PID: 32283 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 692.222348][T32283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.232385][T32283] Call Trace: [ 692.235666][T32283] dump_stack+0x1e9/0x30e [ 692.240006][T32283] should_fail+0x433/0x5b0 [ 692.244433][T32283] ? sock_kmalloc+0x98/0x100 [ 692.249003][T32283] should_failslab+0x5/0x20 [ 692.253492][T32283] __kmalloc+0x74/0x330 [ 692.257663][T32283] sock_kmalloc+0x98/0x100 [ 692.262074][T32283] hash_recvmsg+0x1bd/0x810 [ 692.266581][T32283] ? hash_sendmsg+0xb40/0xb40 [ 692.271248][T32283] ____sys_recvmsg+0x24a/0x510 [ 692.276009][T32283] ? import_iovec+0x12a/0x2c0 [ 692.280676][T32283] do_recvmmsg+0x429/0x1500 [ 692.285162][T32283] ? rcu_lock_release+0x5/0x20 [ 692.289932][T32283] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 692.295377][T32283] ? check_preemption_disabled+0xa2/0x240 [ 692.301082][T32283] ? retint_kernel+0x2b/0x2b [ 692.305659][T32283] __x64_sys_recvmmsg+0x11d/0x1a0 [ 692.310689][T32283] do_syscall_64+0xf3/0x1b0 [ 692.315180][T32283] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 692.321098][T32283] RIP: 0033:0x45ca59 [ 692.324999][T32283] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 692.344588][T32283] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 692.352992][T32283] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 692.360952][T32283] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 692.368903][T32283] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 692.376862][T32283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 21:58:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 692.384817][T32283] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 692.392785][T32284] CPU: 1 PID: 32284 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 692.401120][T32284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.411163][T32284] Call Trace: [ 692.414451][T32284] dump_stack+0x1e9/0x30e [ 692.418776][T32284] should_fail+0x433/0x5b0 [ 692.423278][T32284] prepare_alloc_pages+0x28c/0x4a0 [ 692.428390][T32284] __alloc_pages_nodemask+0xbc/0x5e0 21:58:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 692.433679][T32284] push_pipe+0x37a/0x630 [ 692.437929][T32284] iov_iter_get_pages_alloc+0xc70/0x1170 [ 692.443565][T32284] default_file_splice_read+0x125/0xa40 [ 692.449122][T32284] ? __mutex_lock_common+0x582/0x2fc0 [ 692.454843][T32284] ? memset+0x1f/0x40 [ 692.458819][T32284] ? fsnotify+0x12c3/0x1370 [ 692.463330][T32284] do_splice+0x15de/0x1a40 [ 692.467841][T32284] ? __fget_files+0x4b9/0x4e0 [ 692.472529][T32284] ? __fdget+0x199/0x220 [ 692.476768][T32284] __x64_sys_splice+0x14f/0x1f0 21:58:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 692.481719][T32284] do_syscall_64+0xf3/0x1b0 [ 692.486222][T32284] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 692.492102][T32284] RIP: 0033:0x45ca59 [ 692.495992][T32284] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 692.515582][T32284] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 692.523987][T32284] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 21:58:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:55 executing program 3 (fault-call:4 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 692.531950][T32284] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 692.539911][T32284] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 692.547998][T32284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 692.555962][T32284] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 692.633592][T32298] FAULT_INJECTION: forcing a failure. [ 692.633592][T32298] name failslab, interval 1, probability 0, space 0, times 0 [ 692.648262][T32298] CPU: 1 PID: 32298 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 692.656575][T32298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.666609][T32298] Call Trace: [ 692.669874][T32298] dump_stack+0x1e9/0x30e [ 692.674189][T32298] should_fail+0x433/0x5b0 [ 692.678578][T32298] ? sock_kmalloc+0x98/0x100 [ 692.683134][T32298] should_failslab+0x5/0x20 [ 692.687605][T32298] __kmalloc+0x74/0x330 [ 692.691734][T32298] sock_kmalloc+0x98/0x100 [ 692.696120][T32298] hash_recvmsg+0x1bd/0x810 [ 692.700681][T32298] ? hash_sendmsg+0xb40/0xb40 [ 692.705327][T32298] ____sys_recvmsg+0x24a/0x510 [ 692.710071][T32298] ? import_iovec+0x12a/0x2c0 [ 692.714725][T32298] do_recvmmsg+0x429/0x1500 [ 692.719201][T32298] ? rcu_lock_release+0x5/0x20 [ 692.723955][T32298] ? ksys_write+0x1b1/0x220 [ 692.728432][T32298] ? ksys_write+0x1b1/0x220 [ 692.732953][T32298] ? check_preemption_disabled+0xb0/0x240 [ 692.738640][T32298] ? debug_smp_processor_id+0x5/0x20 [ 692.743984][T32298] __x64_sys_recvmmsg+0x11d/0x1a0 [ 692.748986][T32298] do_syscall_64+0xf3/0x1b0 [ 692.753467][T32298] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 692.759354][T32298] RIP: 0033:0x45ca59 [ 692.763230][T32298] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 692.782800][T32298] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 692.791185][T32298] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 692.799246][T32298] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 692.807236][T32298] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 692.815184][T32298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 692.823228][T32298] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 692.837540][ T8150] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 692.845171][ T5] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 693.005078][T29588] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 693.115035][ T8150] usb 1-1: Using ep0 maxpacket: 16 [ 693.135041][ T5] usb 3-1: device descriptor read/64, error 18 [ 693.245350][ T8150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.256497][ T8150] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 693.269371][ T8150] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 693.278793][T29588] usb 2-1: Using ep0 maxpacket: 16 [ 693.284010][ T8150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.294331][ T8150] usb 1-1: config 0 descriptor?? [ 693.405231][T29588] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.415405][T29588] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 693.424377][T29588] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 693.433482][T29588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.442349][T29588] usb 2-1: config 0 descriptor?? [ 693.535033][ T5] usb 3-1: device descriptor read/64, error 18 [ 693.766456][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.773776][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.794082][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.801606][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.812335][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.819804][ T5] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 693.830622][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.838159][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.849549][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.856898][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.864097][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.874675][ T8150] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 693.882340][ T8150] microsoft 0003:045E:07DA.0036: No inputs registered, leaving [ 693.894250][ T8150] microsoft 0003:045E:07DA.0036: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 693.911431][ T8150] microsoft 0003:045E:07DA.0036: no inputs found [ 693.917851][ T8150] microsoft 0003:045E:07DA.0036: could not initialize ff, continuing anyway [ 694.134952][ T5] usb 3-1: device descriptor read/64, error 18 [ 694.174850][ T8150] usb 1-1: USB disconnect, device number 90 [ 694.564957][ T5] usb 3-1: device descriptor read/64, error 18 [ 694.685114][ T5] usb usb3-port1: attempt power cycle 21:58:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:58 executing program 4 (fault-call:3 fault-nth:16): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:58:58 executing program 3 (fault-call:4 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:58:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:58:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 695.422462][T27672] usb 2-1: USB disconnect, device number 33 [ 695.483711][T32333] FAULT_INJECTION: forcing a failure. [ 695.483711][T32333] name failslab, interval 1, probability 0, space 0, times 0 [ 695.518381][T32342] FAULT_INJECTION: forcing a failure. [ 695.518381][T32342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 695.540704][T32333] CPU: 1 PID: 32333 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 695.549041][T32333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.559088][T32333] Call Trace: [ 695.562367][T32333] dump_stack+0x1e9/0x30e [ 695.566689][T32333] should_fail+0x433/0x5b0 [ 695.571102][T32333] ? sock_kmalloc+0x98/0x100 [ 695.575672][T32333] should_failslab+0x5/0x20 [ 695.580150][T32333] __kmalloc+0x74/0x330 [ 695.584294][T32333] sock_kmalloc+0x98/0x100 [ 695.588706][T32333] hash_recvmsg+0x1bd/0x810 [ 695.593200][T32333] ? hash_sendmsg+0xb40/0xb40 [ 695.597852][T32333] ____sys_recvmsg+0x24a/0x510 [ 695.602601][T32333] ? import_iovec+0x12a/0x2c0 [ 695.607262][T32333] do_recvmmsg+0x429/0x1500 [ 695.611786][T32333] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 695.617234][T32333] ? check_preemption_disabled+0xa2/0x240 [ 695.622935][T32333] ? retint_kernel+0x2b/0x2b [ 695.627508][T32333] __x64_sys_recvmmsg+0x11d/0x1a0 [ 695.632513][T32333] do_syscall_64+0xf3/0x1b0 [ 695.636999][T32333] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 695.642876][T32333] RIP: 0033:0x45ca59 [ 695.646748][T32333] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 695.666329][T32333] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 695.674719][T32333] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 695.682672][T32333] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 695.690618][T32333] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 695.698567][T32333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 695.706521][T32333] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 695.714502][T32342] CPU: 0 PID: 32342 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 695.722828][T32342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.732875][T32342] Call Trace: [ 695.736161][T32342] dump_stack+0x1e9/0x30e [ 695.740487][T32342] should_fail+0x433/0x5b0 [ 695.744899][T32342] prepare_alloc_pages+0x28c/0x4a0 [ 695.750009][T32342] __alloc_pages_nodemask+0xbc/0x5e0 [ 695.755300][T32342] push_pipe+0x37a/0x630 [ 695.759544][T32342] iov_iter_get_pages_alloc+0xc70/0x1170 [ 695.765196][T32342] default_file_splice_read+0x125/0xa40 [ 695.770753][T32342] ? __mutex_lock_common+0x582/0x2fc0 [ 695.776121][T32342] ? memset+0x1f/0x40 [ 695.780097][T32342] ? fsnotify+0x12c3/0x1370 [ 695.784605][T32342] do_splice+0x15de/0x1a40 21:58:58 executing program 3 (fault-call:4 fault-nth:17): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 695.789025][T32342] ? __fget_files+0x4b9/0x4e0 [ 695.793702][T32342] ? __fdget+0x199/0x220 [ 695.797937][T32342] __x64_sys_splice+0x14f/0x1f0 [ 695.798896][T32351] FAULT_INJECTION: forcing a failure. [ 695.798896][T32351] name failslab, interval 1, probability 0, space 0, times 0 [ 695.802786][T32342] do_syscall_64+0xf3/0x1b0 [ 695.802802][T32342] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 695.802812][T32342] RIP: 0033:0x45ca59 21:58:58 executing program 4 (fault-call:3 fault-nth:17): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:58:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 695.802823][T32342] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 695.802829][T32342] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 695.802839][T32342] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 695.802845][T32342] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 695.802852][T32342] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 695.802858][T32342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 695.802864][T32342] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 695.895664][T32354] FAULT_INJECTION: forcing a failure. [ 695.895664][T32354] name failslab, interval 1, probability 0, space 0, times 0 [ 695.921281][T32354] CPU: 0 PID: 32354 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 695.929611][T32354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.939678][T32354] Call Trace: [ 695.942967][T32354] dump_stack+0x1e9/0x30e [ 695.947288][T32354] should_fail+0x433/0x5b0 [ 695.951696][T32354] ? kmalloc_array+0x2b/0x50 [ 695.956271][T32354] should_failslab+0x5/0x20 [ 695.960757][T32354] __kmalloc+0x74/0x330 [ 695.964906][T32354] kmalloc_array+0x2b/0x50 [ 695.969307][T32354] rw_copy_check_uvector+0x95/0x380 [ 695.974499][T32354] import_iovec+0x8a/0x2c0 [ 695.979253][T32354] vfs_readv+0x90/0x120 [ 695.983406][T32354] ? iov_iter_get_pages_alloc+0xea4/0x1170 [ 695.989223][T32354] default_file_splice_read+0x579/0xa40 [ 695.994804][T32354] do_splice+0x15de/0x1a40 [ 695.999226][T32354] ? __fget_files+0x4b9/0x4e0 [ 696.003900][T32354] ? __fdget+0x199/0x220 [ 696.008135][T32354] __x64_sys_splice+0x14f/0x1f0 [ 696.012992][T32354] do_syscall_64+0xf3/0x1b0 [ 696.017481][T32354] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 696.023377][T32354] RIP: 0033:0x45ca59 [ 696.027278][T32354] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 696.046862][T32354] RSP: 002b:00007f2fddc65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 696.055258][T32354] RAX: ffffffffffffffda RBX: 0000000000508b00 RCX: 000000000045ca59 [ 696.063217][T32354] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 696.071173][T32354] RBP: 000000000078bf00 R08: 0000001000000008 R09: 0000000000000000 [ 696.079131][T32354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 21:58:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 696.087090][T32354] R13: 0000000000000bde R14: 00000000004cedbb R15: 00007f2fddc666d4 [ 696.095078][T32351] CPU: 1 PID: 32351 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 696.103392][T32351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.113438][T32351] Call Trace: [ 696.114779][T29588] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 696.116714][T32351] dump_stack+0x1e9/0x30e [ 696.128543][T32351] should_fail+0x433/0x5b0 [ 696.132963][T32351] ? sock_kmalloc+0x98/0x100 [ 696.137547][T32351] should_failslab+0x5/0x20 21:58:59 executing program 4 (fault-call:3 fault-nth:18): syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 696.142046][T32351] __kmalloc+0x74/0x330 [ 696.146208][T32351] sock_kmalloc+0x98/0x100 [ 696.150619][T32351] hash_recvmsg+0x1bd/0x810 [ 696.155124][T32351] ? hash_sendmsg+0xb40/0xb40 [ 696.159825][T32351] ____sys_recvmsg+0x24a/0x510 [ 696.164600][T32351] ? import_iovec+0x12a/0x2c0 [ 696.169305][T32351] do_recvmmsg+0x429/0x1500 [ 696.173843][T32351] ? ksys_write+0x1b1/0x220 [ 696.178344][T32351] ? ksys_write+0x1b1/0x220 [ 696.182849][T32351] ? check_preemption_disabled+0xb0/0x240 21:58:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 696.188571][T32351] ? debug_smp_processor_id+0x5/0x20 [ 696.193862][T32351] __x64_sys_recvmmsg+0x11d/0x1a0 [ 696.198888][T32351] do_syscall_64+0xf3/0x1b0 [ 696.203382][T32351] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 696.209264][T32351] RIP: 0033:0x45ca59 [ 696.213150][T32351] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 696.232749][T32351] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 696.241143][T32351] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 696.249121][T32351] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 696.257085][T32351] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 696.265050][T32351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 696.273015][T32351] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 696.287081][T27672] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 696.294747][ T5] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 696.504873][ T5] usb 3-1: device descriptor read/8, error -61 [ 696.514774][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 696.534760][T27672] usb 2-1: Using ep0 maxpacket: 16 [ 696.645822][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.654876][T27672] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.662004][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.669016][T27672] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 696.680102][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 696.690797][T27672] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 696.704175][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.709071][T27672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.721565][T29588] usb 1-1: config 0 descriptor?? [ 696.735613][T27672] usb 2-1: config 0 descriptor?? [ 696.796290][ T5] usb 3-1: device descriptor read/8, error -61 [ 697.064726][ T5] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 697.226183][T29588] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 697.233418][T29588] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 697.250564][ T5] usb 3-1: device descriptor read/8, error -61 [ 697.256849][T29588] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 697.264050][T29588] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 697.276944][T29588] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 697.284177][T29588] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 697.297657][T29588] microsoft 0003:045E:07DA.0037: No inputs registered, leaving [ 697.306626][T29588] microsoft 0003:045E:07DA.0037: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 697.318638][T29588] microsoft 0003:045E:07DA.0037: no inputs found [ 697.325286][T29588] microsoft 0003:045E:07DA.0037: could not initialize ff, continuing anyway [ 697.524820][ T5] usb 3-1: device descriptor read/8, error -61 [ 697.634376][T29588] usb 1-1: USB disconnect, device number 91 [ 697.654820][ T5] usb usb3-port1: unable to enumerate USB device 21:59:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 21:59:01 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:01 executing program 3 (fault-call:4 fault-nth:18): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 698.688783][ T5] usb 2-1: USB disconnect, device number 34 21:59:01 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000010, 0x0) [ 698.795904][T32406] FAULT_INJECTION: forcing a failure. [ 698.795904][T32406] name failslab, interval 1, probability 0, space 0, times 0 [ 698.810142][T32406] CPU: 1 PID: 32406 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 698.818483][T32406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.828529][T32406] Call Trace: [ 698.831816][T32406] dump_stack+0x1e9/0x30e [ 698.836166][T32406] should_fail+0x433/0x5b0 [ 698.840581][T32406] ? sock_kmalloc+0x98/0x100 21:59:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 698.845163][T32406] should_failslab+0x5/0x20 [ 698.849655][T32406] __kmalloc+0x74/0x330 [ 698.853809][T32406] sock_kmalloc+0x98/0x100 [ 698.858223][T32406] hash_recvmsg+0x1bd/0x810 [ 698.862738][T32406] ? hash_sendmsg+0xb40/0xb40 [ 698.867424][T32406] ____sys_recvmsg+0x24a/0x510 [ 698.872199][T32406] ? import_iovec+0x12a/0x2c0 [ 698.876887][T32406] do_recvmmsg+0x429/0x1500 [ 698.881411][T32406] ? retint_kernel+0x2b/0x2b [ 698.886020][T32406] ? do_syscall_64+0xb5/0x1b0 [ 698.890708][T32406] __x64_sys_recvmmsg+0x11d/0x1a0 21:59:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 698.895728][T32406] do_syscall_64+0xf3/0x1b0 [ 698.900230][T32406] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 698.906115][T32406] RIP: 0033:0x45ca59 [ 698.909998][T32406] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 698.929607][T32406] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 698.938096][T32406] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 21:59:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:02 executing program 3 (fault-call:4 fault-nth:19): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 698.946062][T32406] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 698.954027][T32406] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 698.961989][T32406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 698.969951][T32406] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 699.068340][T32426] FAULT_INJECTION: forcing a failure. [ 699.068340][T32426] name failslab, interval 1, probability 0, space 0, times 0 [ 699.081626][T32426] CPU: 1 PID: 32426 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 699.089934][T32426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.099981][T32426] Call Trace: [ 699.103246][T32426] dump_stack+0x1e9/0x30e [ 699.107555][T32426] should_fail+0x433/0x5b0 [ 699.111948][T32426] ? sock_kmalloc+0x98/0x100 [ 699.116509][T32426] should_failslab+0x5/0x20 [ 699.120982][T32426] __kmalloc+0x74/0x330 [ 699.125127][T32426] sock_kmalloc+0x98/0x100 [ 699.129516][T32426] hash_recvmsg+0x1bd/0x810 [ 699.133991][T32426] ? hash_sendmsg+0xb40/0xb40 [ 699.138636][T32426] ____sys_recvmsg+0x24a/0x510 [ 699.143391][T32426] ? import_iovec+0x12a/0x2c0 [ 699.148047][T32426] do_recvmmsg+0x429/0x1500 [ 699.152541][T32426] ? rcu_lock_release+0x5/0x20 [ 699.157288][T32426] ? ksys_write+0x1b1/0x220 [ 699.161802][T32426] ? ksys_write+0x1b1/0x220 [ 699.166284][T32426] ? check_preemption_disabled+0xb0/0x240 [ 699.171972][T32426] ? debug_smp_processor_id+0x5/0x20 [ 699.177229][T32426] __x64_sys_recvmmsg+0x11d/0x1a0 [ 699.182242][T32426] do_syscall_64+0xf3/0x1b0 [ 699.186740][T32426] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 699.192629][T32426] RIP: 0033:0x45ca59 [ 699.196493][T32426] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 699.216071][T32426] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 699.224458][T32426] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 699.232411][T32426] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 699.240354][T32426] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 699.248293][T32426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 699.256242][T32426] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 699.278164][ T2494] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 699.285909][ T2506] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 699.464577][ T5] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 699.524558][ T2506] usb 1-1: Using ep0 maxpacket: 16 [ 699.564746][ T2494] usb 3-1: device descriptor read/64, error 18 [ 699.644938][ T2506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.655883][ T2506] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 699.669877][ T2506] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.679771][ T2506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.689791][ T2506] usb 1-1: config 0 descriptor?? [ 699.744820][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 699.884660][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.894824][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 699.908054][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.917188][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.926865][ T5] usb 2-1: config 0 descriptor?? [ 699.954610][ T2494] usb 3-1: device descriptor read/64, error 18 [ 699.968037][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 700.175695][ T2506] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 700.182932][ T2506] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 700.201092][ T2506] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 700.211214][ T2506] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 700.224497][ T2494] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 700.232109][ T2506] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 700.243974][ T2506] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 700.254190][ T2506] microsoft 0003:045E:07DA.0038: No inputs registered, leaving [ 700.270210][ T2506] microsoft 0003:045E:07DA.0038: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 700.286207][ T2506] microsoft 0003:045E:07DA.0038: no inputs found [ 700.292537][ T2506] microsoft 0003:045E:07DA.0038: could not initialize ff, continuing anyway [ 700.494465][ T2494] usb 3-1: device descriptor read/64, error 18 [ 700.577414][ T5] usb 1-1: USB disconnect, device number 92 [ 700.884449][ T2494] usb 3-1: device descriptor read/64, error 18 [ 701.004615][ T2494] usb usb3-port1: attempt power cycle [ 701.722631][ T2494] usb 3-1: new high-speed USB device number 35 using dummy_hcd 21:59:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:04 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x2) 21:59:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:04 executing program 3 (fault-call:4 fault-nth:20): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 701.870205][ T3370] usb 2-1: USB disconnect, device number 35 21:59:05 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xf) [ 701.992201][T32475] FAULT_INJECTION: forcing a failure. [ 701.992201][T32475] name failslab, interval 1, probability 0, space 0, times 0 [ 702.014053][T32475] CPU: 0 PID: 32475 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 702.022403][T32475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.032469][T32475] Call Trace: [ 702.035757][T32475] dump_stack+0x1e9/0x30e 21:59:05 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10) [ 702.040084][T32475] should_fail+0x433/0x5b0 [ 702.044520][T32475] ? sock_kmalloc+0x98/0x100 [ 702.049095][T32475] should_failslab+0x5/0x20 [ 702.053594][T32475] __kmalloc+0x74/0x330 [ 702.057749][T32475] sock_kmalloc+0x98/0x100 [ 702.062150][T32475] hash_recvmsg+0x1bd/0x810 [ 702.066629][T32475] ? hash_sendmsg+0xb40/0xb40 [ 702.071289][T32475] ____sys_recvmsg+0x24a/0x510 [ 702.076044][T32475] ? import_iovec+0x12a/0x2c0 [ 702.080705][T32475] do_recvmmsg+0x429/0x1500 [ 702.085250][T32475] ? rcu_read_lock_sched_held+0x2f/0xa0 21:59:05 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xf00) [ 702.090781][T32475] ? check_preemption_disabled+0xb0/0x240 [ 702.096490][T32475] ? debug_smp_processor_id+0x5/0x20 [ 702.101779][T32475] __x64_sys_recvmmsg+0x11d/0x1a0 [ 702.106807][T32475] do_syscall_64+0xf3/0x1b0 [ 702.111309][T32475] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 702.117191][T32475] RIP: 0033:0x45ca59 [ 702.121057][T32475] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:05 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x1000000) [ 702.140641][T32475] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 702.149043][T32475] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 702.157004][T32475] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 702.164981][T32475] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 702.172945][T32475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 702.181038][T32475] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:05 executing program 3 (fault-call:4 fault-nth:21): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:05 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x2000000) [ 702.204578][ T2494] usb 3-1: device not accepting address 35, error -71 [ 702.270155][T32498] FAULT_INJECTION: forcing a failure. [ 702.270155][T32498] name failslab, interval 1, probability 0, space 0, times 0 [ 702.283794][T32498] CPU: 0 PID: 32498 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 702.292123][T32498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.302152][T32498] Call Trace: [ 702.305421][T32498] dump_stack+0x1e9/0x30e [ 702.309738][T32498] should_fail+0x433/0x5b0 [ 702.314149][T32498] ? sock_kmalloc+0x98/0x100 [ 702.318710][T32498] should_failslab+0x5/0x20 [ 702.323336][T32498] __kmalloc+0x74/0x330 [ 702.324319][ T3370] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 702.327474][T32498] sock_kmalloc+0x98/0x100 [ 702.327488][T32498] hash_recvmsg+0x1bd/0x810 [ 702.327502][T32498] ? hash_sendmsg+0xb40/0xb40 [ 702.327514][T32498] ____sys_recvmsg+0x24a/0x510 [ 702.327538][T32498] ? import_iovec+0x12a/0x2c0 [ 702.327552][T32498] do_recvmmsg+0x429/0x1500 [ 702.327582][T32498] ? ksys_write+0x1b1/0x220 [ 702.366898][T32498] ? ksys_write+0x1b1/0x220 [ 702.371450][T32498] ? check_preemption_disabled+0xb0/0x240 [ 702.377142][T32498] ? debug_smp_processor_id+0x5/0x20 [ 702.382402][T32498] __x64_sys_recvmmsg+0x11d/0x1a0 [ 702.387404][T32498] do_syscall_64+0xf3/0x1b0 [ 702.391880][T32498] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 702.397747][T32498] RIP: 0033:0x45ca59 [ 702.401612][T32498] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 702.421197][T32498] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 702.429679][T32498] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 702.437665][T32498] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 702.445645][T32498] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 702.453613][T32498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 702.461588][T32498] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 702.475546][ T5] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 702.574296][ T3370] usb 2-1: Using ep0 maxpacket: 16 [ 702.585364][ T2494] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 702.695933][ T3370] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.706068][ T3370] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 702.719491][ T3370] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 702.728985][ T3370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.734337][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 702.742413][ T3370] usb 2-1: config 0 descriptor?? [ 702.754414][ T2494] usb 3-1: device descriptor read/8, error -61 [ 702.785009][ T3370] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 702.874329][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.885284][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 702.899759][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 702.909445][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.923047][ T5] usb 1-1: config 0 descriptor?? [ 703.024372][ T2494] usb 3-1: device descriptor read/8, error -61 [ 703.144388][ T2494] usb usb3-port1: unable to enumerate USB device [ 703.395780][ T5] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 703.403018][ T5] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 703.418789][ T5] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 703.426455][ T5] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 703.433789][ T5] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 703.441335][ T5] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 703.449225][ T5] microsoft 0003:045E:07DA.0039: No inputs registered, leaving [ 703.462646][ T5] microsoft 0003:045E:07DA.0039: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 703.479186][ T5] microsoft 0003:045E:07DA.0039: no inputs found [ 703.489457][ T5] microsoft 0003:045E:07DA.0039: could not initialize ff, continuing anyway [ 703.799004][ T5] usb 1-1: USB disconnect, device number 93 21:59:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:07 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xf000000) 21:59:07 executing program 3 (fault-call:4 fault-nth:22): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be80"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 704.908180][ T5] usb 2-1: USB disconnect, device number 36 [ 705.038892][T32544] FAULT_INJECTION: forcing a failure. [ 705.038892][T32544] name failslab, interval 1, probability 0, space 0, times 0 [ 705.059579][T32544] CPU: 1 PID: 32544 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 705.067905][T32544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.077935][T32544] Call Trace: [ 705.081212][T32544] dump_stack+0x1e9/0x30e [ 705.085519][T32544] should_fail+0x433/0x5b0 [ 705.089912][T32544] ? sock_kmalloc+0x98/0x100 [ 705.094481][T32544] should_failslab+0x5/0x20 [ 705.098954][T32544] __kmalloc+0x74/0x330 [ 705.103083][T32544] sock_kmalloc+0x98/0x100 [ 705.107472][T32544] hash_recvmsg+0x1bd/0x810 [ 705.111951][T32544] ? hash_sendmsg+0xb40/0xb40 [ 705.116602][T32544] ____sys_recvmsg+0x24a/0x510 [ 705.121343][T32544] ? import_iovec+0x12a/0x2c0 [ 705.126014][T32544] do_recvmmsg+0x429/0x1500 [ 705.130489][T32544] ? rcu_lock_release+0x5/0x20 [ 705.135241][T32544] ? ksys_write+0x1b1/0x220 [ 705.139712][T32544] ? ksys_write+0x1b1/0x220 [ 705.144186][T32544] ? check_preemption_disabled+0xb0/0x240 [ 705.149879][T32544] ? debug_smp_processor_id+0x5/0x20 [ 705.155146][T32544] __x64_sys_recvmmsg+0x11d/0x1a0 [ 705.160151][T32544] do_syscall_64+0xf3/0x1b0 [ 705.164671][T32544] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 705.170534][T32544] RIP: 0033:0x45ca59 [ 705.174455][T32544] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 705.194036][T32544] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 705.202430][T32544] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 705.210373][T32544] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 705.218314][T32544] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 705.226256][T32544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 21:59:08 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10000000) [ 705.234204][T32544] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:08 executing program 3 (fault-call:4 fault-nth:23): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:08 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10000000000) [ 705.338525][T32558] FAULT_INJECTION: forcing a failure. [ 705.338525][T32558] name failslab, interval 1, probability 0, space 0, times 0 [ 705.352510][T32558] CPU: 0 PID: 32558 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 705.360837][T32558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.370881][T32558] Call Trace: [ 705.374168][T32558] dump_stack+0x1e9/0x30e [ 705.378508][T32558] should_fail+0x433/0x5b0 [ 705.382925][T32558] ? sock_kmalloc+0x98/0x100 21:59:08 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x100000000000000) 21:59:08 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x200000000000000) [ 705.387523][T32558] should_failslab+0x5/0x20 [ 705.392015][T32558] __kmalloc+0x74/0x330 [ 705.396168][T32558] sock_kmalloc+0x98/0x100 [ 705.400582][T32558] hash_recvmsg+0x1bd/0x810 [ 705.405082][T32558] ? hash_sendmsg+0xb40/0xb40 [ 705.409747][T32558] ____sys_recvmsg+0x24a/0x510 [ 705.414514][T32558] ? import_iovec+0x12a/0x2c0 [ 705.419203][T32558] do_recvmmsg+0x429/0x1500 [ 705.423719][T32558] ? rcu_lock_release+0x5/0x20 [ 705.428498][T32558] ? check_preemption_disabled+0xa2/0x240 [ 705.434228][T32558] ? retint_kernel+0x2b/0x2b 21:59:08 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xf00000000000000) [ 705.438816][T32558] ? check_preemption_disabled+0xb0/0x240 [ 705.444524][T32558] ? debug_smp_processor_id+0x5/0x20 [ 705.449801][T32558] __x64_sys_recvmmsg+0x11d/0x1a0 [ 705.454837][T32558] do_syscall_64+0xf3/0x1b0 [ 705.459335][T32558] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 705.465213][T32558] RIP: 0033:0x45ca59 [ 705.469096][T32558] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 705.488690][T32558] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 705.497090][T32558] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 705.505065][T32558] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 705.513028][T32558] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 705.520970][T32558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 705.529066][T32558] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 705.541702][ T8150] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 705.756780][ T5] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 705.764579][T29588] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 705.814257][ T8150] usb 1-1: Using ep0 maxpacket: 16 [ 705.934574][ T8150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.945554][ T8150] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 705.958800][ T8150] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 705.968100][ T8150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.977909][ T8150] usb 1-1: config 0 descriptor?? [ 706.014762][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 706.020871][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 706.174139][T29588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.184318][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.194448][T29588] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 706.203379][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 706.215049][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 706.228587][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 706.238237][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.246637][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.259614][T29588] usb 3-1: config 0 descriptor?? [ 706.270263][ T5] usb 2-1: config 0 descriptor?? [ 706.324983][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 706.455577][ T8150] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 706.462832][ T8150] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 706.472180][ T8150] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 706.489947][ T8150] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 706.497513][ T8150] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 706.505055][ T8150] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 706.512659][ T8150] microsoft 0003:045E:07DA.003A: No inputs registered, leaving [ 706.521122][ T8150] microsoft 0003:045E:07DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 706.535579][ T8150] microsoft 0003:045E:07DA.003A: no inputs found [ 706.541909][ T8150] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway [ 706.859896][T27672] usb 1-1: USB disconnect, device number 94 21:59:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:11 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x1000000000000000) 21:59:11 executing program 3 (fault-call:4 fault-nth:24): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be80"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 708.216081][ T8150] usb 3-1: USB disconnect, device number 37 [ 708.251678][T29588] usb 2-1: USB disconnect, device number 37 21:59:11 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xffffffff00000000) [ 708.380787][T32624] FAULT_INJECTION: forcing a failure. [ 708.380787][T32624] name failslab, interval 1, probability 0, space 0, times 0 [ 708.407011][T32624] CPU: 0 PID: 32624 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 708.415353][T32624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.425401][T32624] Call Trace: 21:59:11 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x7, 0x40}]}, 0xc, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) [ 708.428690][T32624] dump_stack+0x1e9/0x30e [ 708.433012][T32624] should_fail+0x433/0x5b0 [ 708.437435][T32624] ? sock_kmalloc+0x98/0x100 [ 708.442020][T32624] should_failslab+0x5/0x20 [ 708.446526][T32624] __kmalloc+0x74/0x330 [ 708.450681][T32624] sock_kmalloc+0x98/0x100 [ 708.455095][T32624] hash_recvmsg+0x1bd/0x810 [ 708.459598][T32624] ? hash_sendmsg+0xb40/0xb40 [ 708.464270][T32624] ____sys_recvmsg+0x24a/0x510 [ 708.469045][T32624] ? import_iovec+0x12a/0x2c0 [ 708.473720][T32624] do_recvmmsg+0x429/0x1500 21:59:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, 0xffffff00, '\x00', 'ipvlan1\x00', {}, {}, 0x6c, 0x2, 0xa}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0xcab, 0x3, 0x2, 'snmp\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0x4, 0x5, 'syz0\x00', 'syz1\x00', {0xfe9e}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x3600) set_thread_area(&(0x7f0000000400)={0xc, 0x20000000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000809b032609b6702edf784a89c4384221f3485fe7ec42bdd09cd36c3ee888e6157fd7fe57f7f23a9879907555ced302cc"], 0x32) 21:59:11 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x2d, 0x0, 0xfb, 0x5}, {0x9, 0x1, 0x80, 0x6}, {0x400, 0x9, 0x7, 0x4}, {0x20, 0x7, 0xbe, 0x8}, {0x0, 0xaa, 0x81, 0xe63}, {0x3c, 0x76, 0xa3, 0x7}, {0x7, 0x1, 0x23, 0x400}, {0x2, 0x0, 0xcb, 0x4b}, {0x3, 0x5, 0x4, 0x1}]}, 0x10) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 708.478341][T32624] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 708.483787][T32624] ? check_preemption_disabled+0xa2/0x240 [ 708.489501][T32624] ? retint_kernel+0x2b/0x2b [ 708.494100][T32624] __x64_sys_recvmmsg+0x11d/0x1a0 [ 708.499126][T32624] do_syscall_64+0xf3/0x1b0 [ 708.503628][T32624] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 708.509511][T32624] RIP: 0033:0x45ca59 21:59:11 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x44, 0xb00c0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x111500, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 708.513397][T32624] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 708.532992][T32624] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 708.541397][T32624] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 708.549358][T32624] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 708.557321][T32624] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 708.565286][T32624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 708.573252][T32624] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:11 executing program 3 (fault-call:4 fault-nth:25): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 708.648535][T32651] FAULT_INJECTION: forcing a failure. [ 708.648535][T32651] name failslab, interval 1, probability 0, space 0, times 0 [ 708.662829][T32651] CPU: 1 PID: 32651 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 708.671162][T32651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.681201][T32651] Call Trace: [ 708.684475][T32651] dump_stack+0x1e9/0x30e [ 708.688791][T32651] should_fail+0x433/0x5b0 [ 708.693196][T32651] ? sock_kmalloc+0x98/0x100 [ 708.697753][T32651] should_failslab+0x5/0x20 [ 708.702223][T32651] __kmalloc+0x74/0x330 [ 708.706365][T32651] sock_kmalloc+0x98/0x100 [ 708.710762][T32651] hash_recvmsg+0x1bd/0x810 [ 708.715264][T32651] ? hash_sendmsg+0xb40/0xb40 [ 708.719910][T32651] ____sys_recvmsg+0x24a/0x510 [ 708.724656][T32651] ? import_iovec+0x12a/0x2c0 [ 708.729308][T32651] do_recvmmsg+0x429/0x1500 [ 708.733796][T32651] ? ksys_write+0x1b1/0x220 [ 708.738279][T32651] ? ksys_write+0x1b1/0x220 [ 708.742755][T32651] ? check_preemption_disabled+0xb0/0x240 [ 708.748443][T32651] ? debug_smp_processor_id+0x5/0x20 [ 708.753705][T32651] __x64_sys_recvmmsg+0x11d/0x1a0 [ 708.758719][T32651] do_syscall_64+0xf3/0x1b0 [ 708.763205][T32651] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 708.769066][T32651] RIP: 0033:0x45ca59 [ 708.772936][T32651] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 708.792515][T32651] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 708.800903][T32651] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 708.808858][T32651] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 708.816799][T32651] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 708.824880][T32651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 708.832821][T32651] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 708.913797][ T5] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 709.053840][T29588] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 709.053931][ T8150] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 709.173811][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 709.303898][ T8150] usb 3-1: Using ep0 maxpacket: 16 [ 709.309184][T29588] usb 2-1: Using ep0 maxpacket: 16 [ 709.314354][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.325433][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 709.340435][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.350197][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.360425][ T5] usb 1-1: config 0 descriptor?? [ 709.454027][T29588] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.464547][ T8150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.474861][ T8150] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 709.485710][T29588] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 709.499526][ T8150] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.509213][T29588] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.518932][ T8150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.527532][T29588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.537616][ T8150] usb 3-1: config 0 descriptor?? [ 709.548484][T29588] usb 2-1: config 0 descriptor?? [ 709.584828][T29588] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 709.845186][ T5] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 709.852539][ T5] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 709.873048][ T5] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 709.883149][ T5] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 709.894323][ T5] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 709.901527][ T5] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 709.914514][ T5] microsoft 0003:045E:07DA.003B: No inputs registered, leaving [ 709.927675][ T5] microsoft 0003:045E:07DA.003B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 709.939463][ T5] microsoft 0003:045E:07DA.003B: no inputs found [ 709.953727][ T5] microsoft 0003:045E:07DA.003B: could not initialize ff, continuing anyway [ 710.247690][ T5] usb 1-1: USB disconnect, device number 95 21:59:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:14 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000c00000000000203000008000300", @ANYRES32=r3, @ANYBLOB='\n\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\v\x00\x00\x00\x00\x00'], 0x30}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x1c02, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8ae5f3898b43"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x1000000008, 0x0) 21:59:14 executing program 3 (fault-call:4 fault-nth:26): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be80"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") [ 711.501692][ T3370] usb 3-1: USB disconnect, device number 38 [ 711.511706][ T5] usb 2-1: USB disconnect, device number 38 21:59:14 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 711.664581][T32707] FAULT_INJECTION: forcing a failure. [ 711.664581][T32707] name failslab, interval 1, probability 0, space 0, times 0 [ 711.678841][T32707] CPU: 1 PID: 32707 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 711.687337][T32707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.697383][T32707] Call Trace: [ 711.700659][T32707] dump_stack+0x1e9/0x30e [ 711.704989][T32707] should_fail+0x433/0x5b0 [ 711.709406][T32707] ? sock_kmalloc+0x98/0x100 21:59:14 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x802) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 711.713990][T32707] should_failslab+0x5/0x20 [ 711.718484][T32707] __kmalloc+0x74/0x330 [ 711.722636][T32707] sock_kmalloc+0x98/0x100 [ 711.727052][T32707] hash_recvmsg+0x1bd/0x810 [ 711.731554][T32707] ? hash_sendmsg+0xb40/0xb40 [ 711.736215][T32707] ____sys_recvmsg+0x24a/0x510 [ 711.740970][T32707] ? retint_kernel+0x2b/0x2b [ 711.745563][T32707] ? import_iovec+0x12a/0x2c0 [ 711.750253][T32707] do_recvmmsg+0x429/0x1500 [ 711.754758][T32707] ? trace_hardirqs_on_thunk+0x1a/0x1c 21:59:14 executing program 4: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 711.760240][T32707] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 711.765701][T32707] ? check_preemption_disabled+0xa2/0x240 [ 711.771423][T32707] ? retint_kernel+0x2b/0x2b [ 711.776010][T32707] __x64_sys_recvmmsg+0x11d/0x1a0 [ 711.781037][T32707] do_syscall_64+0xf3/0x1b0 [ 711.785543][T32707] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 711.791426][T32707] RIP: 0033:0x45ca59 [ 711.795309][T32707] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:14 executing program 4: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff, 0x101200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 711.814900][T32707] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 711.823303][T32707] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 711.831265][T32707] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 711.839227][T32707] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 711.847190][T32707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 711.855154][T32707] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 712.023531][T27672] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 712.123578][ T3370] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 712.153498][ T5] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 712.263517][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 712.363819][ T3370] usb 3-1: Using ep0 maxpacket: 16 [ 712.384105][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.400878][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 712.420981][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 712.423584][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 712.430742][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.452162][T27672] usb 1-1: config 0 descriptor?? [ 712.493794][ T3370] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.508568][ T3370] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 712.518537][ T3370] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 712.528048][ T3370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.542050][ T3370] usb 3-1: config 0 descriptor?? [ 712.573803][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.588548][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 712.613695][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 712.622737][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.655884][ T5] usb 2-1: config 0 descriptor?? [ 712.694404][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 712.944965][T27672] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 712.967076][T27672] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 712.996962][T27672] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 713.013554][T27672] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 713.020941][T27672] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 713.035834][T27672] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 713.049820][T27672] microsoft 0003:045E:07DA.003C: No inputs registered, leaving [ 713.066210][T27672] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 713.089072][T27672] microsoft 0003:045E:07DA.003C: no inputs found [ 713.115879][T27672] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 713.356250][T27672] usb 1-1: USB disconnect, device number 96 [ 714.551957][T27672] usb 3-1: USB disconnect, device number 39 21:59:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:17 executing program 3 (fault-call:4 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:17 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x410402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf25030000364358e1e02db200140006006772653000000000000000000087000000000500e000000105000100000000002000070073797374656d04733a125175d668038de54a5f753a6f626a6563745f723a636572745f743a73300014000200fe8000000000000000000080000000aa2700070073797374656d5f753a6f626afd63745f723a6c986d5f636f6e74726f6c5f743a07000000080004000a01010114000200ff0100000000000000000000000000013af6d9659dba5e84ad771490492e22343cd17d34c80fb4990aa832fa81db688b5a2ce8cc654190f3b874583461d0b706e7aded4b38314c43bf4a11"], 0xb0}, 0x1, 0x0, 0x0, 0x20044040}, 0x20000) pipe(&(0x7f0000001280)={0xffffffffffffffff}) ioctl$KDDISABIO(r4, 0x4b37) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x7, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@map={0x18, 0xb, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x8, 0x2, 0xd, 0x401, 0xffffffc0}, @exit, @call={0x85, 0x0, 0x0, 0x7e}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0xfd04, 0x1000, &(0x7f0000000180)=""/4096, 0x41100, 0x0, [], 0x0, 0x1f, r1, 0x8, &(0x7f00000012c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000011c0)={0x4, 0x8, 0x3, 0x3}, 0x10, 0x0, r2}, 0x78) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000001480)={0x1, 0x2, 0x1000, 0xef, &(0x7f0000001300)="2b2d91cb0ba2e5bb00e51bda5b0bf01133c49a0cb1ee772aa99bfa35758f2cdc01a4380ad01c167e9c8de3f3d0a76d529eff5c5bbfbd5a8a17c2b3aef2f94e7242c123865df7737092ae8d8c29bf77fcec09c7b37ec2d7ff5c5fbae58f2c4e1699b6bd0b92460ee3e45dfc39882572472fb025030811beb71e0a1675db28b193f4fb4e068bab2567a21f15387be387b75652834b186293ae72b476065adb98e012cf93d6ce64b9d817eab753c914869705f49f1d80b0203ab83064448152dd09ce632926c21603b1d335590660e810f4fa8a287120510ae9a18e799d171198c29e3c9a7279a9418f0c0c044498fbbc", 0x80, 0x0, &(0x7f0000001400)="137f54b0f07d80597e10ca321c3bbfa259d3ad47d47e985b44d142f60b9ee84edda5e8d9d3547a394db99e1984d52745336d10d9ed1101aaa8cbe9e0f1fd6d2bea223e1cd1769d2e8b71ed611f5a601260dab16b492384545bd76367845cd8bd3d97191072d3830750b4f2234ac45134030e6c251704e467bfbf4fca536c611e"}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) r5 = syz_open_dev$video(0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x3600) stat(&(0x7f0000001180)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x6, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0xf7, 0x0, r7}, {0x5f8, 0x100000001, 0xfffffffffffffffb, 0xffffffffffff0000, 0x7fff, 0xffffffffffffff7e, 0x100000001, 0x10000}, {0x3, 0x0, 0x8, 0xffffffff}, 0x3f, 0x6e6bba, 0x0, 0x0, 0x1, 0x2}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0xa, @in6=@mcast2, 0x3503, 0x1, 0x1, 0x3, 0x7, 0x1, 0x6}}, 0xe8) splice(r5, 0x0, r3, 0x0, 0x81, 0xa) 21:59:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be8083"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 714.615723][ T2494] usb 2-1: USB disconnect, device number 39 [ 714.736739][ T318] FAULT_INJECTION: forcing a failure. [ 714.736739][ T318] name failslab, interval 1, probability 0, space 0, times 0 [ 714.759303][ T318] CPU: 0 PID: 318 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 714.767457][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.777501][ T318] Call Trace: [ 714.780792][ T318] dump_stack+0x1e9/0x30e [ 714.785122][ T318] should_fail+0x433/0x5b0 [ 714.789561][ T318] ? sock_kmalloc+0x98/0x100 [ 714.794147][ T318] should_failslab+0x5/0x20 [ 714.798634][ T318] __kmalloc+0x74/0x330 [ 714.802788][ T318] sock_kmalloc+0x98/0x100 [ 714.807198][ T318] hash_recvmsg+0x1bd/0x810 [ 714.811699][ T318] ? hash_sendmsg+0xb40/0xb40 [ 714.816370][ T318] ____sys_recvmsg+0x24a/0x510 [ 714.821125][ T318] ? import_iovec+0x12a/0x2c0 [ 714.825792][ T318] do_recvmmsg+0x429/0x1500 [ 714.830319][ T318] ? trace_hardirqs_on_thunk+0x1a/0x1c 21:59:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:17 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x35) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 714.835772][ T318] ? check_preemption_disabled+0xa2/0x240 [ 714.841490][ T318] ? retint_kernel+0x2b/0x2b [ 714.846190][ T318] __x64_sys_recvmmsg+0x11d/0x1a0 [ 714.851207][ T318] do_syscall_64+0xf3/0x1b0 [ 714.855695][ T318] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 714.861591][ T318] RIP: 0033:0x45ca59 [ 714.865487][ T318] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:17 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) write$P9_RWALK(r2, &(0x7f0000000080)={0x71, 0x6f, 0x1, {0x8, [{0x10, 0x4, 0x1}, {0x1, 0x2, 0x6}, {0x4, 0x0, 0x3}, {0x10, 0x0, 0x8}, {0x8, 0x3, 0x7}, {0x20, 0x2, 0x2}, {0x40, 0x3, 0x8}, {0x0, 0x4, 0x8}]}}, 0x71) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0xb55, 0x401, 0x7fff, 0x675}}) 21:59:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 714.885081][ T318] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 714.893487][ T318] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 714.901448][ T318] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 714.909416][ T318] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.917381][ T318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 714.925346][ T318] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:17 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x1) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:18 executing program 3 (fault-call:4 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 715.055546][ T344] FAULT_INJECTION: forcing a failure. [ 715.055546][ T344] name failslab, interval 1, probability 0, space 0, times 0 [ 715.063357][T27672] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 715.070661][ T344] CPU: 0 PID: 344 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 715.076274][ T2494] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 715.084086][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.084092][ T344] Call Trace: [ 715.084109][ T344] dump_stack+0x1e9/0x30e [ 715.084142][ T344] should_fail+0x433/0x5b0 [ 715.084161][ T344] ? sock_kmalloc+0x98/0x100 [ 715.084172][ T344] should_failslab+0x5/0x20 [ 715.084181][ T344] __kmalloc+0x74/0x330 [ 715.084198][ T344] sock_kmalloc+0x98/0x100 [ 715.084213][ T344] hash_recvmsg+0x1bd/0x810 [ 715.136078][ T344] ? hash_sendmsg+0xb40/0xb40 [ 715.140757][ T344] ____sys_recvmsg+0x24a/0x510 [ 715.145532][ T344] ? import_iovec+0x12a/0x2c0 [ 715.150193][ T344] do_recvmmsg+0x429/0x1500 [ 715.154709][ T344] ? ksys_write+0x1b1/0x220 [ 715.159208][ T344] ? ksys_write+0x1b1/0x220 [ 715.163712][ T344] ? check_preemption_disabled+0xb0/0x240 [ 715.169512][ T344] ? debug_smp_processor_id+0x5/0x20 [ 715.174795][ T344] __x64_sys_recvmmsg+0x11d/0x1a0 [ 715.179813][ T344] do_syscall_64+0xf3/0x1b0 [ 715.184310][ T344] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 715.190295][ T344] RIP: 0033:0x45ca59 [ 715.194171][ T344] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 715.213763][ T344] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 715.222154][ T344] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 715.230097][ T344] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 715.238068][ T344] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 715.246023][ T344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 715.253977][ T344] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 715.264356][ T5] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 715.343313][T27672] usb 3-1: Using ep0 maxpacket: 16 [ 715.403429][ T2494] usb 2-1: Using ep0 maxpacket: 16 [ 715.464889][T27672] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.475027][T27672] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 715.490967][T27672] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 715.500116][T27672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.512741][T27672] usb 3-1: config 0 descriptor?? [ 715.523304][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 715.528874][ T2494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.540317][ T2494] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 715.554580][T27672] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 715.563030][ T2494] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 715.572809][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.585070][ T2494] usb 2-1: config 0 descriptor?? [ 715.624290][ T2494] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 715.673375][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.684537][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 715.699312][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 715.709118][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.720814][ T5] usb 1-1: config 0 descriptor?? [ 716.195001][ T5] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0 [ 716.212797][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003D/input/input57 [ 716.302292][ T5] microsoft 0003:045E:07DA.003D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 716.610836][ T5] usb 1-1: USB disconnect, device number 97 21:59:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) r3 = getpid() r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) setfsuid(r5) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x3600) epoll_pwait(r6, &(0x7f0000000100)=[{}], 0x1, 0x9, &(0x7f0000000140)={[0x400]}, 0x8) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={r3, r5, r8}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x6, 0x1, 0x8001, {0x7f, 0x8000}, 0x4, 0x101}) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:20 executing program 3 (fault-call:4 fault-nth:29): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be8083"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 717.655811][T29588] usb 3-1: USB disconnect, device number 40 [ 717.685970][ T5] usb 2-1: USB disconnect, device number 40 [ 717.811274][ T409] FAULT_INJECTION: forcing a failure. [ 717.811274][ T409] name failslab, interval 1, probability 0, space 0, times 0 [ 717.835757][ T409] CPU: 1 PID: 409 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 717.843925][ T409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.854068][ T409] Call Trace: [ 717.857377][ T409] dump_stack+0x1e9/0x30e 21:59:20 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xddb, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) splice(r2, 0x0, r0, 0x0, 0x401, 0x5dfee978224a9a9a) 21:59:20 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1000000000000016, 0x0, 0x40001, 0x1}, 0x2e) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000080)={0x8, 0x2, [0x80, 0x1, 0x1ff, 0x75d8, 0x8], 0x81}) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') clock_nanosleep(0x3, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001114000429bd7000fbdbdf25080003000300000800004b0013000000080001000100000008004f00040000000800ff0000000000000003000000000008004f00020000000800010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20004814}, 0x4004000) [ 717.861715][ T409] should_fail+0x433/0x5b0 [ 717.866128][ T409] ? sock_kmalloc+0x98/0x100 [ 717.870707][ T409] should_failslab+0x5/0x20 [ 717.875200][ T409] __kmalloc+0x74/0x330 [ 717.879384][ T409] sock_kmalloc+0x98/0x100 [ 717.883792][ T409] hash_recvmsg+0x1bd/0x810 [ 717.888297][ T409] ? hash_sendmsg+0xb40/0xb40 [ 717.893064][ T409] ____sys_recvmsg+0x24a/0x510 [ 717.897807][ T409] ? import_iovec+0x12a/0x2c0 [ 717.902470][ T409] do_recvmmsg+0x429/0x1500 [ 717.906963][ T409] ? rcu_lock_release+0x5/0x20 [ 717.911743][ T409] ? ksys_write+0x1b1/0x220 [ 717.916236][ T409] ? ksys_write+0x1b1/0x220 [ 717.920734][ T409] ? check_preemption_disabled+0xb0/0x240 [ 717.926446][ T409] ? debug_smp_processor_id+0x5/0x20 [ 717.931729][ T409] __x64_sys_recvmmsg+0x11d/0x1a0 [ 717.936752][ T409] do_syscall_64+0xf3/0x1b0 [ 717.941253][ T409] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 717.947135][ T409] RIP: 0033:0x45ca59 21:59:20 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$setown(r3, 0x8, r4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x20}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002abd7000fddbdf2506000000040001802800018014000400fe880000008000000000000000000101060001000a000000060005004e210000"], 0x40}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x717b4c60e71ed1d6) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 21:59:21 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 717.951020][ T409] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 717.970700][ T409] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 717.979099][ T409] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 717.987063][ T409] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 717.995023][ T409] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 718.002984][ T409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 21:59:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:21 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x8000) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 718.010946][ T409] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 718.193210][ T2693] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 718.363154][ T5] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 718.370799][T29588] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 718.463033][ T2693] usb 1-1: Using ep0 maxpacket: 16 [ 718.583411][ T2693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.594508][ T2693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 718.607942][ T2693] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 718.617074][ T2693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.630748][ T2693] usb 1-1: config 0 descriptor?? [ 718.635791][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 718.640989][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 718.773155][T29588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.783452][ T5] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 718.793942][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 718.807718][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 718.820586][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 718.830149][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 718.839646][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.848187][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.858702][T29588] usb 3-1: config 0 descriptor?? [ 718.867423][ T5] usb 2-1: config 0 descriptor?? [ 718.907712][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 718.933924][T29588] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 719.116173][ T2693] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 719.129821][ T2693] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003E/input/input58 [ 719.230455][ T2693] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 719.517025][T29588] usb 1-1: USB disconnect, device number 98 21:59:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:23 executing program 3 (fault-call:4 fault-nth:30): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:23 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000280)=r1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000080)={0x9, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @empty}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x3600) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000002c0)={0x3a, 0xd, 0xb, 0x9, 0x6, 0x2ee, 0x0, 0xa, 0xffffffffffffffff}) 21:59:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be8083"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") [ 720.810776][ T2693] usb 2-1: USB disconnect, device number 41 21:59:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 720.870025][ T494] Unknown ioctl -2147199776 [ 720.879625][ T2494] usb 3-1: USB disconnect, device number 41 [ 720.885171][ T496] Unknown ioctl -2147199776 21:59:23 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) syz_mount_image$afs(&(0x7f0000000080)='afs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x9, &(0x7f0000001780)=[{&(0x7f0000000100)="43b4109f57844ee0c577bb404350655042299132b8a817eb8d01e965b8419c6c10bd69aef602bd9816a23c08f8a19adf5e0bd7c4b4cf500e738a218b677a477cf39cc505829080a6", 0x48, 0x81}, {&(0x7f0000000180)="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", 0x1000, 0x3ea4}, {&(0x7f0000001180)="361f45957030ed17a450dbbfb1f4408ddb11bcdf107edd98002d50b2aeabb4ed371e42eaf4c68171f2bbd1d68e1be6a033c0edc30f47bbdead515e3b75009b7eab5629f4ad4b2cc6c4c3f99e8c7706e8117d45bb030f9ff96ea29ae6d1d5ecf00eb138fa50bdd503302fc33a27d41aeca2305666d2d7d4699c02574c95f6cfc3b390a073cbac8f7951b935b0747ea04731ce2c473f925a42fb3f6a2d815cb62dab92dd496ff3a68f76401c94739525c75aa55853d974b5809265699fcc5d854d8fcd2a2eb454a83d30782c2186", 0xcd, 0x5a}, {&(0x7f0000001280)="f35cbed50376c2323b304e1bd5b5cab820df8902cd1675bc91820f2dce511d99a02cf10e3baf08b22a5e934e81d236fb0f28cbc2b9dc3edc4e5491b22f236fb9e548c7affbedeeb434f1eaf2d743e09503534e2796f3ba4e886be025e106a010bd12c60d9c44c9b01873e4875a3afd0fe441e2d843e5d51be63b2a18ba02571745b1730e3fac03d2aacde67b64a8e0ee7b7f88d1dc0d", 0x96, 0x4}, {&(0x7f0000001340)="4b20b6b49b703a644cdd5f1468424014bdf43e9b3d90a989d88362a1f0aa0e9bd14ac8a43cbe45316775ef89a84b5ee26295d63f298aca9d7078d7543cdd5cfd3eb2407fd33dc77f2fa1bb3b9337642f46bc77dabc1e460ba6cd5088de9f5fcab2b239e2089fa0d01e5f170d812332aa672bb457820ca8c011a0de7ec2a76fd5e8308118a5879b199a1db01d3fd55da49bb315eb186762e02ae8465256541fb25aa2d50f7ac7bb2daae72e6882e460b9c47ef35c8da5d0b8c074f39436ed0397c3d7dae003bab2b2", 0xc8, 0xd9c}, {&(0x7f0000001440)="7ed4c844e2e59bc98c635efbcc786ca77470988e78b43316", 0x18, 0xeb78}, {&(0x7f0000001480)="024fcef0a1445f85dfa25b7527be867badd9838ab9043a544996d9bc11a228a6574110f267c400482930042305b01d488feee5fed91fe04d47d403491c768f6900b8e4bede7cd79b25911ae67234d0adcb24b06f4564c863ee16564dfc8844b0020102a704bba7dec48eca021e91e077be7592a09c9c143c6e40d2955e41b233c2d550459d005e3f4f4f79e9fa85f752c277d6416e560b2a5484b944dbd7108fe5a3308d30437878e52eb07e0f69967e7dd101ad886d94e1247e4d67af4b1340f3f4dcb3d01947c582f1b4615b71501b63a9477bf3af24e252c2b8627bf8ba690687c927890ae61dbea9", 0xea, 0x4}, {&(0x7f0000001580)="7f92ed4ef4ebf7ac7d9fae68b69d3c5b4854f21064947bcf8a931de4188df69afe3cbca5d5354a78b6e63b0a2a11d4a244cc3ed842701b792a9d79cccfb4efb4f386daa38037e4cf836a0133e9f2ff20d2d4bb19bf5a0b6601d65a60622803773f64e790884abe17893afbd4edb4597fa73200bc628f1c52b6617704b023b5ea664ddf071824ea1fd84cbf40b9cf7121474d16033e8dbe4b0a111c5e037e7178f33cc63426a8aa9e32b10fc039af811c60e74e19c293e88652c26c855baa4e5765d3d1496bd6b0dc15746df5e925b4c48977cefe114c33", 0xd7, 0xffffffff}, {&(0x7f0000001680)="c4123bcbde9b6af72d59df16b2f45dc324bae7597171cb5227aae9e4939d41052021e6d8a649bc7a62448bc4aed11327b8aa7a34a04b40165fd84284783165f789f23b2179e678dc884e111040a633c752beb0af3a0c224d0f79be15eb2ecb87551145a2e6d24ba10b54b5f7a097f9d2998f4f6706de33b148f01276a3828178d505eafa03dcb57b132c099f8f4c2a524530062bf00e296172ff61b95b6861320232eb05f7b6d8b22b7272192d567bf6fa59b5a307604d1a23fb52705d025e5f06462635e48cd4934e532e92ee6c7f295cb11b420cc1cd3cb819234490e77ba6", 0xe0, 0x59}], 0x80008, &(0x7f0000001880)={[{@flock_write='flock=write'}, {@autocell='autocell'}, {@flock_write='flock=write'}, {@flock_openafs='flock=openafs'}, {@autocell='autocell'}, {@flock_strict='flock=strict'}, {@flock_write='flock=write'}, {@flock_strict='flock=strict'}], [{@obj_type={'obj_type', 0x3d, '/dev/sg#\x00'}}, {@dont_measure='dont_measure'}]}) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 720.930139][ T495] FAULT_INJECTION: forcing a failure. [ 720.930139][ T495] name failslab, interval 1, probability 0, space 0, times 0 21:59:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 720.985920][ T495] CPU: 0 PID: 495 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 720.994194][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.004232][ T495] Call Trace: [ 721.007508][ T495] dump_stack+0x1e9/0x30e [ 721.011817][ T495] should_fail+0x433/0x5b0 [ 721.016214][ T495] ? sock_kmalloc+0x98/0x100 [ 721.020778][ T495] should_failslab+0x5/0x20 [ 721.025270][ T495] __kmalloc+0x74/0x330 [ 721.029407][ T495] sock_kmalloc+0x98/0x100 [ 721.033801][ T495] hash_recvmsg+0x1bd/0x810 [ 721.038281][ T495] ? hash_sendmsg+0xb40/0xb40 [ 721.042935][ T495] ____sys_recvmsg+0x24a/0x510 [ 721.047680][ T495] ? import_iovec+0x12a/0x2c0 [ 721.052335][ T495] do_recvmmsg+0x429/0x1500 [ 721.056835][ T495] ? ksys_write+0x1b1/0x220 [ 721.061311][ T495] ? ksys_write+0x1b1/0x220 [ 721.065790][ T495] ? check_preemption_disabled+0xb0/0x240 [ 721.071483][ T495] ? debug_smp_processor_id+0x5/0x20 [ 721.076763][ T495] __x64_sys_recvmmsg+0x11d/0x1a0 [ 721.081869][ T495] do_syscall_64+0xf3/0x1b0 [ 721.086351][ T495] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 721.092214][ T495] RIP: 0033:0x45ca59 [ 721.096082][ T495] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 721.115659][ T495] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 721.124040][ T495] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 721.131984][ T495] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 721.139928][ T495] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 721.147888][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 721.155835][ T495] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:24 executing program 3 (fault-call:4 fault-nth:31): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x0, 0x3600) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x95, 0x3, @buffer={0x0, 0x54, &(0x7f0000000080)=""/84}, &(0x7f0000000100)="e16dde88b68ddd683307400a9910fc273791629d7d80fcc3ef994f8d590d9bf11bdbdde0de4601b570c85cee4aee0bd3177472ae33078ec5b516643756e97a90e7f7558f46ea0c3c68bacc219bdbb91333d4bb4d4b37bcfa3b09ac2ca652e68fafe855e54ce3d9a401df2bf7762f6e21642045701c8526826e4a0e2e8114738293f775897b341d95c0e1ac0ce1b55ff9383a4d2cae", &(0x7f00000001c0)=""/123, 0xfffffeff, 0x10012, 0x0, &(0x7f0000000240)}) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 21:59:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 721.306696][ T518] FAULT_INJECTION: forcing a failure. [ 721.306696][ T518] name failslab, interval 1, probability 0, space 0, times 0 [ 721.321874][ T518] CPU: 0 PID: 518 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 721.330025][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.340065][ T518] Call Trace: [ 721.343346][ T518] dump_stack+0x1e9/0x30e [ 721.347670][ T518] should_fail+0x433/0x5b0 [ 721.352101][ T518] ? sock_kmalloc+0x98/0x100 [ 721.356675][ T518] should_failslab+0x5/0x20 [ 721.361162][ T518] __kmalloc+0x74/0x330 [ 721.365308][ T518] sock_kmalloc+0x98/0x100 [ 721.369726][ T518] hash_recvmsg+0x1bd/0x810 [ 721.374236][ T518] ? hash_sendmsg+0xb40/0xb40 [ 721.378893][ T518] ____sys_recvmsg+0x24a/0x510 [ 721.383640][ T518] ? lock_release+0x3d1/0x760 [ 721.388328][ T518] ? import_iovec+0x12a/0x2c0 [ 721.393011][ T518] do_recvmmsg+0x429/0x1500 [ 721.397507][ T518] ? check_preemption_disabled+0xa2/0x240 [ 721.403226][ T518] ? retint_kernel+0x2b/0x2b [ 721.407815][ T518] ? __x64_sys_recvmmsg+0xcb/0x1a0 [ 721.412913][ T518] ? __x64_sys_recvmmsg+0x109/0x1a0 [ 721.418096][ T518] __x64_sys_recvmmsg+0x11d/0x1a0 [ 721.423110][ T518] do_syscall_64+0xf3/0x1b0 [ 721.427698][ T518] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 721.433565][ T518] RIP: 0033:0x45ca59 [ 721.437432][ T518] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 721.457019][ T518] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 721.465529][ T518] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 721.473499][ T518] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 721.481464][ T518] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 721.489422][ T518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 721.497381][ T518] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 721.502891][T27672] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 721.516541][T29588] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 721.612880][ T2494] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 721.752817][T27672] usb 2-1: Using ep0 maxpacket: 16 [ 721.792799][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 721.853032][ T2494] usb 3-1: Using ep0 maxpacket: 16 [ 721.873312][T27672] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 721.883896][T27672] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.897338][T27672] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 721.906771][T27672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.916157][T27672] usb 2-1: config 0 descriptor?? [ 721.927625][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.946870][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.964460][T27672] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 721.971252][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 721.972986][ T2494] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.991928][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.995856][ T2494] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 722.014356][ T2494] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 722.018838][T29588] usb 1-1: config 0 descriptor?? [ 722.023847][ T2494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.052440][ T2494] usb 3-1: config 0 descriptor?? [ 722.093760][ T2494] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 722.534609][T29588] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 722.546728][T29588] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003F/input/input59 [ 722.638681][T29588] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 722.939673][T29588] usb 1-1: USB disconnect, device number 99 21:59:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:27 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) r0 = syz_open_dev$video(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) splice(r0, 0x0, r1, 0x0, 0x1000000006, 0x0) 21:59:27 executing program 3 (fault-call:4 fault-nth:32): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 724.220870][T29588] usb 3-1: USB disconnect, device number 42 [ 724.260477][ T3370] usb 2-1: USB disconnect, device number 42 21:59:27 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendto$netrom(r2, &(0x7f00000000c0)="afbfd93f6396dbcaf8d92739089bfcb42a7220bc704ebfed7b26803babeaa5dda0bb5f7f1c71be5e71ed8aaa216c2bc088a16b6f462e3de0f693d11bcdc78751adfe9b0d2c6bf0", 0x47, 0x80, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 724.390780][ T595] FAULT_INJECTION: forcing a failure. [ 724.390780][ T595] name failslab, interval 1, probability 0, space 0, times 0 [ 724.430973][ T595] CPU: 0 PID: 595 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 21:59:27 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x50080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 724.439249][ T595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 724.449297][ T595] Call Trace: [ 724.452582][ T595] dump_stack+0x1e9/0x30e [ 724.456928][ T595] should_fail+0x433/0x5b0 [ 724.461372][ T595] ? sock_kmalloc+0x98/0x100 [ 724.465958][ T595] should_failslab+0x5/0x20 [ 724.470463][ T595] __kmalloc+0x74/0x330 [ 724.474617][ T595] sock_kmalloc+0x98/0x100 [ 724.479025][ T595] hash_recvmsg+0x1bd/0x810 [ 724.483529][ T595] ? hash_sendmsg+0xb40/0xb40 21:59:27 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/208) [ 724.488201][ T595] ____sys_recvmsg+0x24a/0x510 [ 724.492973][ T595] ? import_iovec+0x12a/0x2c0 [ 724.497648][ T595] do_recvmmsg+0x429/0x1500 [ 724.502193][ T595] ? lockdep_hardirqs_on_prepare+0x425/0x6e0 [ 724.508199][ T595] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 724.513660][ T595] ? check_preemption_disabled+0xa2/0x240 [ 724.519510][ T595] ? retint_kernel+0x2b/0x2b [ 724.524110][ T595] __x64_sys_recvmmsg+0x11d/0x1a0 [ 724.529148][ T595] do_syscall_64+0xf3/0x1b0 [ 724.533654][ T595] entry_SYSCALL_64_after_hwframe+0x49/0xb3 21:59:27 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:27 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 724.539649][ T595] RIP: 0033:0x45ca59 [ 724.543535][ T595] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 724.563134][ T595] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 724.571533][ T595] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 724.579489][ T595] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 21:59:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 724.587453][ T595] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 724.595420][ T595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 724.602769][ T2494] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 724.603377][ T595] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 724.772647][ T3370] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 724.872601][T29588] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 724.892622][ T2494] usb 1-1: Using ep0 maxpacket: 16 [ 725.012693][ T2494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.023644][ T3370] usb 2-1: Using ep0 maxpacket: 16 [ 725.028819][ T2494] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 725.044127][ T2494] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 725.053735][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.072636][ T2494] usb 1-1: config 0 descriptor?? [ 725.122601][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 725.142673][ T3370] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 725.153395][ T3370] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 725.166526][ T3370] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 725.178173][ T3370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.187503][ T3370] usb 2-1: config 0 descriptor?? [ 725.237136][ T3370] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 725.256300][T29588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.266674][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 725.279860][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 725.288994][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.300736][T29588] usb 3-1: config 0 descriptor?? [ 725.343576][T29588] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 725.554255][ T2494] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 725.572187][ T2494] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0040/input/input60 [ 725.660086][ T2494] microsoft 0003:045E:07DA.0040: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 725.768668][T29588] usb 1-1: USB disconnect, device number 100 21:59:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:30 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) dup(r1) 21:59:30 executing program 3 (fault-call:4 fault-nth:33): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 727.307530][ T2693] usb 3-1: USB disconnect, device number 43 [ 727.329042][ T2494] usb 2-1: USB disconnect, device number 43 [ 727.436467][ T680] FAULT_INJECTION: forcing a failure. [ 727.436467][ T680] name failslab, interval 1, probability 0, space 0, times 0 [ 727.456244][ T680] CPU: 0 PID: 680 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 727.464399][ T680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.474447][ T680] Call Trace: [ 727.477734][ T680] dump_stack+0x1e9/0x30e [ 727.482154][ T680] should_fail+0x433/0x5b0 [ 727.486571][ T680] ? sock_kmalloc+0x98/0x100 [ 727.491145][ T680] should_failslab+0x5/0x20 [ 727.495630][ T680] __kmalloc+0x74/0x330 [ 727.499769][ T680] sock_kmalloc+0x98/0x100 [ 727.504184][ T680] hash_recvmsg+0x1bd/0x810 [ 727.508731][ T680] ? hash_sendmsg+0xb40/0xb40 [ 727.513391][ T680] ____sys_recvmsg+0x24a/0x510 [ 727.518140][ T680] ? import_iovec+0x12a/0x2c0 [ 727.522805][ T680] do_recvmmsg+0x429/0x1500 [ 727.527380][ T680] ? trace_hardirqs_on_thunk+0x1a/0x1c 21:59:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, 0x0, 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 727.532828][ T680] ? check_preemption_disabled+0xa2/0x240 [ 727.538547][ T680] ? retint_kernel+0x2b/0x2b [ 727.543137][ T680] __x64_sys_recvmmsg+0x11d/0x1a0 [ 727.548160][ T680] do_syscall_64+0xf3/0x1b0 [ 727.552660][ T680] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 727.558534][ T680] RIP: 0033:0x45ca59 [ 727.562414][ T680] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:30 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) [ 727.582006][ T680] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 727.590402][ T680] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 727.598347][ T680] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 727.606290][ T680] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 727.614244][ T680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 727.622200][ T680] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, 0x0, 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:30 executing program 3 (fault-call:4 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:30 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) getsockname(r0, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 21:59:30 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000080)={{0x4, @addr=0x3}, "8ceb0ce838294cea28dc4495a59fd41e30037e85de6f125d1ac61cfdea00710c", 0x3}) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 727.773192][ T704] FAULT_INJECTION: forcing a failure. [ 727.773192][ T704] name failslab, interval 1, probability 0, space 0, times 0 [ 727.793142][ T704] CPU: 1 PID: 704 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 727.797257][T29588] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 727.801286][ T704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.801291][ T704] Call Trace: [ 727.801319][ T704] dump_stack+0x1e9/0x30e [ 727.801334][ T704] should_fail+0x433/0x5b0 [ 727.801352][ T704] ? sock_kmalloc+0x98/0x100 [ 727.801366][ T704] should_failslab+0x5/0x20 [ 727.840134][ T704] __kmalloc+0x74/0x330 [ 727.844265][ T704] sock_kmalloc+0x98/0x100 [ 727.848656][ T704] hash_recvmsg+0x1bd/0x810 [ 727.853171][ T704] ? hash_sendmsg+0xb40/0xb40 [ 727.857833][ T704] ____sys_recvmsg+0x24a/0x510 [ 727.862589][ T704] ? import_iovec+0x12a/0x2c0 [ 727.867268][ T704] do_recvmmsg+0x429/0x1500 [ 727.871762][ T704] ? rcu_lock_release+0x5/0x20 [ 727.876535][ T704] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 727.881996][ T704] ? check_preemption_disabled+0xa2/0x240 [ 727.887776][ T704] ? retint_kernel+0x2b/0x2b [ 727.892356][ T704] __x64_sys_recvmmsg+0x11d/0x1a0 [ 727.897381][ T704] do_syscall_64+0xf3/0x1b0 [ 727.902638][ T704] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 727.908515][ T704] RIP: 0033:0x45ca59 [ 727.912387][ T704] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 727.932323][ T704] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 727.940721][ T704] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 727.948673][ T704] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 727.956621][ T704] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 727.964566][ T704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 727.972509][ T704] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 727.982708][ T2494] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 728.062483][ T2693] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 728.213949][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 728.232411][ T2494] usb 2-1: Using ep0 maxpacket: 16 [ 728.324072][ T2693] usb 3-1: Using ep0 maxpacket: 16 [ 728.342707][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.352442][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.359103][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 728.367020][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.378192][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 728.389598][ T2494] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 728.401918][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.410966][ T2494] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 728.420155][T29588] usb 1-1: config 0 descriptor?? [ 728.442583][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.459453][ T2494] usb 2-1: config 0 descriptor?? [ 728.475651][ T2693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.490274][ T2693] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 728.518001][ T2693] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 728.528079][ T2693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.538092][ T2693] usb 3-1: config 0 descriptor?? [ 728.603209][ T2693] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 728.913648][T29588] microsoft 0003:045E:07DA.0041: unknown main item tag 0x0 [ 728.931093][T29588] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0041/input/input61 [ 728.946835][ T2494] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 728.967726][ T2494] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0042/input/input62 [ 729.019040][T29588] microsoft 0003:045E:07DA.0041: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 729.094685][ T2494] microsoft 0003:045E:07DA.0042: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 729.118800][T29588] usb 1-1: USB disconnect, device number 101 [ 729.145781][ T2693] usb 2-1: USB disconnect, device number 44 21:59:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, 0x0, 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:32 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1, 0x0) 21:59:32 executing program 3 (fault-call:4 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)="c8") [ 729.753663][ T775] FAULT_INJECTION: forcing a failure. [ 729.753663][ T775] name failslab, interval 1, probability 0, space 0, times 0 [ 729.767635][ T775] CPU: 0 PID: 775 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 729.775790][ T775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.785834][ T775] Call Trace: [ 729.789121][ T775] dump_stack+0x1e9/0x30e [ 729.793449][ T775] should_fail+0x433/0x5b0 [ 729.797854][ T775] ? sock_kmalloc+0x98/0x100 [ 729.802424][ T775] should_failslab+0x5/0x20 [ 729.806917][ T775] __kmalloc+0x74/0x330 [ 729.811086][ T775] sock_kmalloc+0x98/0x100 [ 729.815490][ T775] hash_recvmsg+0x1bd/0x810 [ 729.819976][ T775] ? hash_sendmsg+0xb40/0xb40 [ 729.824646][ T775] ____sys_recvmsg+0x24a/0x510 [ 729.829405][ T775] ? import_iovec+0x12a/0x2c0 [ 729.834068][ T775] do_recvmmsg+0x429/0x1500 [ 729.838558][ T775] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 729.844003][ T775] ? check_preemption_disabled+0xa2/0x240 [ 729.849714][ T775] ? retint_kernel+0x2b/0x2b [ 729.854290][ T775] __x64_sys_recvmmsg+0x11d/0x1a0 [ 729.859306][ T775] do_syscall_64+0xf3/0x1b0 [ 729.863797][ T775] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 729.869668][ T775] RIP: 0033:0x45ca59 [ 729.873532][ T775] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 729.893133][ T775] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 729.901525][ T775] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 729.909469][ T775] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 729.917415][ T775] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 729.925487][ T775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 729.933441][ T775] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 729.982374][T27672] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 730.102273][ T2693] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 730.222269][T27672] usb 1-1: Using ep0 maxpacket: 16 [ 730.344202][T27672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.355220][T27672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.362167][ T2693] usb 2-1: Using ep0 maxpacket: 16 [ 730.370086][T27672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 730.382269][T27672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.394627][T27672] usb 1-1: config 0 descriptor?? 21:59:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000200)='\vem1\xc1\xf8\xa6\xea\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\x1d\a+\x1e\xb8\xe8\x86@V\x03\xb6\xb1\xc03\x1e,`\x02\xae\xba\xebg\x17\x92\xad\b\x16\xb6.\x01%\xaf\xe10xffffffffffffffff}) r4 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r0}, 0x1, 0x1, 0x10000}) 21:59:33 executing program 3 (fault-call:4 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 730.492524][ T2693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.511986][ T2693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.533331][ T2693] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.568046][ T2693] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 21:59:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 730.615977][ T2693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.629020][ T795] FAULT_INJECTION: forcing a failure. [ 730.629020][ T795] name failslab, interval 1, probability 0, space 0, times 0 [ 730.655059][ T2693] usb 2-1: config 0 descriptor?? [ 730.667908][ T5] usb 3-1: USB disconnect, device number 44 [ 730.675446][ T795] CPU: 0 PID: 795 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 730.683593][ T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.693659][ T795] Call Trace: [ 730.696946][ T795] dump_stack+0x1e9/0x30e [ 730.701275][ T795] should_fail+0x433/0x5b0 [ 730.705697][ T795] ? sock_kmalloc+0x98/0x100 [ 730.710279][ T795] should_failslab+0x5/0x20 [ 730.714776][ T795] __kmalloc+0x74/0x330 [ 730.718936][ T795] sock_kmalloc+0x98/0x100 [ 730.723362][ T795] hash_recvmsg+0x1bd/0x810 [ 730.727870][ T795] ? hash_sendmsg+0xb40/0xb40 [ 730.732545][ T795] ____sys_recvmsg+0x24a/0x510 [ 730.737320][ T795] ? import_iovec+0x12a/0x2c0 [ 730.741994][ T795] do_recvmmsg+0x429/0x1500 [ 730.746531][ T795] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 730.752062][ T795] ? check_preemption_disabled+0xb0/0x240 [ 730.757808][ T795] ? debug_smp_processor_id+0x5/0x20 [ 730.763078][ T795] __x64_sys_recvmmsg+0x11d/0x1a0 [ 730.768101][ T795] do_syscall_64+0xf3/0x1b0 [ 730.772602][ T795] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 730.778566][ T795] RIP: 0033:0x45ca59 [ 730.782439][ T795] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 730.802025][ T795] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 730.810415][ T795] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 21:59:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:33 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x5}, 0x5, 0x2, 0x3fd, 0xff, 0x28, 'syz1\x00', "4b9f064a81820029616fe1fa223d5940aa1c2d93cf2c6559887265d0a47b95d7", "c8042957143f6f9b8260f098c61ec030908b3063a582ee97f083aff68a747a02", [{0x2, 0x7f, {0x0, 0x6}}, {0x633, 0x3, {0x0, 0x2}}, {0xff7f, 0x101, {0x0, 0x400}}, {0x7ff, 0x3, {0x2, 0x99f}}, {0xe48, 0x1, {0x2, 0x6}}, {0x3, 0x2, {0x1, 0xffffffff}}, {0x1ff, 0x7, {0x1, 0x400}}, {0x401, 0xb7, {0x0, 0x8000}}, {0x4, 0xd5, {0x0, 0x7}}, {0x4, 0x8, {0x2, 0x9}}, {0x7fff, 0x6, {0x2, 0x6}}, {0x1cf3, 0x401, {0x0, 0x2}}, {0x1000, 0x75a, {0x3, 0x6}}, {0x1, 0xff, {0x0, 0x8000}}, {0x3, 0x3, {0x2, 0x8}}, {0x0, 0x3, {0x3, 0x100}}, {0x60, 0x7f, {0x3, 0x3}}, {0x7, 0x3, {0x1, 0xfff}}, {0x6, 0x5, {0x0, 0x2}}, {0x2, 0x0, {0x0, 0x9}}, {0xff, 0x8, {0x0, 0xffffffff}}, {0x7fff, 0xf000, {0x0, 0x1}}, {0x6, 0x7f, {0x1, 0x5}}, {0x401, 0x8, {0x0, 0xff}}, {0x9, 0x8, {0x0, 0xc0}}, {0x8001, 0x5, {0x0, 0x80}}, {0x0, 0x80, {0x0, 0xd60}}, {0x4, 0x5, {0x1, 0xd1}}, {0x7f, 0x9, {0x0, 0xffffffff}}, {0x5, 0x3, {0x0, 0xfffffff9}}, {0x20, 0x40, {0x2, 0xa635}}, {0x5, 0x1, {0x3, 0xffffffff}}, {0x5, 0x3, {0xcf9fab2f4efefb36, 0x3}}, {0x20, 0x4, {0x2, 0xb01d}}, {0x2f10, 0x1, {0x1, 0x1}}, {0x6, 0x1ff, {0x1, 0x3}}, {0x87, 0x8001, {0x0, 0xfffffffc}}, {0x0, 0x7ff, {0x2, 0x1f}}, {0x5, 0x4, {0x3, 0x3ff}}, {0x9, 0x4, {0x1, 0x3f}}]}}}, {{0x254, 0x1, {{0x0, 0x100}, 0x9, 0x80, 0x9, 0x6, 0x27, 'syz0\x00', "f3492e0628108d3de2d3a9890b4ed76a2c28b998d16a9bf3831a97dce7ea32e7", "c03abf6370831adc9ec4ba88d42afbf191970096ea636f02e474e633bfe0d924", [{0x1000, 0x2, {0x0, 0x10001}}, {0x1ff, 0x68}, {0x1000, 0xc8eb, {0x1}}, {0x1000, 0x2, {0x2, 0xe50}}, {0x6, 0x1000, {0x1}}, {0x391c, 0x6, {0x0, 0x1}}, {0x6, 0x20, {0x2, 0x5}}, {0x3, 0x2, {0x2, 0x1}}, {0x5, 0x450c, {0x1, 0x400}}, {0x200, 0x5, {0x1, 0x1}}, {0x9, 0x9, {0x2, 0x4}}, {0x1, 0x3, {0x3, 0x7fffffff}}, {0xa15, 0x4, {0x1, 0x2}}, {0x6fae, 0x200, {0x2, 0xeaa3}}, {0x5, 0x0, {0x1, 0x4}}, {0x40, 0xc, {0x1, 0x1ff}}, {0x100, 0xadb9, {0x2, 0x8}}, {0xd8, 0xfff7, {0x0, 0x2}}, {0x7ff, 0x5, {0x3, 0x7}}, {0x81, 0x7, {0x2, 0x20}}, {0x4, 0xc9, {0x2, 0x3}}, {0x3, 0x1ff, {0x1, 0x7}}, {0x1bf, 0xb9ef, {0x0, 0x80000000}}, {0x9, 0x7c, {0x0, 0x3}}, {0x81, 0x4, {0x0, 0x80000000}}, {0x15, 0x3, {0x1, 0x81}}, {0x4, 0x6, {0x0, 0xfffffffa}}, {0x0, 0x4, {0x0, 0x5}}, {0xffe0, 0x100, {0x0, 0xcc}}, {0xb6, 0x0, {0x0, 0x1}}, {0x6, 0xf899, {0x1, 0x7d81}}, {0xb8, 0x9, {0x2, 0x1f}}, {0x8d9, 0x6, {0x0, 0x4}}, {0x2, 0x9, {0x2, 0x8000}}, {0x1, 0x7, {0x0, 0x2}}, {0xfff7, 0x5, {0x2, 0x4}}, {0x1, 0x2f6a, {0x2, 0x6}}, {0x81, 0x4, {0x3, 0x20}}, {0x100, 0x20, {0x1, 0x10001}}, {0x3, 0x6, {0x3, 0xe091}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = syz_open_dev$video(0x0, 0x8, 0x63c342) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 730.818376][ T795] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 730.826331][ T795] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 730.834283][ T795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 730.842239][ T795] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 730.893986][T27672] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 730.937326][T27672] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0043/input/input63 [ 731.036467][T27672] microsoft 0003:045E:07DA.0043: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 731.100117][ T426] usb 1-1: USB disconnect, device number 102 [ 731.232229][ T5] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 731.313973][ T2693] microsoft 0003:045E:07DA.0044: unknown main item tag 0x0 [ 731.331849][ T2693] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0044/input/input64 [ 731.421416][ T2693] microsoft 0003:045E:07DA.0044: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 731.492274][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 731.521076][T27672] usb 2-1: USB disconnect, device number 45 [ 731.632443][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.642772][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 731.656648][ T5] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 731.666165][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.678743][ T5] usb 3-1: config 0 descriptor?? [ 731.723229][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:59:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:35 executing program 3 (fault-call:4 fault-nth:37): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:35 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000210000000e0073696d0000000f0002006e657464657673696d300000080003000000000006000400"/62], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 21:59:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) [ 732.065859][ T873] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 732.129594][ T882] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 732.140807][ T877] FAULT_INJECTION: forcing a failure. [ 732.140807][ T877] name failslab, interval 1, probability 0, space 0, times 0 [ 732.160282][ T877] CPU: 0 PID: 877 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 732.168435][ T877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.178486][ T877] Call Trace: [ 732.181786][ T877] dump_stack+0x1e9/0x30e [ 732.186116][ T877] should_fail+0x433/0x5b0 [ 732.190524][ T877] ? sock_kmalloc+0x98/0x100 [ 732.195099][ T877] should_failslab+0x5/0x20 [ 732.199582][ T877] __kmalloc+0x74/0x330 [ 732.203725][ T877] sock_kmalloc+0x98/0x100 [ 732.208124][ T877] hash_recvmsg+0x1bd/0x810 [ 732.212700][ T877] ? hash_sendmsg+0xb40/0xb40 [ 732.217360][ T877] ____sys_recvmsg+0x24a/0x510 [ 732.222122][ T877] ? import_iovec+0x12a/0x2c0 [ 732.226783][ T877] do_recvmmsg+0x429/0x1500 [ 732.231282][ T877] ? ksys_write+0x1b1/0x220 [ 732.235776][ T877] ? ksys_write+0x1b1/0x220 [ 732.240263][ T877] ? check_preemption_disabled+0xb0/0x240 [ 732.245979][ T877] ? debug_smp_processor_id+0x5/0x20 [ 732.251266][ T877] __x64_sys_recvmmsg+0x11d/0x1a0 [ 732.256270][ T877] do_syscall_64+0xf3/0x1b0 [ 732.260748][ T877] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 732.266613][ T877] RIP: 0033:0x45ca59 [ 732.270569][ T877] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 732.290194][ T877] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 732.298579][ T877] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 732.306525][ T877] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 732.314478][ T877] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 732.322542][ T877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 732.330495][ T877] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 732.392209][ T2494] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 732.512084][ T5] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 732.632019][ T2494] usb 2-1: Using ep0 maxpacket: 16 [ 732.753993][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.765051][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.775301][ T2494] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 732.788276][ T2494] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 732.792018][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 732.797615][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.815400][ T2494] usb 2-1: config 0 descriptor?? [ 732.932175][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.943209][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 732.957815][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 732.967701][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.981170][ T5] usb 1-1: config 0 descriptor?? [ 733.293718][ T2494] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 733.311148][ T2494] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0045/input/input65 [ 733.401692][ T2494] microsoft 0003:045E:07DA.0045: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 733.463839][ T5] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 733.480963][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0046/input/input66 [ 733.504202][ T2693] usb 2-1: USB disconnect, device number 46 [ 733.574527][ T5] microsoft 0003:045E:07DA.0046: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 21:59:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:36 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x331e00) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) splice(r1, 0x0, r0, 0x0, 0xffffffffffffffdd, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x7) 21:59:36 executing program 3 (fault-call:4 fault-nth:38): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 733.640546][ T2494] usb 3-1: USB disconnect, device number 45 21:59:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 733.739582][ T934] FAULT_INJECTION: forcing a failure. [ 733.739582][ T934] name failslab, interval 1, probability 0, space 0, times 0 [ 733.754116][ T934] CPU: 1 PID: 934 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 733.762264][ T934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.772308][ T934] Call Trace: [ 733.775593][ T934] dump_stack+0x1e9/0x30e [ 733.779921][ T934] should_fail+0x433/0x5b0 [ 733.784338][ T934] ? sock_kmalloc+0x98/0x100 21:59:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 733.788932][ T934] should_failslab+0x5/0x20 [ 733.793443][ T934] __kmalloc+0x74/0x330 [ 733.797591][ T934] sock_kmalloc+0x98/0x100 [ 733.802000][ T934] hash_recvmsg+0x1bd/0x810 [ 733.806608][ T934] ? hash_sendmsg+0xb40/0xb40 [ 733.811282][ T934] ____sys_recvmsg+0x24a/0x510 [ 733.816052][ T934] ? import_iovec+0x12a/0x2c0 [ 733.820724][ T934] do_recvmmsg+0x429/0x1500 [ 733.825246][ T934] ? retint_kernel+0x2b/0x2b [ 733.829848][ T934] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 733.835309][ T934] ? check_preemption_disabled+0xa2/0x240 [ 733.841028][ T934] ? retint_kernel+0x2b/0x2b [ 733.845617][ T934] __x64_sys_recvmmsg+0x11d/0x1a0 [ 733.850628][ T934] do_syscall_64+0xf3/0x1b0 [ 733.855107][ T934] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 733.860979][ T934] RIP: 0033:0x45ca59 [ 733.864969][ T934] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:36 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) syz_open_dev$video(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) splice(r3, 0x0, r2, 0x0, 0x100000000c, 0x0) [ 733.884555][ T934] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 733.892934][ T934] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 733.900895][ T934] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 733.908847][ T934] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 733.916811][ T934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 733.924761][ T934] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 733.957677][ T5] usb 1-1: USB disconnect, device number 103 21:59:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:37 executing program 3 (fault-call:4 fault-nth:39): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 734.129307][ T958] FAULT_INJECTION: forcing a failure. [ 734.129307][ T958] name failslab, interval 1, probability 0, space 0, times 0 [ 734.143604][ T958] CPU: 0 PID: 958 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 734.151859][ T958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.161997][ T958] Call Trace: [ 734.165281][ T958] dump_stack+0x1e9/0x30e [ 734.169614][ T958] should_fail+0x433/0x5b0 [ 734.174032][ T958] ? sock_kmalloc+0x98/0x100 [ 734.178615][ T958] should_failslab+0x5/0x20 [ 734.183108][ T958] __kmalloc+0x74/0x330 [ 734.187269][ T958] sock_kmalloc+0x98/0x100 [ 734.191685][ T958] hash_recvmsg+0x1bd/0x810 [ 734.196192][ T958] ? hash_sendmsg+0xb40/0xb40 [ 734.200864][ T958] ____sys_recvmsg+0x24a/0x510 [ 734.205635][ T958] ? import_iovec+0x12a/0x2c0 [ 734.210312][ T958] do_recvmmsg+0x429/0x1500 [ 734.214839][ T958] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 734.220291][ T958] ? check_preemption_disabled+0xa2/0x240 [ 734.226004][ T958] ? retint_kernel+0x2b/0x2b [ 734.230593][ T958] __x64_sys_recvmmsg+0x11d/0x1a0 [ 734.235617][ T958] do_syscall_64+0xf3/0x1b0 [ 734.240116][ T958] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 734.246000][ T958] RIP: 0033:0x45ca59 [ 734.249884][ T958] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 734.254642][ T2494] usb 3-1: new high-speed USB device number 46 using dummy_hcd 21:59:37 executing program 3 (fault-call:4 fault-nth:40): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:37 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) getsockname$packet(r1, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000d40)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0)='ethtool\x00') r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0)='ethtool\x00') r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000000d80)={0x9f8, 0x0, 0xd00, 0x70bd2c, 0x25dfdbfd}, 0xfffffffffffffdac}, 0x1, 0x0, 0x0, 0x20040811}, 0x4000811) r8 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r8, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 734.269584][ T958] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 734.269595][ T958] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 734.269602][ T958] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 734.269608][ T958] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 734.269613][ T958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 734.269619][ T958] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 734.360013][ T970] FAULT_INJECTION: forcing a failure. [ 734.360013][ T970] name failslab, interval 1, probability 0, space 0, times 0 [ 734.374372][ T970] CPU: 0 PID: 970 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 734.382527][ T970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.392566][ T970] Call Trace: [ 734.395832][ T970] dump_stack+0x1e9/0x30e [ 734.400149][ T970] should_fail+0x433/0x5b0 [ 734.404646][ T970] ? sock_kmalloc+0x98/0x100 [ 734.409240][ T970] should_failslab+0x5/0x20 [ 734.413722][ T970] __kmalloc+0x74/0x330 [ 734.417858][ T970] sock_kmalloc+0x98/0x100 [ 734.422267][ T970] hash_recvmsg+0x1bd/0x810 [ 734.426766][ T970] ? hash_sendmsg+0xb40/0xb40 [ 734.431428][ T970] ____sys_recvmsg+0x24a/0x510 [ 734.436174][ T970] ? import_iovec+0x12a/0x2c0 [ 734.440832][ T970] do_recvmmsg+0x429/0x1500 [ 734.445332][ T970] ? check_preemption_disabled+0x33/0x240 [ 734.451041][ T970] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 734.456473][ T970] ? check_preemption_disabled+0xa2/0x240 [ 734.462206][ T970] ? retint_kernel+0x2b/0x2b [ 734.466798][ T970] __x64_sys_recvmmsg+0x11d/0x1a0 [ 734.471825][ T970] do_syscall_64+0xf3/0x1b0 [ 734.476317][ T970] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 734.482196][ T970] RIP: 0033:0x45ca59 [ 734.486098][ T970] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 734.505783][ T970] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 734.514186][ T970] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 734.522139][ T970] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 734.530092][ T970] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 734.538075][ T970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 734.546030][ T970] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 734.592001][ T2494] usb 3-1: Using ep0 maxpacket: 16 [ 734.701897][ T2693] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 734.712244][ T2494] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 734.722760][ T2494] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.735866][ T2494] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 21:59:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) [ 734.745507][ T2494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.757870][ T2494] usb 3-1: config 0 descriptor?? [ 734.822959][ T2494] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 734.941866][ T2693] usb 2-1: Using ep0 maxpacket: 16 [ 735.071986][ T2693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.082941][ T5] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 735.090670][ T2693] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.105403][ T2693] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 735.115121][ T2693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.127578][ T2693] usb 2-1: config 0 descriptor?? [ 735.331891][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 735.464304][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.475287][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.488431][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 735.497619][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.508101][ T5] usb 1-1: config 0 descriptor?? [ 735.871881][ T2693] usbhid 2-1:0.0: can't add hid device: -71 [ 735.878002][ T2693] usbhid: probe of 2-1:0.0 failed with error -71 [ 735.889502][ T2693] usb 2-1: USB disconnect, device number 47 [ 736.003529][ T5] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 736.021040][ T5] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0047/input/input67 [ 736.104803][ T5] microsoft 0003:045E:07DA.0047: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 736.410654][ T5] usb 1-1: USB disconnect, device number 104 21:59:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:39 executing program 3 (fault-call:4 fault-nth:41): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:39 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffff725, 0x6, &(0x7f0000002480)=[{&(0x7f0000000100)="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", 0x1000, 0x8}, {&(0x7f0000001100)="5c32c91a0a8ecd0d57644ba61ea1cecc3aaf40c79999d913f3db6a15d39d988ac8add1c3444a4d46d1f1cc63c139d3f19bc4504a38a1a905004c9fb720ebf9d4cf49c9a34fcd7d46fa40ea6b67f94422b9f2797c9be9571c43303198c22d554f2ce8e5218b704ba0d0a294fa125f07cf1bd9c39abdc4ec60f767b7e340cc566cc3a1a13ba2b07e5b1e1feec6a4f50f5f4bef013366a26f58b6ca301cd864e79806ef3e53a679f4efd2d159b7c0f04afda32bacd9", 0xb4, 0x3}, {&(0x7f00000011c0)="a4c5cc3f1db1f2a36c76ea1ab06d24455f0211cb922c8aa096092f575ba4d0734d078fea44ed764708e9d755324f7959031e2a9606506c5abab5bcbbdfdf2bc66c98cb6ac25482a939a8afa01ef2de6c497aa764f9310ca4a551bd54c970444859bf7c2ad19a38f00e59296e461ccbee098dea4053579b9c0cbf5ca56b868d74b5e217456b887c8f548e2534ba6b4f8b372732b240edc4fb125aded22ed41296f4ea0bd200e936016c7a441ce9d4e5ce31a05453", 0xb4, 0x15c}, {&(0x7f0000001280)="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", 0x1000, 0x80000001}, {&(0x7f0000002280)="73f7e76afef4ce26b4895a4c713a09150ccfbacde4f4d13b10b165dd4d1d8ab783d0796881a7508a294709747716e1c1eda3fa1f53964ed2966f107b1b9ce84f929e00d4d18006d70e0b294913419e8c866b1620502094df6ff2cd5c24fc90ca185f26e91898ee40a46d25ac0c9b6ca187315cbb1d681cda83f8fd4cd1f3a70c8a2e46833c4090de4bb5b65a045ab52e1481dff4672589d3f5208634c825a1535f0b772642526a3c3d9d0d613224c5e10ad087f8c421cc4816a3d55848e70c03058db5d3b738f15c4157b2eeb8bffaa6ffa5", 0xd2, 0x6}, {&(0x7f0000002380)="c1eee84b33408b330facc518af084860b8b4ebcd4d51f08a0fc4663041c12c21d3d638306ecc7cad2e7e634179d0550042c0316463e483939a905ab7e5d46063d8856063e9bc330c3d6b46e8e22f94aff8cd9fc8a01453778961f97b6a44b1898a9ed9aaae14c2160db47b383a23155aafc188c8c028f67a661e16649dd8584891666265bae9a7101772053c02c575fa2404e6a70fec569d82eb93efd2c9cc50431e0f70766ebdc4e135accf1190d5896d93f3b40dbcb662eb01dab804b7b6405bc19e3235df30498105feff1cda8b733ab321be4b050bf4", 0xd8, 0x6}], 0x40001, &(0x7f00000025c0)={[{@nolargeio='nolargeio'}, {@uquota='uquota'}, {@largeio='largeio'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/sg#\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsdef={'smackfsdef', 0x3d, ',\''}}]}) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000002640)={0x8000, "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"}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000002580)={0x0, 0x3, 0xc, [], &(0x7f0000002540)=0xff}) 21:59:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 736.725079][ T3370] usb 3-1: USB disconnect, device number 46 21:59:39 executing program 4: prctl$PR_SET_TIMERSLACK(0x1d, 0x3) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfff, 0x20000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x85bea000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r2, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x3f, @ipv4={[], [], @private=0xa010100}, 0x7}}}, 0x84) r4 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 736.840654][ T1035] FAULT_INJECTION: forcing a failure. [ 736.840654][ T1035] name failslab, interval 1, probability 0, space 0, times 0 [ 736.863182][ T1035] CPU: 0 PID: 1035 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 736.871424][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.881471][ T1035] Call Trace: [ 736.884760][ T1035] dump_stack+0x1e9/0x30e [ 736.889095][ T1035] should_fail+0x433/0x5b0 [ 736.893524][ T1035] ? sock_kmalloc+0x98/0x100 [ 736.898106][ T1035] should_failslab+0x5/0x20 [ 736.902603][ T1035] __kmalloc+0x74/0x330 [ 736.906759][ T1035] sock_kmalloc+0x98/0x100 [ 736.911181][ T1035] hash_recvmsg+0x1bd/0x810 [ 736.915685][ T1035] ? hash_sendmsg+0xb40/0xb40 [ 736.920359][ T1035] ____sys_recvmsg+0x24a/0x510 [ 736.925131][ T1035] ? import_iovec+0x12a/0x2c0 [ 736.929811][ T1035] do_recvmmsg+0x429/0x1500 [ 736.934339][ T1035] ? trace_hardirqs_on_thunk+0x1a/0x1c 21:59:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 736.939791][ T1035] ? check_preemption_disabled+0xa2/0x240 [ 736.945514][ T1035] ? retint_kernel+0x2b/0x2b [ 736.950108][ T1035] __x64_sys_recvmmsg+0x11d/0x1a0 [ 736.955132][ T1035] do_syscall_64+0xf3/0x1b0 [ 736.959633][ T1035] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 736.965523][ T1035] RIP: 0033:0x45ca59 [ 736.969402][ T1035] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:40 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) setfsuid(r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) write$P9_RSTATu(r0, &(0x7f00000001c0)={0x60, 0x7d, 0x2, {{0x0, 0x4a, 0xccb, 0x7, {0x20, 0x0, 0x6}, 0x0, 0x200, 0x1, 0x3, 0x9, '/dev/sg#\x00', 0x2, '*{', 0x9, '/dev/sg#\x00', 0x3, '-*@'}, 0x1, ')', r2, 0xee01, r4}}, 0x60) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x1000000008, 0x0) [ 736.988985][ T1035] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 736.997385][ T1035] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 737.005349][ T1035] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 737.013315][ T1035] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 737.021278][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 737.029242][ T1035] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) 21:59:40 executing program 3 (fault-call:4 fault-nth:42): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:40 executing program 4: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xae, 0x240800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 737.081977][ T2494] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 737.173542][ T1057] FAULT_INJECTION: forcing a failure. [ 737.173542][ T1057] name failslab, interval 1, probability 0, space 0, times 0 [ 737.186669][ T3370] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 737.194617][ T1057] CPU: 1 PID: 1057 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 737.202868][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.212913][ T1057] Call Trace: [ 737.216196][ T1057] dump_stack+0x1e9/0x30e 21:59:40 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3) [ 737.220526][ T1057] should_fail+0x433/0x5b0 [ 737.224952][ T1057] ? sock_kmalloc+0x98/0x100 [ 737.229540][ T1057] should_failslab+0x5/0x20 [ 737.234031][ T1057] __kmalloc+0x74/0x330 [ 737.238185][ T1057] sock_kmalloc+0x98/0x100 [ 737.242606][ T1057] hash_recvmsg+0x1bd/0x810 [ 737.247111][ T1057] ? hash_sendmsg+0xb40/0xb40 [ 737.251788][ T1057] ____sys_recvmsg+0x24a/0x510 [ 737.256565][ T1057] ? import_iovec+0x12a/0x2c0 [ 737.261247][ T1057] do_recvmmsg+0x429/0x1500 [ 737.265731][ T1057] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 737.271170][ T1057] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 737.276604][ T1057] ? check_preemption_disabled+0xa2/0x240 [ 737.282347][ T1057] ? retint_kernel+0x2b/0x2b [ 737.286918][ T1057] __x64_sys_recvmmsg+0x11d/0x1a0 [ 737.291922][ T1057] do_syscall_64+0xf3/0x1b0 [ 737.296402][ T1057] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 737.302268][ T1057] RIP: 0033:0x45ca59 [ 737.306134][ T1057] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 737.325837][ T1057] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 737.334274][ T1057] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 737.342217][ T1057] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 737.350164][ T1057] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 737.358148][ T1057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 737.366095][ T1057] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 737.501726][ T2494] usb 2-1: Using ep0 maxpacket: 16 [ 737.531755][ T2506] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 737.591734][ T3370] usb 3-1: Using ep0 maxpacket: 16 [ 737.621899][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.633067][ T2494] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 737.646068][ T2494] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 737.655841][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.665063][ T2494] usb 2-1: config 0 descriptor?? [ 737.717965][ T3370] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 737.728718][ T3370] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 737.742232][ T3370] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 737.751257][ T3370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.760591][ T3370] usb 3-1: config 0 descriptor?? [ 737.771791][ T2506] usb 1-1: Using ep0 maxpacket: 16 [ 737.802478][ T3370] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 737.891910][ T2506] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.906328][ T2506] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 737.919530][ T2506] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 737.932747][ T2506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.949411][ T2506] usb 1-1: config 0 descriptor?? [ 738.391721][ T2494] usbhid 2-1:0.0: can't add hid device: -71 [ 738.397703][ T2494] usbhid: probe of 2-1:0.0 failed with error -71 [ 738.406676][ T2494] usb 2-1: USB disconnect, device number 48 [ 738.414438][ T2506] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 738.445008][ T2506] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0048/input/input68 [ 738.530131][ T2506] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 738.818101][ T2693] usb 1-1: USB disconnect, device number 105 21:59:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:42 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x4, 0x2}, {0x6, 0x14}, 0x3, 0x7, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 21:59:42 executing program 3 (fault-call:4 fault-nth:43): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, &(0x7f0000000500)) [ 739.764259][T29588] usb 3-1: USB disconnect, device number 47 21:59:42 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008084}, 0x80) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x8800) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 739.878637][ T1127] FAULT_INJECTION: forcing a failure. [ 739.878637][ T1127] name failslab, interval 1, probability 0, space 0, times 0 [ 739.898611][ T1127] CPU: 1 PID: 1127 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 739.906852][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.916897][ T1127] Call Trace: [ 739.920180][ T1127] dump_stack+0x1e9/0x30e [ 739.924510][ T1127] should_fail+0x433/0x5b0 21:59:42 executing program 4: socket(0x3, 0x3, 0x8) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x7, 0xffff, 0x7, 0x6, 0x1a, "6590b9d183a22121"}) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 739.928931][ T1127] ? sock_kmalloc+0x98/0x100 [ 739.933513][ T1127] should_failslab+0x5/0x20 [ 739.938003][ T1127] __kmalloc+0x74/0x330 [ 739.942172][ T1127] sock_kmalloc+0x98/0x100 [ 739.946585][ T1127] hash_recvmsg+0x1bd/0x810 [ 739.951085][ T1127] ? hash_sendmsg+0xb40/0xb40 [ 739.955762][ T1127] ____sys_recvmsg+0x24a/0x510 [ 739.960533][ T1127] ? import_iovec+0x12a/0x2c0 [ 739.965227][ T1127] do_recvmmsg+0x429/0x1500 [ 739.969726][ T1127] ? rcu_lock_release+0x5/0x20 [ 739.974504][ T1127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 739.979978][ T1127] ? fput_many+0x11/0x1a0 [ 739.984299][ T1127] ? fput_many+0x24/0x1a0 [ 739.988626][ T1127] ? fput_many+0x2b/0x1a0 [ 739.992955][ T1127] ? check_preemption_disabled+0xb0/0x240 [ 739.998666][ T1127] ? debug_smp_processor_id+0x5/0x20 [ 740.003950][ T1127] __x64_sys_recvmmsg+0x11d/0x1a0 [ 740.008974][ T1127] do_syscall_64+0xf3/0x1b0 [ 740.013472][ T1127] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 740.019352][ T1127] RIP: 0033:0x45ca59 21:59:43 executing program 4: userfaultfd(0x180000) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="aed2ab9d220d7df6d8599751be5335361dff73d3576af073f19adf0000fce27405f22aa44918c92e3d421b03de270974f6bbf5fb2bcd5738f3011c3c1bcec842e9aa68fe0d671ed0cda8d90d08026440b4bde231086718c0f07585c8988109ef17562f1f9d1ac0984d6390f7c89ea32ca537e63f040956e36f75cdf069ccd9cd22385449beab97127ae42dbc4404ebb0a22417fb069de417dfb3fee01076753f50ea92", 0xa3}, {&(0x7f0000000180)="8012ea207cf79192f6e5513baf733d500046855fc851ef9e87a0b20ecfb5971fe6367398ca6a5d7d5829b796500e2a53a77002e2cbe98fcabc8fc281faff18c7a95c3b670563d45400275597dbbec908312f106ae315a37f970fcd459fa2e35d90f8c85f6eb52a882b6fad236be858f8f19ed5dab9fb9157412dc94b72d3898b9aaeb349d15bd55ba56eee9ca0974350a4d38687b737238f3d75c253576d26b581342a7900e4148036a312db5b2dcc34911ceb77b2b180f10f24dea8a95a503a115be3d28c48b4abae3ea654e3", 0xcd}], 0x1f) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01390c6da21cdf94520001"], 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 740.023244][ T1127] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 740.042835][ T1127] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 740.051235][ T1127] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 740.059194][ T1127] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 740.067155][ T1127] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 21:59:43 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000100)=""/144) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000) dup(r4) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) [ 740.075122][ T1127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 740.083084][ T1127] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:43 executing program 3 (fault-call:4 fault-nth:44): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 740.125076][ T2693] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 740.157866][ T1149] FAULT_INJECTION: forcing a failure. [ 740.157866][ T1149] name failslab, interval 1, probability 0, space 0, times 0 [ 740.171926][ T1149] CPU: 1 PID: 1149 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 740.180156][ T1149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.190187][ T1149] Call Trace: [ 740.193464][ T1149] dump_stack+0x1e9/0x30e [ 740.197826][ T1149] should_fail+0x433/0x5b0 [ 740.202246][ T1149] ? sock_kmalloc+0x98/0x100 [ 740.206861][ T1149] should_failslab+0x5/0x20 [ 740.211339][ T1149] __kmalloc+0x74/0x330 [ 740.215485][ T1149] sock_kmalloc+0x98/0x100 [ 740.219898][ T1149] hash_recvmsg+0x1bd/0x810 [ 740.224402][ T1149] ? hash_sendmsg+0xb40/0xb40 [ 740.229106][ T1149] ____sys_recvmsg+0x24a/0x510 [ 740.233876][ T1149] ? import_iovec+0x12a/0x2c0 [ 740.238543][ T1149] do_recvmmsg+0x429/0x1500 [ 740.243040][ T1149] ? retint_kernel+0x2b/0x2b [ 740.247644][ T1149] ? ksys_write+0x1b1/0x220 [ 740.252146][ T1149] ? ksys_write+0x1b1/0x220 [ 740.256663][ T1149] ? check_preemption_disabled+0xb0/0x240 [ 740.261553][T29588] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 740.262368][ T1149] ? debug_smp_processor_id+0x5/0x20 [ 740.262384][ T1149] __x64_sys_recvmmsg+0x11d/0x1a0 [ 740.262403][ T1149] do_syscall_64+0xf3/0x1b0 [ 740.262417][ T1149] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 740.262427][ T1149] RIP: 0033:0x45ca59 [ 740.262438][ T1149] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 740.262445][ T1149] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 740.262455][ T1149] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 740.262465][ T1149] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 740.338855][ T1149] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 740.346817][ T1149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 740.354773][ T1149] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:43 executing program 3 (fault-call:4 fault-nth:45): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 740.370473][ T2506] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 740.371514][ T2693] usb 1-1: Using ep0 maxpacket: 16 [ 740.426984][ T1161] FAULT_INJECTION: forcing a failure. [ 740.426984][ T1161] name failslab, interval 1, probability 0, space 0, times 0 [ 740.440241][ T1161] CPU: 1 PID: 1161 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 740.448457][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.458488][ T1161] Call Trace: [ 740.461764][ T1161] dump_stack+0x1e9/0x30e [ 740.466088][ T1161] should_fail+0x433/0x5b0 [ 740.470479][ T1161] ? sock_kmalloc+0x98/0x100 [ 740.475052][ T1161] should_failslab+0x5/0x20 [ 740.479545][ T1161] __kmalloc+0x74/0x330 [ 740.483689][ T1161] sock_kmalloc+0x98/0x100 [ 740.488080][ T1161] hash_recvmsg+0x1bd/0x810 [ 740.492580][ T1161] ? hash_sendmsg+0xb40/0xb40 [ 740.497252][ T1161] ____sys_recvmsg+0x24a/0x510 [ 740.502027][ T1161] ? import_iovec+0x12a/0x2c0 [ 740.506702][ T1161] do_recvmmsg+0x429/0x1500 [ 740.511194][ T1161] ? rcu_lock_release+0x5/0x20 [ 740.511894][ T2693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.515969][ T1161] ? ksys_write+0x1b1/0x220 [ 740.515982][ T1161] ? ksys_write+0x1b1/0x220 [ 740.515999][ T1161] ? check_preemption_disabled+0xb0/0x240 [ 740.516009][ T1161] ? debug_smp_processor_id+0x5/0x20 [ 740.516025][ T1161] __x64_sys_recvmmsg+0x11d/0x1a0 [ 740.516043][ T1161] do_syscall_64+0xf3/0x1b0 [ 740.516058][ T1161] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 740.533958][ T2693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 740.535822][ T1161] RIP: 0033:0x45ca59 [ 740.535834][ T1161] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 740.535841][ T1161] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 740.535852][ T1161] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 740.535859][ T1161] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 740.535865][ T1161] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 740.535872][ T1161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 740.535879][ T1161] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 740.647192][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 740.652464][ T2693] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 740.661487][ T2506] usb 2-1: Using ep0 maxpacket: 16 [ 740.666676][ T2693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.679418][ T2693] usb 1-1: config 0 descriptor?? [ 740.771649][T29588] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 740.782432][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 740.796342][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 740.805970][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.811761][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.816279][T29588] usb 3-1: config 0 descriptor?? [ 740.836475][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 740.850907][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 740.863406][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.880876][ T2506] usb 2-1: config 0 descriptor?? [ 740.884727][T29588] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 741.172857][ T2693] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 741.194832][ T2693] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0049/input/input69 [ 741.286211][ T2693] microsoft 0003:045E:07DA.0049: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 741.578575][T27672] usb 1-1: USB disconnect, device number 106 [ 741.631547][ T2506] usbhid 2-1:0.0: can't add hid device: -71 [ 741.637590][ T2506] usbhid: probe of 2-1:0.0 failed with error -71 [ 741.649644][ T2506] usb 2-1: USB disconnect, device number 49 21:59:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:45 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xc0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:45 executing program 3 (fault-call:4 fault-nth:46): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 21:59:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, &(0x7f0000000500)) [ 742.801017][T29588] usb 3-1: USB disconnect, device number 48 [ 742.923867][ T1226] FAULT_INJECTION: forcing a failure. [ 742.923867][ T1226] name failslab, interval 1, probability 0, space 0, times 0 [ 742.947723][ T1226] CPU: 0 PID: 1226 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 742.955976][ T1226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.966224][ T1226] Call Trace: [ 742.969510][ T1226] dump_stack+0x1e9/0x30e [ 742.973847][ T1226] should_fail+0x433/0x5b0 [ 742.978267][ T1226] ? sock_kmalloc+0x98/0x100 [ 742.982852][ T1226] should_failslab+0x5/0x20 [ 742.987351][ T1226] __kmalloc+0x74/0x330 [ 742.991523][ T1226] sock_kmalloc+0x98/0x100 [ 742.995962][ T1226] hash_recvmsg+0x1bd/0x810 [ 743.000468][ T1226] ? hash_sendmsg+0xb40/0xb40 [ 743.005136][ T1226] ____sys_recvmsg+0x24a/0x510 [ 743.009907][ T1226] ? import_iovec+0x12a/0x2c0 [ 743.014581][ T1226] do_recvmmsg+0x429/0x1500 [ 743.019101][ T1226] ? lockdep_hardirqs_on_prepare+0x425/0x6e0 [ 743.025090][ T1226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 743.030547][ T1226] ? check_preemption_disabled+0xa2/0x240 [ 743.036262][ T1226] ? retint_kernel+0x2b/0x2b [ 743.040854][ T1226] __x64_sys_recvmmsg+0x11d/0x1a0 [ 743.045893][ T1226] do_syscall_64+0xf3/0x1b0 [ 743.050395][ T1226] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 743.056285][ T1226] RIP: 0033:0x45ca59 [ 743.060172][ T1226] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 743.079765][ T1226] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 743.088168][ T1226] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 743.096148][ T1226] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 743.104134][ T1226] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 743.112100][ T1226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 743.120067][ T1226] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 743.154533][ T2494] usb 2-1: new high-speed USB device number 50 using dummy_hcd 21:59:46 executing program 3 (fault-call:4 fault-nth:47): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 743.287145][ T2693] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 743.313007][ T1238] FAULT_INJECTION: forcing a failure. [ 743.313007][ T1238] name failslab, interval 1, probability 0, space 0, times 0 [ 743.326356][ T1238] CPU: 1 PID: 1238 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 743.334586][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.344630][ T1238] Call Trace: [ 743.347915][ T1238] dump_stack+0x1e9/0x30e [ 743.352242][ T1238] should_fail+0x433/0x5b0 [ 743.356770][ T1238] ? sock_kmalloc+0x98/0x100 [ 743.361352][ T1238] should_failslab+0x5/0x20 [ 743.365846][ T1238] __kmalloc+0x74/0x330 [ 743.370003][ T1238] sock_kmalloc+0x98/0x100 [ 743.374415][ T1238] hash_recvmsg+0x1bd/0x810 [ 743.378919][ T1238] ? hash_sendmsg+0xb40/0xb40 [ 743.383594][ T1238] ____sys_recvmsg+0x24a/0x510 [ 743.388364][ T1238] ? import_iovec+0x12a/0x2c0 [ 743.393039][ T1238] do_recvmmsg+0x429/0x1500 [ 743.397532][ T1238] ? rcu_lock_release+0x5/0x20 [ 743.402333][ T1238] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 743.407888][ T1238] __x64_sys_recvmmsg+0x11d/0x1a0 [ 743.412919][ T1238] do_syscall_64+0xf3/0x1b0 [ 743.417418][ T1238] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 743.423300][ T1238] RIP: 0033:0x45ca59 [ 743.427188][ T1238] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 743.446784][ T1238] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 743.455541][ T1238] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 743.463614][ T1238] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 743.471581][ T1238] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 743.479545][ T1238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 743.487507][ T1238] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:46 executing program 3 (fault-call:4 fault-nth:48): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 743.551363][ T2494] usb 2-1: Using ep0 maxpacket: 16 [ 743.571273][T29588] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 743.658680][ T1240] FAULT_INJECTION: forcing a failure. [ 743.658680][ T1240] name failslab, interval 1, probability 0, space 0, times 0 [ 743.682238][ T1240] CPU: 0 PID: 1240 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 743.688745][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.690469][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.690477][ T1240] Call Trace: [ 743.709130][ T2494] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 743.711335][ T1240] dump_stack+0x1e9/0x30e [ 743.711351][ T1240] should_fail+0x433/0x5b0 [ 743.711370][ T1240] ? sock_kmalloc+0x98/0x100 [ 743.711380][ T1240] should_failslab+0x5/0x20 [ 743.711389][ T1240] __kmalloc+0x74/0x330 [ 743.711404][ T1240] sock_kmalloc+0x98/0x100 [ 743.711417][ T1240] hash_recvmsg+0x1bd/0x810 [ 743.711431][ T1240] ? hash_sendmsg+0xb40/0xb40 [ 743.711443][ T1240] ____sys_recvmsg+0x24a/0x510 [ 743.711466][ T1240] ? import_iovec+0x12a/0x2c0 [ 743.725874][ T2494] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 743.727568][ T1240] do_recvmmsg+0x429/0x1500 [ 743.727608][ T1240] ? retint_kernel+0x2b/0x2b [ 743.727627][ T1240] ? do_syscall_64+0xb5/0x1b0 [ 743.737295][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.740881][ T1240] ? __x64_sys_recvmmsg+0x2e/0x1a0 [ 743.740899][ T1240] __x64_sys_recvmmsg+0x11d/0x1a0 [ 743.740918][ T1240] do_syscall_64+0xf3/0x1b0 [ 743.740931][ T1240] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 743.740944][ T1240] RIP: 0033:0x45ca59 [ 743.758330][ T2494] usb 2-1: config 0 descriptor?? [ 743.758417][ T1240] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 743.851899][ T1240] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 743.860303][ T1240] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 743.868270][ T1240] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 743.876233][ T1240] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 743.884201][ T1240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 743.892162][ T1240] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 743.901476][ T2693] usb 1-1: Using ep0 maxpacket: 16 [ 744.021262][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 744.041634][ T2693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.059999][ T2693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 744.087570][ T2693] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 744.106851][ T2693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.132526][ T2693] usb 1-1: config 0 descriptor?? [ 744.155165][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.173113][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.197444][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 744.225325][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 744.246197][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.271719][T29588] usb 3-1: config 0 descriptor?? 21:59:47 executing program 3 (fault-call:4 fault-nth:49): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 744.393672][ T1255] FAULT_INJECTION: forcing a failure. [ 744.393672][ T1255] name failslab, interval 1, probability 0, space 0, times 0 [ 744.406771][ T1255] CPU: 0 PID: 1255 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 744.415007][ T1255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.425053][ T1255] Call Trace: [ 744.428347][ T1255] dump_stack+0x1e9/0x30e [ 744.432676][ T1255] should_fail+0x433/0x5b0 [ 744.437097][ T1255] ? sock_kmalloc+0x98/0x100 [ 744.441798][ T1255] should_failslab+0x5/0x20 [ 744.446293][ T1255] __kmalloc+0x74/0x330 [ 744.450448][ T1255] sock_kmalloc+0x98/0x100 [ 744.454860][ T1255] hash_recvmsg+0x1bd/0x810 [ 744.459363][ T1255] ? hash_sendmsg+0xb40/0xb40 [ 744.464148][ T1255] ____sys_recvmsg+0x24a/0x510 [ 744.468909][ T1255] ? check_preemption_disabled+0xa2/0x240 [ 744.474626][ T1255] ? retint_kernel+0x2b/0x2b [ 744.479216][ T1255] ? do_recvmmsg+0x3cd/0x1500 [ 744.483893][ T1255] do_recvmmsg+0x429/0x1500 [ 744.488392][ T1255] ? rcu_lock_release+0x5/0x20 [ 744.493178][ T1255] ? ksys_write+0x1b1/0x220 [ 744.497677][ T1255] ? ksys_write+0x1b1/0x220 [ 744.502178][ T1255] ? check_preemption_disabled+0xb0/0x240 [ 744.503133][ T2494] usbhid 2-1:0.0: can't add hid device: -71 [ 744.507877][ T1255] ? debug_smp_processor_id+0x5/0x20 [ 744.507893][ T1255] __x64_sys_recvmmsg+0x11d/0x1a0 [ 744.524174][ T1255] do_syscall_64+0xf3/0x1b0 [ 744.526305][ T2494] usbhid: probe of 2-1:0.0 failed with error -71 [ 744.528668][ T1255] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 744.528679][ T1255] RIP: 0033:0x45ca59 [ 744.528691][ T1255] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 744.528697][ T1255] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 744.528708][ T1255] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 744.528715][ T1255] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 744.528725][ T1255] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 744.582972][ T2494] usb 2-1: USB disconnect, device number 50 [ 744.588760][ T1255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 744.588772][ T1255] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 744.613062][ T2693] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 21:59:47 executing program 3 (fault-call:4 fault-nth:50): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 744.638005][ T2693] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.004A/input/input70 [ 744.726056][ T2693] microsoft 0003:045E:07DA.004A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 21:59:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 744.808541][ T1263] FAULT_INJECTION: forcing a failure. [ 744.808541][ T1263] name failslab, interval 1, probability 0, space 0, times 0 [ 744.824793][ T1263] CPU: 1 PID: 1263 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 744.833028][ T1263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.839314][T29588] microsoft 0003:045E:07DA.004B: unknown main item tag 0x0 [ 744.843069][ T1263] Call Trace: [ 744.843086][ T1263] dump_stack+0x1e9/0x30e [ 744.843102][ T1263] should_fail+0x433/0x5b0 [ 744.843120][ T1263] ? sock_kmalloc+0x98/0x100 [ 744.843135][ T1263] should_failslab+0x5/0x20 [ 744.871401][ T1263] __kmalloc+0x74/0x330 [ 744.875558][ T1263] sock_kmalloc+0x98/0x100 [ 744.879979][ T1263] hash_recvmsg+0x1bd/0x810 [ 744.882366][T29588] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.004B/input/input71 [ 744.884478][ T1263] ? hash_sendmsg+0xb40/0xb40 [ 744.884494][ T1263] ____sys_recvmsg+0x24a/0x510 [ 744.884520][ T1263] ? import_iovec+0x12a/0x2c0 [ 744.884538][ T1263] do_recvmmsg+0x429/0x1500 [ 744.884581][ T1263] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 744.920032][ T1263] ? check_preemption_disabled+0xb0/0x240 [ 744.925745][ T1263] ? debug_smp_processor_id+0x5/0x20 [ 744.931027][ T1263] __x64_sys_recvmmsg+0x11d/0x1a0 [ 744.936051][ T1263] do_syscall_64+0xf3/0x1b0 [ 744.940553][ T1263] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 744.946435][ T1263] RIP: 0033:0x45ca59 [ 744.950320][ T1263] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 744.969914][ T1263] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 744.978315][ T1263] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 744.986278][ T1263] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 744.994249][ T1263] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 745.002212][ T1263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 745.010177][ T1263] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 745.018027][ T2693] usb 1-1: USB disconnect, device number 107 [ 745.064048][T29588] microsoft 0003:045E:07DA.004B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 745.137976][T29588] usb 3-1: USB disconnect, device number 49 21:59:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 21:59:48 executing program 3 (fault-call:4 fault-nth:51): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, &(0x7f0000000500)) [ 745.680951][ T1318] FAULT_INJECTION: forcing a failure. [ 745.680951][ T1318] name failslab, interval 1, probability 0, space 0, times 0 [ 745.702160][ T1318] CPU: 0 PID: 1318 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 745.710398][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.720442][ T1318] Call Trace: [ 745.723737][ T1318] dump_stack+0x1e9/0x30e [ 745.728071][ T1318] should_fail+0x433/0x5b0 [ 745.732501][ T1318] ? sock_kmalloc+0x98/0x100 [ 745.737085][ T1318] should_failslab+0x5/0x20 [ 745.741678][ T1318] __kmalloc+0x74/0x330 [ 745.745836][ T1318] sock_kmalloc+0x98/0x100 [ 745.750249][ T1318] hash_recvmsg+0x1bd/0x810 [ 745.754753][ T1318] ? hash_sendmsg+0xb40/0xb40 [ 745.759428][ T1318] ____sys_recvmsg+0x24a/0x510 [ 745.764268][ T1318] ? import_iovec+0x12a/0x2c0 [ 745.768946][ T1318] do_recvmmsg+0x429/0x1500 [ 745.773452][ T1318] ? do_raw_spin_unlock+0x134/0x8d0 [ 745.778657][ T1318] ? retint_kernel+0x2b/0x2b [ 745.783243][ T1318] ? __x64_sys_recvmmsg+0x109/0x1a0 [ 745.788436][ T1318] __x64_sys_recvmmsg+0x11d/0x1a0 [ 745.793459][ T1318] do_syscall_64+0xf3/0x1b0 [ 745.797963][ T1318] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 745.803848][ T1318] RIP: 0033:0x45ca59 [ 745.807748][ T1318] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 745.827338][ T1318] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 745.835754][ T1318] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 745.843824][ T1318] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 745.851889][ T1318] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 745.859850][ T1318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 745.867812][ T1318] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:48 executing program 3 (fault-call:4 fault-nth:52): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 745.891133][ T2494] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 746.021175][ T2693] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 746.024482][ T1329] FAULT_INJECTION: forcing a failure. [ 746.024482][ T1329] name failslab, interval 1, probability 0, space 0, times 0 [ 746.028928][T29588] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 746.053276][ T1329] CPU: 1 PID: 1329 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 746.061509][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.071554][ T1329] Call Trace: [ 746.074842][ T1329] dump_stack+0x1e9/0x30e [ 746.079166][ T1329] should_fail+0x433/0x5b0 [ 746.083587][ T1329] ? sock_kmalloc+0x98/0x100 [ 746.088169][ T1329] should_failslab+0x5/0x20 [ 746.092665][ T1329] __kmalloc+0x74/0x330 [ 746.096815][ T1329] sock_kmalloc+0x98/0x100 [ 746.101226][ T1329] hash_recvmsg+0x1bd/0x810 [ 746.105724][ T1329] ? check_preemption_disabled+0xa2/0x240 [ 746.111434][ T1329] ? hash_sendmsg+0xb40/0xb40 [ 746.116104][ T1329] ____sys_recvmsg+0x24a/0x510 [ 746.120871][ T1329] ? import_iovec+0x12a/0x2c0 [ 746.125545][ T1329] do_recvmmsg+0x429/0x1500 [ 746.130058][ T1329] ? check_preemption_disabled+0x33/0x240 [ 746.135780][ T1329] ? ksys_write+0x1b1/0x220 [ 746.140273][ T1329] ? ksys_write+0x1b1/0x220 [ 746.144774][ T1329] ? check_preemption_disabled+0xb0/0x240 [ 746.150481][ T1329] ? debug_smp_processor_id+0x5/0x20 [ 746.155759][ T1329] __x64_sys_recvmmsg+0x11d/0x1a0 [ 746.160778][ T1329] do_syscall_64+0xf3/0x1b0 [ 746.165274][ T1329] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 746.171154][ T1329] RIP: 0033:0x45ca59 [ 746.175041][ T1329] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 746.194632][ T1329] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 746.203036][ T1329] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 746.210999][ T1329] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 746.218960][ T1329] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 746.227102][ T1329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 746.235065][ T1329] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:49 executing program 3 (fault-call:4 fault-nth:53): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 746.311098][ T2494] usb 2-1: Using ep0 maxpacket: 16 [ 746.396575][ T1331] FAULT_INJECTION: forcing a failure. [ 746.396575][ T1331] name failslab, interval 1, probability 0, space 0, times 0 [ 746.412310][ T1331] CPU: 1 PID: 1331 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 746.420551][ T1331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.430620][ T1331] Call Trace: [ 746.433908][ T1331] dump_stack+0x1e9/0x30e [ 746.438248][ T1331] should_fail+0x433/0x5b0 [ 746.442667][ T1331] ? sock_kmalloc+0x98/0x100 [ 746.447248][ T1331] should_failslab+0x5/0x20 [ 746.451742][ T1331] __kmalloc+0x74/0x330 [ 746.455896][ T1331] sock_kmalloc+0x98/0x100 [ 746.460303][ T1331] hash_recvmsg+0x1bd/0x810 [ 746.464800][ T1331] ? hash_sendmsg+0xb40/0xb40 [ 746.469470][ T1331] ____sys_recvmsg+0x24a/0x510 [ 746.474238][ T1331] ? import_iovec+0x12a/0x2c0 [ 746.478910][ T1331] do_recvmmsg+0x429/0x1500 [ 746.483414][ T1331] ? trace_hardirqs_on+0x30/0x80 [ 746.488362][ T1331] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 746.494031][ T1331] __x64_sys_recvmmsg+0x11d/0x1a0 [ 746.499051][ T1331] do_syscall_64+0xf3/0x1b0 [ 746.503545][ T1331] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 746.509429][ T1331] RIP: 0033:0x45ca59 [ 746.513312][ T1331] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 746.532906][ T1331] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 746.541309][ T1331] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 746.549270][ T1331] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 746.557233][ T1331] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 746.565197][ T1331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 746.573158][ T1331] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 746.591283][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.621075][ T2693] usb 1-1: Using ep0 maxpacket: 16 [ 746.626315][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 746.630095][ T2494] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 21:59:49 executing program 3 (fault-call:4 fault-nth:54): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 746.664933][ T2494] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 746.680393][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.694547][ T2494] usb 2-1: config 0 descriptor?? [ 746.761361][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.772592][ T2693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.813606][ T2693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 746.826831][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.855202][ T1336] FAULT_INJECTION: forcing a failure. [ 746.855202][ T1336] name failslab, interval 1, probability 0, space 0, times 0 [ 746.873490][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 746.889726][ T2693] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 746.899160][ T1336] CPU: 0 PID: 1336 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 746.907412][ T1336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.917454][ T1336] Call Trace: [ 746.920739][ T1336] dump_stack+0x1e9/0x30e [ 746.925066][ T1336] should_fail+0x433/0x5b0 [ 746.929486][ T1336] ? sock_kmalloc+0x98/0x100 [ 746.934072][ T1336] should_failslab+0x5/0x20 [ 746.938564][ T1336] __kmalloc+0x74/0x330 [ 746.942738][ T1336] sock_kmalloc+0x98/0x100 [ 746.947153][ T1336] hash_recvmsg+0x1bd/0x810 [ 746.951744][ T1336] ? hash_sendmsg+0xb40/0xb40 [ 746.956419][ T1336] ____sys_recvmsg+0x24a/0x510 [ 746.961184][ T1336] ? retint_kernel+0x2b/0x2b [ 746.965771][ T1336] ? import_iovec+0x12a/0x2c0 [ 746.970560][ T1336] do_recvmmsg+0x429/0x1500 [ 746.975088][ T1336] ? ksys_write+0x1b1/0x220 [ 746.979585][ T1336] ? ksys_write+0x1b1/0x220 [ 746.984093][ T1336] ? check_preemption_disabled+0xb0/0x240 [ 746.989813][ T1336] ? debug_smp_processor_id+0x5/0x20 [ 746.995095][ T1336] __x64_sys_recvmmsg+0x11d/0x1a0 [ 747.000114][ T1336] do_syscall_64+0xf3/0x1b0 [ 747.004615][ T1336] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 747.010509][ T1336] RIP: 0033:0x45ca59 [ 747.014398][ T1336] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 747.033995][ T1336] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 747.042425][ T1336] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 747.050395][ T1336] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 747.058356][ T1336] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 747.066318][ T1336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 747.074282][ T1336] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 747.092625][ T2693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.100700][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 747.118229][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.132510][ T2693] usb 1-1: config 0 descriptor?? 21:59:50 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace(0x4208, r4) [ 747.157479][T29588] usb 3-1: config 0 descriptor?? 21:59:50 executing program 3 (fault-call:4 fault-nth:55): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:50 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x24) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x3600) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r6, &(0x7f00000017c0), 0x0, 0xff) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfffffff, 0x9, 0x69fb, r6, 0x0, &(0x7f0000000080)={0x9a0909, 0xce6e, [], @value64=0x40}}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000100)=0x10001, 0x4) [ 747.276069][ T1350] FAULT_INJECTION: forcing a failure. [ 747.276069][ T1350] name failslab, interval 1, probability 0, space 0, times 0 [ 747.291196][ T1350] CPU: 0 PID: 1350 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 747.299436][ T1350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.309486][ T1350] Call Trace: [ 747.312775][ T1350] dump_stack+0x1e9/0x30e [ 747.317218][ T1350] should_fail+0x433/0x5b0 [ 747.321631][ T1350] ? sock_kmalloc+0x98/0x100 [ 747.326213][ T1350] should_failslab+0x5/0x20 [ 747.330702][ T1350] __kmalloc+0x74/0x330 [ 747.334850][ T1350] sock_kmalloc+0x98/0x100 [ 747.339253][ T1350] hash_recvmsg+0x1bd/0x810 [ 747.343736][ T1350] ? hash_sendmsg+0xb40/0xb40 [ 747.348384][ T1350] ____sys_recvmsg+0x24a/0x510 [ 747.353146][ T1350] ? import_iovec+0x12a/0x2c0 [ 747.357809][ T1350] do_recvmmsg+0x429/0x1500 [ 747.362449][ T1350] ? ksys_write+0x1b1/0x220 [ 747.366947][ T1350] ? ksys_write+0x1b1/0x220 [ 747.371469][ T1350] ? check_preemption_disabled+0xb0/0x240 [ 747.377185][ T1350] ? debug_smp_processor_id+0x5/0x20 [ 747.382468][ T1350] __x64_sys_recvmmsg+0x11d/0x1a0 [ 747.387500][ T1350] do_syscall_64+0xf3/0x1b0 [ 747.392003][ T1350] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 747.397887][ T1350] RIP: 0033:0x45ca59 [ 747.401773][ T1350] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 747.421371][ T1350] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 747.429772][ T1350] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 747.441123][ T1350] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 747.441243][ T2494] usbhid 2-1:0.0: can't add hid device: -71 [ 747.449078][ T1350] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 747.449084][ T1350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 747.449090][ T1350] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 747.488950][ T2494] usbhid: probe of 2-1:0.0 failed with error -71 [ 747.510645][ T2494] usb 2-1: USB disconnect, device number 51 [ 747.702747][ T2693] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 747.713524][T29588] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 747.738915][ T2693] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.004C/input/input72 [ 747.757569][T29588] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.004D/input/input73 [ 747.850566][ T2693] microsoft 0003:045E:07DA.004C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 747.924428][T29588] microsoft 0003:045E:07DA.004D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 747.950557][T29588] usb 3-1: USB disconnect, device number 50 [ 748.103389][ T2693] usb 1-1: USB disconnect, device number 108 21:59:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:51 executing program 3 (fault-call:4 fault-nth:56): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="915be56bc27b578af7fcc995c050f8a51b354742dd395fb0aef4b46b67193bbc4529242622659f30c6200f6858228cc376e47e5c642f5bcb1c8127c7102443f2074e6904c2f14c9bdc1be93a2521d669ef3db0d3a572425135596ac8ec6120f85dd61c7c47e4742356e030305f1a9ccaa790bd1d8179e9886f108963347e1ad1d81a555ad738da3d23bb85596ae2529338df1e43d620594eb90c6224a3a79b96f3fac91fb3e75f1e71f322d934a2b3f42c9cb24de0f892a60641ed429310fcd223fe53", 0xc3}, {&(0x7f0000001180)="95b4aac44931e8d6809e52b45ba4233714e20656acd611393c22f1cca502227d8eb5b623f045e60137bba8079e80fa3c59ce248512d0e727212f6e8a5d15869e793d88951e21dec3bfc1f9bbacc0403da4012e11be5e1e6493aba7dbff6bf49000683b4baad569c44647e12e728aec7e02b196ea2190f2b3cb798399ba53b88da8639c1d24578553dc8a322e3bbf435f467502", 0x93}, {&(0x7f0000001240)="c540f372ef7eea6f8d6b5012d1f08710fe9b7757ff4ad997d826ddc39d64ff18637087115ec6e6030a708f934595cb76ac48c948c6a3c4f7768a52228525ae3a62cc465ca19cb82e9b93f5f619916fd6d7e36875f24cde630d67f0e47c0e5c399d639d035bef162148b3ad2a2d825efb30d53ae7c8bd30e8ffee7fa1d5c660c605ef5df9087c5cf77b994eee5a2f90", 0x8f}, {&(0x7f0000001300)="f1c5b872a490e2993ff089e80dec0cbdcccf472926707b01095992e7d34e901fe6588d9c03d497edcfe79af03bdb03f1ad9720cf28b59459a8fd03b749a82531858ffc04c1b808ef64e8be4682cb72f5afecf972df91016e38447c0ff2d7854613bfa2f71a63ca894dd6d0e1d1d73746176de61799fe3a9bea3d71cb4ca7dfbee60ea737c1c8a8ed1bfe06865bef2a3958bc812471fcfc7857a3e4adcc573af033fdf6dc224a33663bab146d5cdb9af03bd1962fa887e9c2262f3e6e60d45b3835359a51705da1dee42a5084595c37f7dcc64c0ec92547818b46c5ac3fbb53392e4594190c979a323c1c3bb6e593794ba712011e18", 0xf5}, {&(0x7f0000001400)="2ca35c5b1fcaa8588295d926c03218d4e708fbbd54340bd68ce5c08191577842b8b0e3acc1418fbfb1f86cfa7707680da80f9a7f29665e8cf20a56e072e6672da27aace42224b1848f004b7c744beda93cae53b08e5be16153775ba107e33596a41a0baf8b69cda9b057f498f3dace5b3d5cc98edfdaffa776814a000ca10244c7d66cef02af9bf607102992d8da3bdf9d184f302a6b0c72698deaa7a2b558a9565749b15cc5b3708039eaf4ae5d7aff2aed8d063ebe0a0569b796b030dbd8dbc9d8c839c4e22f767b6dffd2eeece72f3728e725fe25154faa", 0xd9}, {&(0x7f0000001500)="c1fdc9f1f0b61bd89458f7ae4fdc1025a5a24b244529abc4c5a22bdb4a8d0b7a1c160829c681b2062c92dc43946db6c6158e9273fcb1c80b958197efb5243291545cc60dcb019a6a932b18744b7e319ee59fbe682635bf40e55ea52dc30de7821bc0bb1638d592f97b5a3c9974bbc887c871d4e6cf77400cab27140f7d987da774efe53b97", 0x85}], 0x7) r2 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 21:59:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 748.536998][ T1417] FAULT_INJECTION: forcing a failure. [ 748.536998][ T1417] name failslab, interval 1, probability 0, space 0, times 0 [ 748.550511][ T1417] CPU: 1 PID: 1417 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 748.558745][ T1417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.568849][ T1417] Call Trace: [ 748.572117][ T1417] dump_stack+0x1e9/0x30e [ 748.576425][ T1417] should_fail+0x433/0x5b0 [ 748.580825][ T1417] ? sock_kmalloc+0x98/0x100 [ 748.585436][ T1417] should_failslab+0x5/0x20 [ 748.589910][ T1417] __kmalloc+0x74/0x330 [ 748.594051][ T1417] sock_kmalloc+0x98/0x100 [ 748.598463][ T1417] hash_recvmsg+0x1bd/0x810 [ 748.602961][ T1417] ? hash_sendmsg+0xb40/0xb40 [ 748.607761][ T1417] ____sys_recvmsg+0x24a/0x510 [ 748.612518][ T1417] ? lock_release+0x3d1/0x760 [ 748.617198][ T1417] ? import_iovec+0x12a/0x2c0 [ 748.621872][ T1417] do_recvmmsg+0x429/0x1500 [ 748.626404][ T1417] ? ksys_write+0x1b1/0x220 [ 748.630925][ T1417] ? ksys_write+0x1b1/0x220 21:59:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:51 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0xd4a5, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 748.635428][ T1417] ? check_preemption_disabled+0xb0/0x240 [ 748.641140][ T1417] ? debug_smp_processor_id+0x5/0x20 [ 748.646427][ T1417] __x64_sys_recvmmsg+0x11d/0x1a0 [ 748.651462][ T1417] do_syscall_64+0xf3/0x1b0 [ 748.655965][ T1417] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 748.661847][ T1417] RIP: 0033:0x45ca59 [ 748.665744][ T1417] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:51 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3) [ 748.685350][ T1417] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 748.693752][ T1417] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 748.701714][ T1417] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 748.709678][ T1417] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 748.717641][ T1417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 748.725607][ T1417] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:51 executing program 3 (fault-call:4 fault-nth:57): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:51 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40000000000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:51 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0xfffffffffffffffe, 0xc94400) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 748.839785][ T1439] FAULT_INJECTION: forcing a failure. [ 748.839785][ T1439] name failslab, interval 1, probability 0, space 0, times 0 [ 748.861948][ T1439] CPU: 1 PID: 1439 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 748.870195][ T1439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.880236][ T1439] Call Trace: [ 748.883591][ T1439] dump_stack+0x1e9/0x30e 21:59:51 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000000c0)={0x3, "831714"}, 0x4) [ 748.887895][ T1439] should_fail+0x433/0x5b0 [ 748.892288][ T1439] ? sock_kmalloc+0x98/0x100 [ 748.896850][ T1439] should_failslab+0x5/0x20 [ 748.901336][ T1439] __kmalloc+0x74/0x330 [ 748.905466][ T1439] sock_kmalloc+0x98/0x100 [ 748.909866][ T1439] hash_recvmsg+0x1bd/0x810 [ 748.914361][ T1439] ? hash_sendmsg+0xb40/0xb40 [ 748.919032][ T1439] ____sys_recvmsg+0x24a/0x510 [ 748.923803][ T1439] ? import_iovec+0x12a/0x2c0 [ 748.928480][ T1439] do_recvmmsg+0x429/0x1500 [ 748.933004][ T1439] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 748.938457][ T1439] ? check_preemption_disabled+0xa2/0x240 [ 748.944189][ T1439] ? retint_kernel+0x2b/0x2b [ 748.948777][ T1439] __x64_sys_recvmmsg+0x11d/0x1a0 [ 748.953801][ T1439] do_syscall_64+0xf3/0x1b0 [ 748.958300][ T1439] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 748.964182][ T1439] RIP: 0033:0x45ca59 [ 748.968070][ T1439] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 748.987661][ T1439] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 748.996054][ T1439] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 749.004003][ T1439] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 749.011964][ T1439] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 749.019913][ T1439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 749.027866][ T1439] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 749.042632][ T8150] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 749.050288][ T2693] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 749.057908][T29588] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 749.290903][ T8150] usb 2-1: Using ep0 maxpacket: 16 [ 749.311209][ T2693] usb 3-1: Using ep0 maxpacket: 16 [ 749.316433][T29588] usb 1-1: Using ep0 maxpacket: 16 [ 749.441709][ T8150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.452645][ T8150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.466881][ T2693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.477820][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.488756][ T8150] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.499536][T29588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.510027][ T2693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.520493][ T8150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.529244][T29588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.542757][ T2693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.557877][T29588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.567509][ T8150] usb 2-1: config 0 descriptor?? [ 749.576082][ T2693] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.585292][T29588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.593865][ T2693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.608841][T29588] usb 1-1: config 0 descriptor?? [ 749.623562][ T2693] usb 3-1: config 0 descriptor?? [ 750.092635][ T2693] microsoft 0003:045E:07DA.004E: unknown main item tag 0x0 [ 750.106481][T29588] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 750.135768][T29588] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.004F/input/input75 [ 750.147849][ T2693] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.004E/input/input74 [ 750.232970][T29588] microsoft 0003:045E:07DA.004F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 750.301094][ T8150] usbhid 2-1:0.0: can't add hid device: -71 [ 750.307112][ T8150] usbhid: probe of 2-1:0.0 failed with error -71 [ 750.323677][ T2494] usb 1-1: USB disconnect, device number 109 [ 750.327220][ T2693] microsoft 0003:045E:07DA.004E: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 750.351907][ T8150] usb 2-1: USB disconnect, device number 52 [ 750.378091][ T2693] usb 3-1: USB disconnect, device number 51 21:59:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:53 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:53 executing program 3 (fault-call:4 fault-nth:58): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 21:59:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:53 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace(0x4208, r4) 21:59:53 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r0, &(0x7f00000000c0)=""/90, 0x5a) r2 = syz_open_dev$video(0x0, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) inotify_init1(0x80000) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000140)="d2304bd846e8cc7c8a3048d9a5549d3516709230505ff4bab2f0095d08998e954149d89dc42a354a796bba50129fa5540b0a0f0d35dc5add6b7ba010", {0x2, 0x3, 0x68641805, 0x0, 0x3, 0x0, 0x1}}) splice(r2, 0x0, r2, 0x0, 0x2, 0x6) [ 750.930247][ T1534] FAULT_INJECTION: forcing a failure. [ 750.930247][ T1534] name failslab, interval 1, probability 0, space 0, times 0 [ 750.948061][ T1534] CPU: 1 PID: 1534 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 750.956308][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.966384][ T1534] Call Trace: [ 750.969651][ T1534] dump_stack+0x1e9/0x30e [ 750.973979][ T1534] should_fail+0x433/0x5b0 [ 750.978451][ T1534] ? sock_kmalloc+0x98/0x100 [ 750.983029][ T1534] should_failslab+0x5/0x20 [ 750.987512][ T1534] __kmalloc+0x74/0x330 [ 750.991644][ T1534] sock_kmalloc+0x98/0x100 [ 750.996044][ T1534] hash_recvmsg+0x1bd/0x810 [ 751.000530][ T1534] ? hash_sendmsg+0xb40/0xb40 [ 751.005184][ T1534] ____sys_recvmsg+0x24a/0x510 [ 751.009953][ T1534] ? import_iovec+0x12a/0x2c0 [ 751.014604][ T1534] do_recvmmsg+0x429/0x1500 [ 751.019090][ T1534] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 751.024558][ T1534] ? check_preemption_disabled+0xa2/0x240 [ 751.030260][ T1534] ? retint_kernel+0x2b/0x2b [ 751.034832][ T1534] __x64_sys_recvmmsg+0x11d/0x1a0 [ 751.039829][ T1534] do_syscall_64+0xf3/0x1b0 [ 751.044303][ T1534] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 751.050166][ T1534] RIP: 0033:0x45ca59 [ 751.054050][ T1534] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:54 executing program 3 (fault-call:4 fault-nth:59): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 751.073672][ T1534] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 751.082060][ T1534] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 751.090007][ T1534] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 751.097997][ T1534] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 751.105958][ T1534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 751.113957][ T1534] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:54 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace(0x4208, r4) [ 751.198722][ T1544] FAULT_INJECTION: forcing a failure. [ 751.198722][ T1544] name failslab, interval 1, probability 0, space 0, times 0 [ 751.211817][ T1544] CPU: 1 PID: 1544 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 751.220048][ T1544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.220054][ T1544] Call Trace: [ 751.220071][ T1544] dump_stack+0x1e9/0x30e [ 751.220087][ T1544] should_fail+0x433/0x5b0 [ 751.220108][ T1544] ? sock_kmalloc+0x98/0x100 [ 751.220119][ T1544] should_failslab+0x5/0x20 [ 751.220151][ T1544] __kmalloc+0x74/0x330 [ 751.220167][ T1544] sock_kmalloc+0x98/0x100 [ 751.259979][ T1544] hash_recvmsg+0x1bd/0x810 [ 751.264458][ T1544] ? hash_sendmsg+0xb40/0xb40 [ 751.269110][ T1544] ____sys_recvmsg+0x24a/0x510 [ 751.273856][ T1544] ? import_iovec+0x12a/0x2c0 [ 751.278505][ T1544] do_recvmmsg+0x429/0x1500 [ 751.282981][ T1544] ? rcu_lock_release+0x5/0x20 [ 751.287796][ T1544] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 751.293225][ T1544] ? check_preemption_disabled+0xa2/0x240 [ 751.299111][ T1544] ? retint_kernel+0x2b/0x2b [ 751.303830][ T1544] __x64_sys_recvmmsg+0x11d/0x1a0 [ 751.308840][ T1544] do_syscall_64+0xf3/0x1b0 [ 751.313355][ T1544] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 751.319218][ T1544] RIP: 0033:0x45ca59 [ 751.323093][ T1544] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 751.342681][ T1544] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 751.351066][ T1544] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 751.359026][ T1544] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 751.366972][ T1544] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 751.374913][ T1544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 751.382861][ T1544] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 21:59:54 executing program 3 (fault-call:4 fault-nth:60): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 751.409775][T29588] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 751.440618][ T1548] FAULT_INJECTION: forcing a failure. [ 751.440618][ T1548] name failslab, interval 1, probability 0, space 0, times 0 21:59:54 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace(0x4208, r4) [ 751.460383][ T1548] CPU: 0 PID: 1548 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 751.466716][ T2494] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 751.468612][ T1548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.486186][ T1548] Call Trace: [ 751.489451][ T1548] dump_stack+0x1e9/0x30e [ 751.493774][ T1548] should_fail+0x433/0x5b0 [ 751.498182][ T1548] ? sock_kmalloc+0x98/0x100 [ 751.502756][ T1548] should_failslab+0x5/0x20 [ 751.507245][ T1548] __kmalloc+0x74/0x330 [ 751.511388][ T1548] sock_kmalloc+0x98/0x100 [ 751.515802][ T1548] hash_recvmsg+0x1bd/0x810 [ 751.520291][ T1548] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 751.525734][ T1548] ? hash_sendmsg+0xb40/0xb40 [ 751.530406][ T1548] ____sys_recvmsg+0x24a/0x510 [ 751.535155][ T1548] ? import_iovec+0x12a/0x2c0 [ 751.539807][ T1548] do_recvmmsg+0x429/0x1500 [ 751.544283][ T1548] ? rcu_lock_release+0x5/0x20 [ 751.549033][ T1548] ? ksys_write+0x1b1/0x220 [ 751.553619][ T1548] ? ksys_write+0x1b1/0x220 [ 751.558120][ T1548] ? check_preemption_disabled+0xb0/0x240 [ 751.563831][ T1548] ? debug_smp_processor_id+0x5/0x20 [ 751.569118][ T1548] __x64_sys_recvmmsg+0x11d/0x1a0 [ 751.574149][ T1548] do_syscall_64+0xf3/0x1b0 [ 751.578662][ T1548] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 751.584538][ T1548] RIP: 0033:0x45ca59 [ 751.584550][ T1548] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:59:54 executing program 3 (fault-call:4 fault-nth:61): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 751.584557][ T1548] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 751.584568][ T1548] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 751.584575][ T1548] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 751.584582][ T1548] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 751.584588][ T1548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 751.584595][ T1548] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 751.693381][ T1553] FAULT_INJECTION: forcing a failure. [ 751.693381][ T1553] name failslab, interval 1, probability 0, space 0, times 0 [ 751.708496][ T1553] CPU: 0 PID: 1553 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 751.716731][ T1553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.726769][ T1553] Call Trace: [ 751.730033][ T1553] dump_stack+0x1e9/0x30e [ 751.734340][ T1553] should_fail+0x433/0x5b0 [ 751.738734][ T1553] ? sock_kmalloc+0x98/0x100 [ 751.743306][ T1553] should_failslab+0x5/0x20 [ 751.747792][ T1553] __kmalloc+0x74/0x330 [ 751.751928][ T1553] sock_kmalloc+0x98/0x100 [ 751.756325][ T1553] hash_recvmsg+0x1bd/0x810 [ 751.760812][ T1553] ? hash_sendmsg+0xb40/0xb40 [ 751.765482][ T1553] ____sys_recvmsg+0x24a/0x510 [ 751.770256][ T1553] ? import_iovec+0x12a/0x2c0 [ 751.774934][ T1553] do_recvmmsg+0x429/0x1500 [ 751.779433][ T1553] ? rcu_lock_release+0x5/0x20 [ 751.784219][ T1553] ? ksys_write+0x1b1/0x220 [ 751.788715][ T1553] ? ksys_write+0x1b1/0x220 [ 751.792587][ T2494] usb 2-1: Using ep0 maxpacket: 16 [ 751.793208][ T1553] ? check_preemption_disabled+0xb0/0x240 [ 751.803995][ T1553] ? debug_smp_processor_id+0x5/0x20 [ 751.809276][ T1553] __x64_sys_recvmmsg+0x11d/0x1a0 [ 751.814302][ T1553] do_syscall_64+0xf3/0x1b0 [ 751.818802][ T1553] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 751.824673][ T1553] RIP: 0033:0x45ca59 [ 751.828543][ T1553] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 751.848128][ T1553] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 751.856526][ T1553] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 751.864567][ T1553] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 751.872519][ T1553] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 751.880477][ T1553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 751.888420][ T1553] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 751.911403][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.935550][ T2494] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 751.956074][ T2494] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 751.966008][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.970836][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 751.980846][ T2494] usb 2-1: config 0 descriptor?? [ 752.120906][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.131864][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.144734][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 752.154211][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.164784][T29588] usb 3-1: config 0 descriptor?? [ 752.710796][ T2494] usbhid 2-1:0.0: can't add hid device: -71 [ 752.716916][ T2494] usbhid: probe of 2-1:0.0 failed with error -71 [ 752.728017][ T2494] usb 2-1: USB disconnect, device number 53 [ 752.910855][T29588] usbhid 3-1:0.0: can't add hid device: -71 [ 752.916848][T29588] usbhid: probe of 3-1:0.0 failed with error -71 [ 752.925830][T29588] usb 3-1: USB disconnect, device number 52 21:59:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 21:59:56 executing program 3 (fault-call:4 fault-nth:62): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:56 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="030b000000000000000012"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x180, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "1b526e72c6462f1c17ddc0a4246c68c55bb33c5c090dd80dbf0308c8dc1dba0fb8300696e6f8617dbda9b815398fcfb59b4c4e23de60795e8b1dfeaa5d5e92f65ca673cab95d3bc62e0e0a0b31853928c0947ef86ba3ad20fde903e0b144aa2f25f3e2afbfda1ad3c4958d3ba910dd11a1fe75ebe1960a115223e544b368795a73d62a61b0ddad4a271613b56437"}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "5be8103c2cd36bcc58845cbbd51c6d848d43d0ccf8c2282691310efb79876626b25c12cbfbb2ecdb9a60977c7d97963bf417c76695ba072eeffdfeed8d9c816ad8d6f330d63daa4cfff8aa0f23b07bf0301553333805cf1de2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6219a19005ce2eaf03c60987b0ad4ffc3d9165fa7031264c34044d"}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x180}}, 0x4000000) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:56 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 21:59:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:56 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) 21:59:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffd, 0xc2dc3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/50) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x3600) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x24) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) kcmp(r4, r6, 0x0, r0, r0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) [ 753.490064][ T1591] FAULT_INJECTION: forcing a failure. [ 753.490064][ T1591] name failslab, interval 1, probability 0, space 0, times 0 [ 753.516253][ T1591] CPU: 1 PID: 1591 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 753.524504][ T1591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.534566][ T1591] Call Trace: [ 753.534583][ T1591] dump_stack+0x1e9/0x30e [ 753.534599][ T1591] should_fail+0x433/0x5b0 [ 753.534618][ T1591] ? sock_kmalloc+0x98/0x100 [ 753.534630][ T1591] should_failslab+0x5/0x20 [ 753.534640][ T1591] __kmalloc+0x74/0x330 [ 753.534655][ T1591] sock_kmalloc+0x98/0x100 [ 753.534669][ T1591] hash_recvmsg+0x1bd/0x810 [ 753.534683][ T1591] ? hash_sendmsg+0xb40/0xb40 [ 753.573385][ T1591] ____sys_recvmsg+0x24a/0x510 [ 753.578159][ T1591] ? import_iovec+0x12a/0x2c0 [ 753.582839][ T1591] do_recvmmsg+0x429/0x1500 21:59:56 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e21, @broadcast}}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0xf9c0000, 0x2, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x2000b, 0x7, [], @p_u32=&(0x7f0000000140)=0x9}}) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:56 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x102, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) r3 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 753.586047][ T1604] QAT: Invalid ioctl [ 753.587336][ T1591] ? rcu_lock_release+0x5/0x20 [ 753.587377][ T1591] ? retint_kernel+0x2b/0x2b [ 753.587396][ T1591] ? do_syscall_64+0xb5/0x1b0 [ 753.587412][ T1591] __x64_sys_recvmmsg+0x11d/0x1a0 [ 753.587431][ T1591] do_syscall_64+0xf3/0x1b0 [ 753.587444][ T1591] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 753.595991][ T1605] QAT: Invalid ioctl [ 753.596244][ T1591] RIP: 0033:0x45ca59 [ 753.596255][ T1591] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 753.596261][ T1591] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 753.656572][ T1591] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 753.664575][ T1591] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 753.672567][ T1591] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 753.680515][ T1591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 21:59:56 executing program 3 (fault-call:4 fault-nth:63): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:56 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) [ 753.688473][ T1591] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 753.780888][ T3370] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 753.803000][ T1612] FAULT_INJECTION: forcing a failure. [ 753.803000][ T1612] name failslab, interval 1, probability 0, space 0, times 0 [ 753.817958][ T1612] CPU: 1 PID: 1612 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 753.826180][ T1612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.836224][ T1612] Call Trace: [ 753.839499][ T1612] dump_stack+0x1e9/0x30e [ 753.843805][ T1612] should_fail+0x433/0x5b0 [ 753.848199][ T1612] ? sock_kmalloc+0x98/0x100 [ 753.852769][ T1612] should_failslab+0x5/0x20 [ 753.857290][ T1612] __kmalloc+0x74/0x330 [ 753.861430][ T1612] sock_kmalloc+0x98/0x100 [ 753.865838][ T1612] hash_recvmsg+0x1bd/0x810 [ 753.870336][ T1612] ? hash_sendmsg+0xb40/0xb40 [ 753.874996][ T1612] ____sys_recvmsg+0x24a/0x510 [ 753.879738][ T1612] ? import_iovec+0x12a/0x2c0 [ 753.884389][ T1612] do_recvmmsg+0x429/0x1500 [ 753.888878][ T1612] ? retint_kernel+0x2b/0x2b [ 753.893442][ T1612] ? do_syscall_64+0xb5/0x1b0 [ 753.898090][ T1612] __x64_sys_recvmmsg+0x11d/0x1a0 [ 753.903090][ T1612] do_syscall_64+0xf3/0x1b0 [ 753.907566][ T1612] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 753.913429][ T1612] RIP: 0033:0x45ca59 [ 753.917307][ T1612] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 753.936886][ T1612] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 753.945266][ T1612] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 753.953216][ T1612] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 753.961161][ T1612] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 753.978854][ T1612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 753.986799][ T1612] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 753.996728][T27672] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 754.200627][ T3370] usb 2-1: Using ep0 maxpacket: 16 [ 754.240785][T27672] usb 3-1: Using ep0 maxpacket: 16 [ 754.321235][ T3370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.332858][ T3370] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 754.346861][ T3370] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 754.356811][ T3370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.366227][ T3370] usb 2-1: config 0 descriptor?? [ 754.374967][T27672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.386448][T27672] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 754.401319][T27672] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 754.410350][T27672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.422225][T27672] usb 3-1: config 0 descriptor?? [ 755.100786][ T3370] usbhid 2-1:0.0: can't add hid device: -71 [ 755.106780][ T3370] usbhid: probe of 2-1:0.0 failed with error -71 [ 755.118326][ T3370] usb 2-1: USB disconnect, device number 54 [ 755.170679][T27672] usbhid 3-1:0.0: can't add hid device: -71 [ 755.176776][T27672] usbhid: probe of 3-1:0.0 failed with error -71 [ 755.188506][T27672] usb 3-1: USB disconnect, device number 53 21:59:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:58 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = syz_open_dev$video(0x0, 0x9, 0x250c82) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 21:59:58 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}}}, 0xa0) 21:59:58 executing program 3 (fault-call:4 fault-nth:64): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 21:59:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 21:59:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 21:59:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=@hopopts={0x2f, 0xb, [], [@hao={0xc9, 0x10, @private2}, @enc_lim, @calipso={0x7, 0x18, {0x2, 0x4, 0x80, 0x1, [0x9, 0x7973c4b7]}}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xad}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x1ff}, @jumbo={0xc2, 0x4, 0x8001}]}, 0x68) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000080)) r3 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x1000000008, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0xb2, 0x4, 0x9, 0x20, 0x80000000}, 0x14) [ 755.715976][ T1643] FAULT_INJECTION: forcing a failure. [ 755.715976][ T1643] name failslab, interval 1, probability 0, space 0, times 0 [ 755.747660][ T1643] CPU: 0 PID: 1643 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 755.755908][ T1643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:59:58 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) splice(r1, 0x0, r0, 0x0, 0x100000000a, 0x0) 21:59:58 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x6f, 0x410902) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 755.765954][ T1643] Call Trace: [ 755.769243][ T1643] dump_stack+0x1e9/0x30e [ 755.773579][ T1643] should_fail+0x433/0x5b0 [ 755.777998][ T1643] ? sock_kmalloc+0x98/0x100 [ 755.782584][ T1643] should_failslab+0x5/0x20 [ 755.787079][ T1643] __kmalloc+0x74/0x330 [ 755.791236][ T1643] sock_kmalloc+0x98/0x100 [ 755.795650][ T1643] hash_recvmsg+0x1bd/0x810 [ 755.800158][ T1643] ? hash_sendmsg+0xb40/0xb40 [ 755.804831][ T1643] ____sys_recvmsg+0x24a/0x510 [ 755.809673][ T1643] ? import_iovec+0x12a/0x2c0 21:59:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 755.814360][ T1643] do_recvmmsg+0x429/0x1500 [ 755.818883][ T1643] ? ksys_write+0x1b1/0x220 [ 755.823386][ T1643] ? ksys_write+0x1b1/0x220 [ 755.827887][ T1643] ? check_preemption_disabled+0xb0/0x240 [ 755.833600][ T1643] ? debug_smp_processor_id+0x5/0x20 [ 755.838894][ T1643] __x64_sys_recvmmsg+0x11d/0x1a0 [ 755.843918][ T1643] do_syscall_64+0xf3/0x1b0 [ 755.848418][ T1643] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 755.854308][ T1643] RIP: 0033:0x45ca59 21:59:58 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f0000002b80)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/66, 0x42}, {&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/254, 0xfe}, {&(0x7f0000001700)=""/173, 0xad}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/172, 0xac}, {&(0x7f0000002980)=""/244, 0xf4}, {&(0x7f0000002a80)=""/239, 0xef}], 0xa, 0x3600) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x22000, 0x0) write$snddsp(r4, &(0x7f0000000400)="f603872aeabaeb63179c5d641a989c67719e66dcf73119ec282c24517e4424be38483ccf58819e5bec99951c4accf548ab0c98e09bba22d554c2c1b9b42c4ff88da9473a6b3b54f2d3e0992f174e0bcc5d979fa9b66024a4de6f58672251d996d72b4054ad1eb6dc310923e874923c1f5c32", 0x72) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x4, 0x8d, [], 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000240)=""/141}, &(0x7f0000000380)=0x78) r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000100)={0x6, 0x9, 0x1, 'queue0\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000080)={0x0, 0x0, 0xb44, 0x2, 0x1}) r7 = syz_open_dev$video(0x0, 0x76, 0x0) splice(r7, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 755.858196][ T1643] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 755.877790][ T1643] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 755.886195][ T1643] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 755.894178][ T1643] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 755.902144][ T1643] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 755.910097][ T1643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 21:59:58 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) [ 755.910556][ T3370] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 755.918043][ T1643] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 756.100496][T29588] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 756.180515][ T3370] usb 3-1: Using ep0 maxpacket: 16 [ 756.300675][ T3370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.311697][ T3370] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 756.324953][ T3370] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 756.334175][ T3370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.343575][ T3370] usb 3-1: config 0 descriptor?? [ 756.353753][T29588] usb 2-1: Using ep0 maxpacket: 16 [ 756.474146][T29588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.485136][T29588] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 756.499753][T29588] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 756.509365][T29588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.519744][T29588] usb 2-1: config 0 descriptor?? [ 757.080448][ T3370] usbhid 3-1:0.0: can't add hid device: -71 [ 757.086430][ T3370] usbhid: probe of 3-1:0.0 failed with error -71 [ 757.099362][ T3370] usb 3-1: USB disconnect, device number 54 [ 757.240529][T29588] usbhid 2-1:0.0: can't add hid device: -71 [ 757.246522][T29588] usbhid: probe of 2-1:0.0 failed with error -71 [ 757.255422][T29588] usb 2-1: USB disconnect, device number 55 22:00:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:00 executing program 3 (fault-call:4 fault-nth:65): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:00 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_int(r0, 0x10d, 0xfb, 0x0, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x2c0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x3600) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x3600) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x3600) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x3600) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x91ec, &(0x7f0000000100)=[r4, r5, r6, r7]}, 0x4) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) 22:00:00 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20) 22:00:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be8083"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") [ 757.637282][ T1728] FAULT_INJECTION: forcing a failure. [ 757.637282][ T1728] name failslab, interval 1, probability 0, space 0, times 0 [ 757.650794][ T1728] CPU: 1 PID: 1728 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 757.659026][ T1728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.669068][ T1728] Call Trace: [ 757.672345][ T1728] dump_stack+0x1e9/0x30e [ 757.676760][ T1728] should_fail+0x433/0x5b0 [ 757.681175][ T1728] ? sock_kmalloc+0x98/0x100 [ 757.685775][ T1728] should_failslab+0x5/0x20 [ 757.690268][ T1728] __kmalloc+0x74/0x330 [ 757.694435][ T1728] sock_kmalloc+0x98/0x100 [ 757.698847][ T1728] hash_recvmsg+0x1bd/0x810 [ 757.703346][ T1728] ? hash_sendmsg+0xb40/0xb40 [ 757.708016][ T1728] ____sys_recvmsg+0x24a/0x510 [ 757.712787][ T1728] ? import_iovec+0x12a/0x2c0 [ 757.717463][ T1728] do_recvmmsg+0x429/0x1500 [ 757.721987][ T1728] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 757.727442][ T1728] ? check_preemption_disabled+0xa2/0x240 [ 757.733156][ T1728] ? retint_kernel+0x2b/0x2b [ 757.737748][ T1728] __x64_sys_recvmmsg+0x11d/0x1a0 [ 757.742777][ T1728] do_syscall_64+0xf3/0x1b0 [ 757.747275][ T1728] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 757.753150][ T1728] RIP: 0033:0x45ca59 [ 757.757037][ T1728] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 757.776634][ T1728] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 22:00:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:00 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x24) [ 757.785041][ T1728] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 757.793008][ T1728] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 757.800973][ T1728] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 757.808936][ T1728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 757.816902][ T1728] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 22:00:00 executing program 3 (fault-call:4 fault-nth:66): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:00 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 757.996209][T29588] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 758.041073][ T1742] FAULT_INJECTION: forcing a failure. [ 758.041073][ T1742] name failslab, interval 1, probability 0, space 0, times 0 [ 758.071954][ T1742] CPU: 1 PID: 1742 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 758.080321][ T1742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.090455][ T1742] Call Trace: [ 758.093741][ T1742] dump_stack+0x1e9/0x30e [ 758.098179][ T1742] should_fail+0x433/0x5b0 [ 758.102595][ T1742] ? sock_kmalloc+0x98/0x100 [ 758.107184][ T1742] should_failslab+0x5/0x20 [ 758.111680][ T1742] __kmalloc+0x74/0x330 [ 758.115835][ T1742] sock_kmalloc+0x98/0x100 [ 758.120245][ T1742] hash_recvmsg+0x1bd/0x810 [ 758.124750][ T1742] ? hash_sendmsg+0xb40/0xb40 [ 758.129423][ T1742] ____sys_recvmsg+0x24a/0x510 [ 758.134216][ T1742] ? import_iovec+0x12a/0x2c0 22:00:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(0x0, 0x2, 0x2000) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x3600) r5 = accept4(0xffffffffffffffff, &(0x7f0000001400)=@xdp, &(0x7f0000001480)=0x80, 0x80800) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x3600) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x3600) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000001840)='/dev/urandom\x00', 0x400400, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r10, &(0x7f00000017c0), 0x3a8, 0x3600) r11 = syz_open_dev$evdev(&(0x7f0000001880)='/dev/input/event#\x00', 0x9, 0x100) sendmmsg$unix(r1, &(0x7f0000001d80)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="10f23c4b51308f2866f1cdb1c290a36773ebebac3c68f89bee83e4b1587c8fff33c84aabbc71ee297215abf808768a36bf73e57d5b4642015c", 0x39}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x148, 0x81}, {&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000940)="905be44fec6bd9d5f87ed4c66744f7f4135342a5aaf5419dd886498b8287052e002fe3368511e17c42279016d1e2614053f153569b76e48f4e2dcba193687a7096f0ce669805d5bc1d2f060541dc4d09fbce398708cecb12457000f80adf6f1379b370029f9426a5f3bbda9a68e907b5d3b339afe382ceab889bf50977cc3d34aa457cba610985d5cbfb75e0ad9c85e0be1c72156013e28f55df8d7ef296f321a2787e85710c799b6e9a16a7229ea7415955b953816ea71885c987ca5795f52d8ccf7db7419bc45cb9410bb0f138a1c771e9462afe9b2d9e", 0xd8}, {&(0x7f0000000a40)="04c623e658932520dbc0de27a846ac51038224ee72babf48d36e135f3e4261d03ad1358b7dfd5802dfbd888d713537095fc5a5619adac200ac7e47d491825ddd5ccb937527ab379351e6de131d574fe536e908d0df1ab48aebfbbdfd1be0632cc7c46f192596d8dab953d0df7a1e0e9c79d72779a85a9ebb08e00a7ba9fa7b240444fff2b8c2889d61e9", 0x8a}, {&(0x7f0000000b00)="5e80858db907918ec7e7f81f1dbec4abe766cd88129dc9680a5aea9086ed3b4849b9ca0504d57b83526cd5229d19142ad585d6e0e6daa0d7ded78f247e2b4e376b6af58726debebb6aef9f854e1200c22a042a4e013f0611ae8a7446e0", 0x5d}, {&(0x7f0000000b80)="d989e1a97e2f3993a8376e087493ce3567b0dde030d7f699c9d37f21a1feba1e1fb2ece2331aba4e9adfa37143715b027ef056c4b71955c2b60968e6de924c0021b3bac75e2f8711e3778a8078cf453387218186882d96ee7d457026cf3cbbd5", 0x60}], 0x4, &(0x7f0000000c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x20, 0x800}, {&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000d00)="0bc6c4dc487b68acc38b1c6be89184a7c04f2acd41d9b7f641ab0023d01632e22422395909f069d2", 0x28}], 0x1, &(0x7f0000000d80)=[@cred={{0x1c}}], 0x20, 0xc055}, {&(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e40)="2f179e83ead4c55cd2e7916bce19", 0xe}, {&(0x7f0000000e80)="17679c21e7490c9b59cf229fa53eb847554989da90f65c5b23138081ede3db63148f35", 0x23}, {&(0x7f0000000ec0)="ff17f717d2a3575c3544335bfbbff4445fa44b893e5603b7c398968f471d6ef694e94f5569988afd720da888dbc81feefd07f31a634ddbf094ef3ee954845150a0218164937c44ee5edd624916f5852c7cbdb84cc61f36616c155afb6a4702fc2cff640cb4a50f0959237606f51e4b74c4ad11ae326da343bf89cc0d3dcc55cad3f12fe807f5a17ac9dca66dd5e8d9e6d02732a76febc3b304e16d54d4b7bc0e7f8ece10dd3109b57200efc2bff24f29bb4403a4cb68ce6f9ff104cf1705929e7ff710", 0xc3}, {&(0x7f0000000fc0)="d0da3f1b00df8981b6d37642e891da07085eafb85103e3ba6d79ca8697525712796bcbe9db7c2435e785984c4e128e22d056e483b6936bd094be61c6ef9fe46c36946af0ee58877f188ee2f0798085d5de5b", 0x52}, {&(0x7f0000001040)="3ae6ccb715d19296c82b91eadc73d47a61b65b9df67b162cdc4c2af7cb9660bbd97c6cc8a0bc7abb4e7267024cdb5daa", 0x30}, {&(0x7f0000001080)="f9a96d67768e16a19ec9b0019feffcb5e38a8c43f7bab85d51b9c4838df16ba92a5f3f7e8b103f9059379f32a81d929c517c64c4d1f105baccd6ca1d48cc6af3902ad96d30e4107f76769e77e835c3aadbb43f48db6b17905b1d02bd17a80cb2d0a7e3f00d0917fabc093eb852ffd58c3dda0baf23cf0e9efc210a6c9800067c60715fb04206", 0x86}], 0x6, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r5, r6, r7, r0]}}], 0xd0, 0x4800}, {&(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001640)="5ad6b5bc4366b7a90b8445c4e1b717a3b6", 0x11}, {&(0x7f0000001680)="d4db2e27a640f79ff98cbf450afa02958677b1e72ec42b7d5e624295375d2b23cde16b0135c9b4579b9c03998faf82d4deafcabae3bac9e8ac4c0c56fcf0e290a23ad8c3a6f358770f2774d24598373e331b71ef0e8a24f116127c9281f20950d7753ac9d724268e66a3b90992507dc6e28ce4bc193594ac5c91c895d54219903c5a370625dc834ea9583c210f538ce93133997ac016d2cf870e8581e1b42dc488", 0xa1}, {&(0x7f0000001740)="e0514548af8930831d53dbe580e2be0abb5a33c466b326d7b6fc2df616260b29ca7fb5ad102dbc0ee36787c8ba91fb03e178ce2671d4d8ff6f42f0cf9e889ac45f8880cb552d3b70f8701cac39d9ae6e5235abf7dc68886ddc13066b9a349d849ad103c1b9821341a75b628215228f019cbde192ac8af768405541343f2bd977df387b8668b84de996fd241f67f3b6135fb77d8965997c838208fa77da94d9e06a0ecf6436e059f430c8ce76331308921e40eb13b8", 0xb5}], 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000003dda000300000004000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x4000801}, {&(0x7f0000001940)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d40)=[{&(0x7f00000019c0)="a9694be4b29214e8fa673bad4d5ae9b15c1cf29db4a0a9c35234670ae36130f8f03bf8fffb74bde2172c112f04ae884d9040f64d03ba781ababc431fa4006e060095e3faf696f14e56d7da9ce16f7ab551be2e8301690d32be0602f42c29bca57b4699159ce1411e1d361ce20c48d6b361ad685011ab52b6d484e8d92468b9e4b4087f330a2a0c2a8d76e53d3541d469ee7c2a44e09d7426eaa945903361d3c46410eb1b93ccc7fdfad71cb15f84d3ebeebf7e2f7fa76df002465380b0282ef0bc63ea63086b2d8a562b7a282bb3ca11f78b7f2f655d4ef9ef6a190d23145085b8294843bf598e7d11e3", 0xea}, {&(0x7f0000001ac0)="56a584ba7ee6bf87b746f30403644e4de9bb6a879343bf5010ca3452f22b56cc512fd298481bfe174b6ece73217314a02608e4b3f55171382fa59d134bcc8334f77c1a1981d598e5d6bcd71d8a9d59ecbc6cca7c72b666b4ed709b1e2eb195ca3bd8c92f5d3292ce28e742d9f8a011910872405e936b7dde6f89e10ed2ee23b74f3155d62e544fd6ffde78bd9258384c213624c1c94c9d04b9ee93ea0291e96c1bc48fe99c24a5058dff6bd0116f39d79297365b7a727bc1dc9f028d73e0b3", 0xbf}, {&(0x7f0000001b80)="62690e7bf410bde5b224a63ab9c607d6c5bc799e00d6438c343c5ff3d371bb6b9543a10b45bc53491f34619942f0682520b49b33dcda392fc74266af229c9ba549af7b74f1ac99c2398c7c12f63b23bd1338bde74881c09c3f1f418608d14ef7dccb41218bf6bacb0e0c44edc6118a5f58e35709b0c25fae75c644812a013ee4a44757b78b2165c65f0ec33d24433998cab7abf6f1c10c11753f3cf78d806eec49393cf287f2173b902c6fd5ab1d9e2581327a41e425e210e2aa15a6ee6b7ab9ce5c50301f1d8732db1676dcd185e7472291ce2e4fc393e1f6a4cec25ce7d46e", 0xe0}, {&(0x7f0000001c80)="1650577dd3a8502e2236eadb22c524cd961a3cf6db5542abad50a85147e8f58afd74e4cf0e5e098f670ddd78665ca9022418d552dc02e9408846029cba387224cab0ac28f960b82538173b2ba01f9dc3d5156fc87ed696199fcf84c5d1149cdee0147a4f5f197088f7e384705f0a599a9708be7397bd10a82d727b0f0facd3b6ed66f0efb09f8672c23631ff3fb33fb6a52af724442239876d1879dc9c56e462876f0d11589ddfe052a53e52c39ccd8f9b77e4afe2d743", 0xb7}], 0x4, 0x0, 0x0, 0x8000}], 0x6, 0x44000) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r12, &(0x7f00000017c0), 0x3a8, 0x3600) write$FUSE_GETXATTR(r12, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x7}}, 0x18) [ 758.138893][ T1742] do_recvmmsg+0x429/0x1500 [ 758.143414][ T1742] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 758.148864][ T1742] ? check_preemption_disabled+0xa2/0x240 [ 758.154577][ T1742] ? retint_kernel+0x2b/0x2b [ 758.159172][ T1742] __x64_sys_recvmmsg+0x11d/0x1a0 [ 758.164228][ T1742] do_syscall_64+0xf3/0x1b0 [ 758.168731][ T1742] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 758.174612][ T1742] RIP: 0033:0x45ca59 [ 758.174623][ T1742] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 758.174630][ T1742] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 758.174641][ T1742] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 758.174648][ T1742] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 758.174655][ T1742] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 758.174662][ T1742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:00:01 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$instantiate(0xc, r1, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '', 0x20, 0x6}, 0x27, 0xfffffffffffffff8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000180)={0x0, 0x8, 0x1004, 0x1}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0x80000007, 0x7f, 0x8147, 0x39, 0x3}, {0x4000000c, 0xfffffff9, 0x9, 0x8000, 0x80000001}]}) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="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", 0x1000, r1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000020008, 0x4) 22:00:01 executing program 3 (fault-call:4 fault-nth:67): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 758.174669][ T1742] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 758.310518][ T2693] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 758.337864][ T1758] FAULT_INJECTION: forcing a failure. [ 758.337864][ T1758] name failslab, interval 1, probability 0, space 0, times 0 [ 758.351495][ T1758] CPU: 1 PID: 1758 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 758.359718][ T1758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.369888][ T1758] Call Trace: [ 758.373154][ T1758] dump_stack+0x1e9/0x30e [ 758.377458][ T1758] should_fail+0x433/0x5b0 [ 758.381849][ T1758] ? sock_kmalloc+0x98/0x100 [ 758.386409][ T1758] should_failslab+0x5/0x20 [ 758.390882][ T1758] __kmalloc+0x74/0x330 [ 758.395012][ T1758] sock_kmalloc+0x98/0x100 [ 758.399422][ T1758] hash_recvmsg+0x1bd/0x810 [ 758.403927][ T1758] ? check_preemption_disabled+0xa2/0x240 [ 758.409626][ T1758] ? hash_sendmsg+0xb40/0xb40 [ 758.414287][ T1758] ____sys_recvmsg+0x24a/0x510 [ 758.419039][ T1758] ? import_iovec+0x12a/0x2c0 [ 758.423707][ T1758] do_recvmmsg+0x429/0x1500 [ 758.428199][ T1758] ? ksys_write+0x1b1/0x220 [ 758.432675][ T1758] ? ksys_write+0x1b1/0x220 [ 758.437154][ T1758] ? check_preemption_disabled+0xb0/0x240 [ 758.442845][ T1758] ? debug_smp_processor_id+0x5/0x20 [ 758.448125][ T1758] __x64_sys_recvmmsg+0x11d/0x1a0 [ 758.453124][ T1758] do_syscall_64+0xf3/0x1b0 [ 758.457601][ T1758] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 758.463517][ T1758] RIP: 0033:0x45ca59 [ 758.467383][ T1758] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 758.486996][ T1758] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 758.495380][ T1758] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 758.503330][ T1758] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 758.511275][ T1758] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 758.519217][ T1758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 758.527161][ T1758] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 758.540643][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 758.680386][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.691460][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 758.704458][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 758.713641][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.727793][T29588] usb 3-1: config 0 descriptor?? [ 758.746181][ T2693] usb 2-1: Using ep0 maxpacket: 16 [ 758.881613][ T2693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.892632][ T2693] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 758.905473][ T2693] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 758.914584][ T2693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.924621][ T2693] usb 2-1: config 0 descriptor?? [ 759.460323][T29588] usbhid 3-1:0.0: can't add hid device: -71 [ 759.466419][T29588] usbhid: probe of 3-1:0.0 failed with error -71 [ 759.477668][T29588] usb 3-1: USB disconnect, device number 55 [ 759.670312][ T2693] usbhid 2-1:0.0: can't add hid device: -71 [ 759.676374][ T2693] usbhid: probe of 2-1:0.0 failed with error -71 [ 759.687689][ T2693] usb 2-1: USB disconnect, device number 56 22:00:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:02 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10000, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 22:00:02 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) gettid() 22:00:02 executing program 3 (fault-call:4 fault-nth:68): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 760.001195][ T1788] FAULT_INJECTION: forcing a failure. [ 760.001195][ T1788] name failslab, interval 1, probability 0, space 0, times 0 [ 760.016668][ T1788] CPU: 0 PID: 1788 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 760.024909][ T1788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.034949][ T1788] Call Trace: [ 760.038219][ T1788] dump_stack+0x1e9/0x30e [ 760.042547][ T1788] should_fail+0x433/0x5b0 [ 760.046965][ T1788] ? sock_kmalloc+0x98/0x100 [ 760.051545][ T1788] should_failslab+0x5/0x20 [ 760.056081][ T1788] __kmalloc+0x74/0x330 [ 760.060226][ T1788] sock_kmalloc+0x98/0x100 [ 760.064627][ T1788] hash_recvmsg+0x1bd/0x810 [ 760.069105][ T1788] ? hash_sendmsg+0xb40/0xb40 [ 760.073853][ T1788] ____sys_recvmsg+0x24a/0x510 [ 760.078608][ T1788] ? import_iovec+0x12a/0x2c0 [ 760.083277][ T1788] do_recvmmsg+0x429/0x1500 [ 760.087781][ T1788] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 760.093228][ T1788] ? check_preemption_disabled+0xa2/0x240 [ 760.098931][ T1788] ? retint_kernel+0x2b/0x2b [ 760.103498][ T1788] __x64_sys_recvmmsg+0x11d/0x1a0 [ 760.108513][ T1788] do_syscall_64+0xf3/0x1b0 [ 760.113009][ T1788] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 760.118892][ T1788] RIP: 0033:0x45ca59 [ 760.122791][ T1788] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 760.142390][ T1788] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 760.150811][ T1788] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 760.158772][ T1788] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 760.166728][ T1788] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 760.174672][ T1788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 760.182623][ T1788] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 760.370211][ T2693] usb 3-1: new high-speed USB device number 56 using dummy_hcd 22:00:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be8083"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:03 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x0, 0xcb) r1 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3f) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 22:00:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:03 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) 22:00:03 executing program 3 (fault-call:4 fault-nth:69): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 760.625968][ T2693] usb 3-1: Using ep0 maxpacket: 16 22:00:03 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x40000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x3b3}}, 0x0, 0x0, 0x37, 0x0, "78c1e42563b251ddfd65e0358a20a1fb994581f4135ad796b2d7012ee46d2bf95644ab54eb604ee2873b64edfe99e34ca49e963287ff87cf25efb6f41f8dbb781e2cfb6863a99b644cb87ee43330a077"}, 0xd8) r3 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 760.653227][ T1805] FAULT_INJECTION: forcing a failure. [ 760.653227][ T1805] name failslab, interval 1, probability 0, space 0, times 0 [ 760.670514][ T1805] CPU: 1 PID: 1805 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 760.678750][ T1805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.688799][ T1805] Call Trace: [ 760.692075][ T1805] dump_stack+0x1e9/0x30e [ 760.696393][ T1805] should_fail+0x433/0x5b0 22:00:03 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)) [ 760.700812][ T1805] ? sock_kmalloc+0x98/0x100 [ 760.705395][ T1805] should_failslab+0x5/0x20 [ 760.709890][ T1805] __kmalloc+0x74/0x330 [ 760.714040][ T1805] sock_kmalloc+0x98/0x100 [ 760.718447][ T1805] hash_recvmsg+0x1bd/0x810 [ 760.722949][ T1805] ? hash_sendmsg+0xb40/0xb40 [ 760.727623][ T1805] ____sys_recvmsg+0x24a/0x510 [ 760.732392][ T1805] ? import_iovec+0x12a/0x2c0 [ 760.737073][ T1805] do_recvmmsg+0x429/0x1500 [ 760.741572][ T1805] ? rcu_lock_release+0x5/0x20 [ 760.746353][ T1805] ? trace_hardirqs_on_thunk+0x1a/0x1c 22:00:03 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x80) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000000c0)={0x3d}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000080)=0x4) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000100)=""/178, 0xb2}, &(0x7f00000001c0), 0x60}, 0x20) r4 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 760.751807][ T1805] ? check_preemption_disabled+0xa2/0x240 [ 760.757517][ T1805] ? retint_kernel+0x2b/0x2b [ 760.762102][ T1805] __x64_sys_recvmmsg+0x11d/0x1a0 [ 760.767126][ T1805] do_syscall_64+0xf3/0x1b0 [ 760.771629][ T1805] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 760.777524][ T1805] RIP: 0033:0x45ca59 [ 760.781414][ T1805] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 760.801044][ T1805] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 760.809425][ T1805] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 760.817366][ T1805] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 760.825313][ T1805] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 760.833258][ T1805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 760.841205][ T1805] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 760.912008][ T2693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.923214][ T2693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.937535][ T2693] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 760.947164][ T2693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.959472][ T2693] usb 3-1: config 0 descriptor?? [ 761.000193][ T2506] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 761.240143][ T2506] usb 2-1: Using ep0 maxpacket: 16 [ 761.360420][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.371456][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 761.384751][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 761.394011][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.406160][ T2506] usb 2-1: config 0 descriptor?? [ 761.710184][ T2693] usbhid 3-1:0.0: can't add hid device: -71 [ 761.716362][ T2693] usbhid: probe of 3-1:0.0 failed with error -71 [ 761.727826][ T2693] usb 3-1: USB disconnect, device number 56 22:00:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be808376"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:05 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10000000001f, 0x6) 22:00:05 executing program 3 (fault-call:4 fault-nth:70): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:05 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000180)) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="df7c8f5a92a7d6b6b82fdcdd996d21a0b61bc52a664c49793f419012b5dda9527dc318e882b78223fa6f9ca5f7c4479af9732fd700daeac4050a37c6cd037e2514ecb6d941d661c661d24db6ddee63a3e311cb615af06ee5d043ebf13f446653a79745856985b55e978ca2f3fcf89775862776cd1544f59f0b602706fcd063fbab1092fac9abca1ed95d8939b033baa2feaae5c94650f21a0d82a19cb960a12088755cd0fcf8d6d9b2183e1aa03febeb8ae33824e9a0c44e229c5f2438836c59e687cebd59a2b758"}) [ 762.130310][ T2506] usbhid 2-1:0.0: can't add hid device: -71 [ 762.136389][ T2506] usbhid: probe of 2-1:0.0 failed with error -71 [ 762.149877][ T2506] usb 2-1: USB disconnect, device number 57 [ 762.281556][ T1851] FAULT_INJECTION: forcing a failure. [ 762.281556][ T1851] name failslab, interval 1, probability 0, space 0, times 0 [ 762.294576][ T1851] CPU: 0 PID: 1851 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 762.302907][ T1851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.312944][ T1851] Call Trace: [ 762.316231][ T1851] dump_stack+0x1e9/0x30e [ 762.320697][ T1851] should_fail+0x433/0x5b0 [ 762.325101][ T1851] ? sock_kmalloc+0x98/0x100 [ 762.337349][ T1851] should_failslab+0x5/0x20 [ 762.341935][ T1851] __kmalloc+0x74/0x330 [ 762.346080][ T1851] sock_kmalloc+0x98/0x100 [ 762.350482][ T1851] hash_recvmsg+0x1bd/0x810 [ 762.354985][ T1851] ? hash_sendmsg+0xb40/0xb40 [ 762.359657][ T1851] ____sys_recvmsg+0x24a/0x510 [ 762.364414][ T1851] ? import_iovec+0x12a/0x2c0 [ 762.369074][ T1851] do_recvmmsg+0x429/0x1500 [ 762.373592][ T1851] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 762.379141][ T1851] ? check_preemption_disabled+0xa2/0x240 [ 762.384840][ T1851] ? retint_kernel+0x2b/0x2b [ 762.389406][ T1851] __x64_sys_recvmmsg+0x11d/0x1a0 [ 762.394420][ T1851] do_syscall_64+0xf3/0x1b0 [ 762.398926][ T1851] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 762.404814][ T1851] RIP: 0033:0x45ca59 [ 762.408687][ T1851] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 762.428267][ T1851] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 762.436674][ T1851] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 762.444626][ T1851] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 762.452580][ T1851] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 762.460535][ T1851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 762.468487][ T1851] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 762.520151][ T2494] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 762.759988][ T2494] usb 3-1: Using ep0 maxpacket: 16 [ 762.880151][ T2494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.891073][ T2494] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 762.904202][ T2494] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 762.913558][ T2494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.925996][ T2494] usb 3-1: config 0 descriptor?? 22:00:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000009623137502091fefad4ac2c206e53f070c0000082a9000170900be8083"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:06 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x10020) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000200)=[{{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x10) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1412, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$RTC_WIE_ON(r2, 0x700f) 22:00:06 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10000000001f, 0x6) 22:00:06 executing program 3 (fault-call:4 fault-nth:71): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 763.670211][ T2494] usbhid 3-1:0.0: can't add hid device: -71 [ 763.676493][ T2494] usbhid: probe of 3-1:0.0 failed with error -71 [ 763.678614][ T1872] FAULT_INJECTION: forcing a failure. [ 763.678614][ T1872] name failslab, interval 1, probability 0, space 0, times 0 [ 763.705544][ T1872] CPU: 0 PID: 1872 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 763.713793][ T1872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.723851][ T1872] Call Trace: [ 763.725794][ T2494] usb 3-1: USB disconnect, device number 57 [ 763.727145][ T1872] dump_stack+0x1e9/0x30e [ 763.727162][ T1872] should_fail+0x433/0x5b0 [ 763.727181][ T1872] ? sock_kmalloc+0x98/0x100 [ 763.727192][ T1872] should_failslab+0x5/0x20 [ 763.727205][ T1872] __kmalloc+0x74/0x330 [ 763.754956][ T1872] sock_kmalloc+0x98/0x100 [ 763.759371][ T1872] hash_recvmsg+0x1bd/0x810 [ 763.763874][ T1872] ? hash_sendmsg+0xb40/0xb40 22:00:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000100)) pipe(&(0x7f0000000040)) syz_open_dev$video(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) splice(r1, 0x0, r2, 0x0, 0x1000000008, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') lseek(r3, 0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x3600) preadv(r4, &(0x7f0000000580), 0x0, 0x3602) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000540)={0x160, 0x8, &(0x7f0000000140)="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"}) write$P9_RMKDIR(r3, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x1, 0x2, 0x1}}, 0x14) 22:00:06 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4$phonet_pipe(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10000000001f, 0x6) [ 763.768542][ T1872] ____sys_recvmsg+0x24a/0x510 [ 763.773309][ T1872] ? retint_kernel+0x2b/0x2b [ 763.777894][ T1872] ? import_iovec+0x12a/0x2c0 [ 763.782572][ T1872] do_recvmmsg+0x429/0x1500 [ 763.787091][ T1872] ? rcu_lock_release+0x5/0x20 [ 763.791912][ T1872] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 763.797466][ T1872] __x64_sys_recvmmsg+0x11d/0x1a0 [ 763.802502][ T1872] do_syscall_64+0xf3/0x1b0 [ 763.807002][ T1872] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 763.812887][ T1872] RIP: 0033:0x45ca59 [ 763.816772][ T1872] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 763.836362][ T1872] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 763.844785][ T1872] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 763.852751][ T1872] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 763.860725][ T1872] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 22:00:06 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x1, 0x3}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x4001000000008, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') write$FUSE_POLL(r0, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x3, {0xe9}}, 0x18) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000080)={0x16, @multicast1, 0x4e21, 0x1, 'sed\x00', 0x31, 0xfffffffc, 0x59}, 0x2c) [ 763.868690][ T1872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 763.876652][ T1872] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 764.039974][ T8150] usb 2-1: new high-speed USB device number 58 using dummy_hcd 22:00:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:07 executing program 3 (fault-call:4 fault-nth:72): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:07 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) r3 = socket$caif_stream(0x25, 0x1, 0x3) splice(r3, 0x0, r1, 0x0, 0x10000000001f, 0x6) 22:00:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000140)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000080)={{0x4, @addr=0x6}, 0x8, 0xd69, 0x4}) r3 = syz_open_dev$video(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) [ 764.278291][ T1897] FAULT_INJECTION: forcing a failure. [ 764.278291][ T1897] name failslab, interval 1, probability 0, space 0, times 0 [ 764.297679][ T1897] CPU: 0 PID: 1897 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 764.305923][ T1897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.315968][ T1897] Call Trace: [ 764.319253][ T1897] dump_stack+0x1e9/0x30e [ 764.323579][ T1897] should_fail+0x433/0x5b0 [ 764.327981][ T1897] ? sock_kmalloc+0x98/0x100 [ 764.332563][ T1897] should_failslab+0x5/0x20 [ 764.337141][ T1897] __kmalloc+0x74/0x330 [ 764.341300][ T1897] sock_kmalloc+0x98/0x100 [ 764.345702][ T1897] hash_recvmsg+0x1bd/0x810 [ 764.350197][ T1897] ? hash_sendmsg+0xb40/0xb40 [ 764.354871][ T1897] ____sys_recvmsg+0x24a/0x510 [ 764.359628][ T1897] ? import_iovec+0x12a/0x2c0 [ 764.364284][ T1897] do_recvmmsg+0x429/0x1500 [ 764.368777][ T1897] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 764.374313][ T1897] ? check_preemption_disabled+0xb0/0x240 [ 764.380023][ T1897] ? debug_smp_processor_id+0x5/0x20 [ 764.385294][ T1897] __x64_sys_recvmmsg+0x11d/0x1a0 [ 764.390310][ T1897] do_syscall_64+0xf3/0x1b0 [ 764.394801][ T1897] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 764.400676][ T1897] RIP: 0033:0x45ca59 [ 764.404556][ T1897] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 764.424255][ T1897] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 764.432648][ T1897] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 764.440612][ T1897] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 764.448564][ T1897] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 764.456508][ T1897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 764.464452][ T1897] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 764.473007][ T8150] usb 2-1: Using ep0 maxpacket: 16 [ 764.500138][ T2506] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 764.620039][ T8150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.631064][ T8150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 764.645209][ T8150] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 764.654373][ T8150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.664005][ T8150] usb 2-1: config 0 descriptor?? [ 764.739943][ T2506] usb 3-1: Using ep0 maxpacket: 16 [ 764.859946][ T2506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.870922][ T2506] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 764.885375][ T2506] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 764.895032][ T2506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.904468][ T2506] usb 3-1: config 0 descriptor?? [ 765.389892][ T8150] usbhid 2-1:0.0: can't add hid device: -71 [ 765.396089][ T8150] usbhid: probe of 2-1:0.0 failed with error -71 [ 765.408135][ T8150] usb 2-1: USB disconnect, device number 58 [ 765.619890][ T2506] usbhid 3-1:0.0: can't add hid device: -71 [ 765.625945][ T2506] usbhid: probe of 3-1:0.0 failed with error -71 [ 765.639112][ T2506] usb 3-1: USB disconnect, device number 58 22:00:09 executing program 5 (fault-call:10 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 22:00:09 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) accept4(r2, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x80, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') 22:00:09 executing program 3 (fault-call:4 fault-nth:73): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:09 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r2 = socket$caif_stream(0x25, 0x1, 0x3) splice(r2, 0x0, r1, 0x0, 0x10000000001f, 0x6) 22:00:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 766.693187][ T1942] FAULT_INJECTION: forcing a failure. [ 766.693187][ T1942] name failslab, interval 1, probability 0, space 0, times 0 [ 766.731979][ T1942] CPU: 1 PID: 1942 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 766.740225][ T1942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.750270][ T1942] Call Trace: [ 766.753556][ T1942] dump_stack+0x1e9/0x30e [ 766.757885][ T1942] should_fail+0x433/0x5b0 [ 766.758106][ T1943] FAULT_INJECTION: forcing a failure. [ 766.758106][ T1943] name failslab, interval 1, probability 0, space 0, times 0 [ 766.762301][ T1942] ? tty_write+0x308/0x940 [ 766.762331][ T1942] should_failslab+0x5/0x20 [ 766.762342][ T1942] __kmalloc+0x74/0x330 [ 766.762355][ T1942] ? mutex_trylock+0x1df/0x2a0 [ 766.762365][ T1942] ? tty_write+0x22c/0x940 [ 766.762379][ T1942] tty_write+0x308/0x940 [ 766.762394][ T1942] ? n_tty_read+0x1bc0/0x1bc0 [ 766.762407][ T1942] ? redirected_tty_write+0xb0/0xb0 [ 766.762421][ T1942] __vfs_write+0x9c/0x6e0 [ 766.762441][ T1942] ? __fget_files+0x4b9/0x4e0 [ 766.762456][ T1942] ? fsnotify_perm+0x64/0x390 [ 766.824776][ T1942] vfs_write+0x274/0x580 [ 766.829015][ T1942] ksys_write+0x11b/0x220 [ 766.833339][ T1942] do_syscall_64+0xf3/0x1b0 [ 766.837835][ T1942] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 766.843716][ T1942] RIP: 0033:0x45ca59 [ 766.847602][ T1942] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 766.867301][ T1942] RSP: 002b:00007f1147e14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 766.875697][ T1942] RAX: ffffffffffffffda RBX: 000000000050c5c0 RCX: 000000000045ca59 [ 766.883655][ T1942] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 766.891629][ T1942] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 766.899585][ T1942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 766.907542][ T1942] R13: 0000000000000cc9 R14: 00000000004cf26b R15: 00007f1147e156d4 [ 766.915525][ T1943] CPU: 0 PID: 1943 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 766.923752][ T1943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.933801][ T1943] Call Trace: [ 766.937086][ T1943] dump_stack+0x1e9/0x30e 22:00:09 executing program 5 (fault-call:10 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 766.941421][ T1943] should_fail+0x433/0x5b0 [ 766.945837][ T1943] ? sock_kmalloc+0x98/0x100 [ 766.950417][ T1943] should_failslab+0x5/0x20 [ 766.954913][ T1943] __kmalloc+0x74/0x330 [ 766.959074][ T1943] sock_kmalloc+0x98/0x100 [ 766.963488][ T1943] hash_recvmsg+0x1bd/0x810 [ 766.967993][ T1943] ? hash_sendmsg+0xb40/0xb40 [ 766.972669][ T1943] ____sys_recvmsg+0x24a/0x510 [ 766.977443][ T1943] ? import_iovec+0x12a/0x2c0 [ 766.982149][ T1943] do_recvmmsg+0x429/0x1500 [ 766.986658][ T1943] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 766.992107][ T1943] ? ksys_write+0x1b1/0x220 [ 766.996582][ T1943] ? ksys_write+0x1b1/0x220 [ 767.001061][ T1943] ? check_preemption_disabled+0xb0/0x240 [ 767.006747][ T1943] ? debug_smp_processor_id+0x5/0x20 [ 767.012042][ T1943] __x64_sys_recvmmsg+0x11d/0x1a0 [ 767.017040][ T1943] do_syscall_64+0xf3/0x1b0 [ 767.021008][ T1950] FAULT_INJECTION: forcing a failure. [ 767.021008][ T1950] name failslab, interval 1, probability 0, space 0, times 0 [ 767.021541][ T1943] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 767.021550][ T1943] RIP: 0033:0x45ca59 [ 767.021560][ T1943] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.021566][ T1943] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 767.021575][ T1943] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 767.021581][ T1943] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 22:00:10 executing program 3 (fault-call:4 fault-nth:74): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:10 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r2, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={r2, @in={{0x2, 0x4e21, @empty}}, 0xffffffff, 0xfffffddb, 0x5, 0x7, 0x6}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r4, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0x401, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}}, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r3, 0x3ff}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x3600) getsockopt$inet6_dccp_int(r5, 0x21, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x4) 22:00:10 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000180)={0x10, 0xb73dd93bbc66e1a1, &(0x7f0000000080)="2a5bd973649a96c20c09281abc875e434af54245b75772fc40e69f0ad35688da46903a03ea9361d097c0c04689968ebe19fbd2b00973d4dd2adfcc5bc88c635ece3a6110c0f41bb57b5779bcca3175bb2e044fdd44b29a90b26e19086e36fcf9267816c6c5b4efd65940d690fa9e9b5e8291921aefd30e97d927ea79510a2b7b68f63f6d306fddeb2f301e9c6e1fa9712d624f3445f1e7b076cc6041615db75b17534b7560fb4b6d41eef12e2cffda614dda9efbbc36158eebe06e3249c727f1e5f48afca46eb058252bc873c2ffdfcc4ebce6cc73648c95", {0x94, 0xfffff800, 0x494e4f4b, 0x0, 0x1, 0x5, 0x7, 0x4}}) [ 767.021587][ T1943] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 767.021593][ T1943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 767.021599][ T1943] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 767.027700][ T1932] caif:caif_disconnect_client(): nothing to disconnect [ 767.034621][ T1950] CPU: 1 PID: 1950 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 767.034628][ T1950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.034631][ T1950] Call Trace: [ 767.034643][ T1950] dump_stack+0x1e9/0x30e [ 767.034654][ T1950] should_fail+0x433/0x5b0 [ 767.034669][ T1950] ? __tty_buffer_request_room+0x1f3/0x540 [ 767.131978][ T1958] FAULT_INJECTION: forcing a failure. [ 767.131978][ T1958] name failslab, interval 1, probability 0, space 0, times 0 [ 767.137302][ T1950] should_failslab+0x5/0x20 [ 767.137311][ T1950] __kmalloc+0x74/0x330 [ 767.137326][ T1950] __tty_buffer_request_room+0x1f3/0x540 [ 767.137339][ T1950] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 767.137354][ T1950] pty_write+0xda/0x180 [ 767.192239][ T1950] n_tty_write+0xcbf/0x1170 [ 767.196736][ T1950] ? wait_woken+0x240/0x240 [ 767.201235][ T1950] tty_write+0x593/0x940 [ 767.205463][ T1950] ? n_tty_read+0x1bc0/0x1bc0 [ 767.210119][ T1950] ? redirected_tty_write+0xb0/0xb0 [ 767.215295][ T1950] __vfs_write+0x9c/0x6e0 [ 767.219605][ T1950] ? __fget_files+0x4b9/0x4e0 [ 767.224262][ T1950] ? fsnotify_perm+0x64/0x390 [ 767.228923][ T1950] vfs_write+0x274/0x580 [ 767.233144][ T1950] ksys_write+0x11b/0x220 [ 767.237456][ T1950] do_syscall_64+0xf3/0x1b0 [ 767.241939][ T1950] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 767.247809][ T1950] RIP: 0033:0x45ca59 [ 767.251685][ T1950] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.271263][ T1950] RSP: 002b:00007f1147e14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 767.279671][ T1950] RAX: ffffffffffffffda RBX: 000000000050c5c0 RCX: 000000000045ca59 [ 767.287621][ T1950] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 767.295591][ T1950] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 767.303540][ T1950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 767.311486][ T1950] R13: 0000000000000cc9 R14: 00000000004cf26b R15: 00007f1147e156d4 [ 767.319454][ T1958] CPU: 0 PID: 1958 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 767.319456][ C1] [ 767.319463][ C1] ====================================================== [ 767.319466][ C1] WARNING: possible circular locking dependency detected [ 767.319468][ C1] 5.7.0-syzkaller #0 Not tainted [ 767.319471][ C1] ------------------------------------------------------ [ 767.319473][ C1] syz-executor.5/1950 is trying to acquire lock: [ 767.319475][ C1] ffffffff892e6e60 (console_owner){-.-.}-{0:0}, at: console_trylock_spinning+0x121/0x380 [ 767.319483][ C1] [ 767.319485][ C1] but task is already holding lock: [ 767.319487][ C1] ffff88809896e158 (&port->lock#2){-.-.}-{2:2}, at: pty_write+0xb6/0x180 [ 767.319496][ C1] [ 767.319499][ C1] which lock already depends on the new lock. [ 767.319500][ C1] [ 767.319501][ C1] [ 767.319504][ C1] the existing dependency chain (in reverse order) is: [ 767.319505][ C1] [ 767.319507][ C1] -> #2 (&port->lock#2){-.-.}-{2:2}: [ 767.319515][ C1] lock_acquire+0x169/0x480 [ 767.319518][ C1] _raw_spin_lock_irqsave+0x9e/0xc0 [ 767.319520][ C1] tty_port_tty_get+0x21/0xe0 [ 767.319522][ C1] tty_port_default_wakeup+0x11/0x40 [ 767.319525][ C1] serial8250_tx_chars+0x5ea/0x800 [ 767.319527][ C1] serial8250_handle_irq+0x2fd/0x3e0 [ 767.319530][ C1] serial8250_default_handle_irq+0xac/0x190 [ 767.319532][ C1] serial8250_interrupt+0x93/0x180 [ 767.319535][ C1] __handle_irq_event_percpu+0x1b7/0x610 [ 767.319537][ C1] handle_irq_event+0xbd/0x280 [ 767.319540][ C1] handle_edge_irq+0x245/0xbf0 [ 767.319542][ C1] do_IRQ+0xf6/0x1d0 [ 767.319544][ C1] ret_from_intr+0x0/0x2b [ 767.319546][ C1] native_safe_halt+0xe/0x10 [ 767.319549][ C1] acpi_safe_halt+0x87/0xe0 [ 767.319551][ C1] acpi_idle_enter+0x3f4/0xac0 [ 767.319553][ C1] cpuidle_enter_state+0x2d7/0x7b0 [ 767.319556][ C1] cpuidle_enter+0x59/0x90 [ 767.319558][ C1] do_idle+0x49c/0x650 [ 767.319560][ C1] cpu_startup_entry+0x15/0x20 [ 767.319562][ C1] start_secondary+0x213/0x240 [ 767.319565][ C1] secondary_startup_64+0xa4/0xb0 [ 767.319566][ C1] [ 767.319567][ C1] -> #1 (&port->lock){-.-.}-{2:2}: [ 767.319575][ C1] lock_acquire+0x169/0x480 [ 767.319577][ C1] _raw_spin_lock_irqsave+0x9e/0xc0 [ 767.319580][ C1] serial8250_console_write+0x13e/0xd50 [ 767.319582][ C1] console_unlock+0x90c/0xec0 [ 767.319584][ C1] vprintk_emit+0x1f8/0x3c0 [ 767.319586][ C1] printk+0x62/0x83 [ 767.319589][ C1] register_console+0x7ca/0xad0 [ 767.319591][ C1] univ8250_console_init+0x41/0x43 [ 767.319593][ C1] console_init+0x52/0x97 [ 767.319596][ C1] start_kernel+0x426/0x777 [ 767.319598][ C1] secondary_startup_64+0xa4/0xb0 [ 767.319599][ C1] [ 767.319601][ C1] -> #0 (console_owner){-.-.}-{0:0}: [ 767.319609][ C1] validate_chain+0x1b09/0x8920 [ 767.319611][ C1] __lock_acquire+0x116c/0x2c30 [ 767.319614][ C1] lock_acquire+0x169/0x480 [ 767.319616][ C1] console_trylock_spinning+0x141/0x380 [ 767.319619][ C1] vprintk_emit+0x1db/0x3c0 [ 767.319621][ C1] printk+0x62/0x83 [ 767.319623][ C1] should_fail+0x414/0x5b0 [ 767.319625][ C1] should_failslab+0x5/0x20 [ 767.319627][ C1] __kmalloc+0x74/0x330 [ 767.319630][ C1] __tty_buffer_request_room+0x1f3/0x540 [ 767.319633][ C1] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 767.319635][ C1] pty_write+0xda/0x180 [ 767.319637][ C1] n_tty_write+0xcbf/0x1170 [ 767.319639][ C1] tty_write+0x593/0x940 [ 767.319641][ C1] __vfs_write+0x9c/0x6e0 [ 767.319643][ C1] vfs_write+0x274/0x580 [ 767.319646][ C1] ksys_write+0x11b/0x220 [ 767.319648][ C1] do_syscall_64+0xf3/0x1b0 [ 767.319651][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 767.319652][ C1] [ 767.319655][ C1] other info that might help us debug this: [ 767.319656][ C1] [ 767.319658][ C1] Chain exists of: [ 767.319659][ C1] console_owner --> &port->lock --> &port->lock#2 [ 767.319669][ C1] [ 767.319672][ C1] Possible unsafe locking scenario: [ 767.319673][ C1] [ 767.319675][ C1] CPU0 CPU1 [ 767.319678][ C1] ---- ---- 22:00:10 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0xd2400, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000001640)='/dev/sg#\x00', 0x180004, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001600)={0x8, &(0x7f00000015c0)=[{0x9777, 0x80, 0x3, 0x9}, {0xded, 0x31, 0x0, 0x4}, {0x9, 0x0, 0x7, 0x4}, {0x7f, 0x0, 0x81}, {0x1, 0x8, 0x0, 0x3}, {0x20, 0x2, 0xb7, 0x1}, {0x6, 0x1, 0x5, 0x40}, {0xfff, 0x1, 0x9, 0xa18}]}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f0000002680)=[{&(0x7f00000026c0)=""/13, 0xd}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x2, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x6) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000001580)=0x6) r4 = syz_open_dev$video(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r6, &(0x7f00000017c0), 0x0, 0x800003600) connect$pppoe(r6, &(0x7f0000001540)={0x18, 0x0, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1\x00'}}, 0x1e) preadv(r5, &(0x7f0000001500)=[{&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/103, 0x67}], 0x4, 0x3ff) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000080)={0x81, "ed3e846222499282f8034bebde532d0005c081de52745e577023dd167c754ac373454e323ee238a6380ecfa04141b028373643bb7bc0d52653584100000000000000acd1afd42415bf46fea930b7993ecc012427cbfe5bc1a54714046d60e3f24fb3ffcf5d64348aef19b2a6070e91e8a4485154f3aca53eb5031d965ef613ff56aae036df60d6e8859afa368c4d9dee793712889b43adc5e168942785af6f6045889324f936a928cad4c7bc6d52bee1ee0752494f6412520184f2e79a4fa3de114353c4ebf55b1b78d36830d3091edc0acf1d32d6d4afd734446d78fb8b803657a9414365154c90956cef9c8430cb5b514c3ade4d5904fa54a305c3e2f3498f9f03ef2f1ffc2314f02c756f6d34ebbf82b26729fd344c84280b1433235d7bf4b08a50a4e423fbd535f083eedfedb4560165a2cc1b0bf7bfee4c988d75e6baf9067fe96d68822b4bb10985771241f2f158d3583ed787ab68f2768537af77a0fcaea377ba7429c0414b0c01386b181e3318db334200a66019da2ea1ee74c987fa372d1ccfcc231e9657ca8cb23f92fc503ecd6a93074a585140e7a8369123d32496575295a1f25ee04a32670c1744e8cd00486aeb637a23e6076a01a52ac426e43cbafaa8c2a664040000008fa333ffb1a416e0d585d11bd6e6fae376082edb873ce98f7200"}) splice(r4, 0x0, r1, 0x0, 0x1000000008, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x81244d09, &(0x7f0000000040)) [ 767.319679][ C1] lock(&port->lock#2); [ 767.319686][ C1] lock(&port->lock); [ 767.319691][ C1] lock(&port->lock#2); [ 767.319697][ C1] lock(console_owner); [ 767.319701][ C1] [ 767.319703][ C1] *** DEADLOCK *** [ 767.319704][ C1] [ 767.319707][ C1] 5 locks held by syz-executor.5/1950: [ 767.319708][ C1] #0: ffff8880a7897098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 22:00:10 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x5, 0x0, 0x8, &(0x7f0000fff000/0x1000)=nil, 0x4}) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000140)) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x80000000, 0x9, 0x8, 0x7f, 0x9, 0x7, 0x7, 0x4, 0x3f, 0x0, 0x3f, 0x43, 0x7ff}, {0x6, 0x8, 0x9, 0x40, 0xff, 0x0, 0x6, 0x40, 0x20, 0x62, 0x80, 0x8, 0x3}, {0x3, 0x200, 0xd1, 0x2b, 0x5, 0x21, 0x8, 0x92, 0x3, 0x40, 0xea, 0x1, 0x80000001}], 0x1}) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 767.319717][ C1] #1: ffff8880a7897130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_write+0x22c/0x940 [ 767.319726][ C1] #2: ffff8880a78972e8 (&o_tty->termios_rwsem/1){++++}-{3:3}, at: n_tty_write+0xf15/0x1170 [ 767.319737][ C1] #3: ffffc90016aab378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x613/0x1170 [ 767.319746][ C1] #4: ffff88809896e158 (&port->lock#2){-.-.}-{2:2}, at: pty_write+0xb6/0x180 [ 767.319756][ C1] [ 767.319758][ C1] stack backtrace: [ 767.319761][ C1] CPU: 1 PID: 1950 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 22:00:10 executing program 5 (fault-call:10 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 22:00:10 executing program 3 (fault-call:4 fault-nth:75): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:10 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(0x0, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) splice(r2, 0x0, r1, 0x0, 0x10000000001f, 0x6) [ 767.319765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.319766][ C1] Call Trace: [ 767.319768][ C1] dump_stack+0x1e9/0x30e [ 767.319770][ C1] print_circular_bug+0xc72/0xea0 [ 767.319773][ C1] ? stack_trace_save+0xad/0x150 [ 767.319775][ C1] ? save_trace+0x49/0xb60 [ 767.319777][ C1] check_noncircular+0x1fb/0x3a0 [ 767.319779][ C1] validate_chain+0x1b09/0x8920 [ 767.319781][ C1] ? mark_lock+0x102/0x1b00 [ 767.319788][ C1] ? __lock_acquire+0x116c/0x2c30 [ 767.319790][ C1] __lock_acquire+0x116c/0x2c30 [ 767.319792][ C1] lock_acquire+0x169/0x480 [ 767.319794][ C1] ? console_trylock_spinning+0x121/0x380 [ 767.319797][ C1] console_trylock_spinning+0x141/0x380 [ 767.319799][ C1] ? console_trylock_spinning+0x121/0x380 [ 767.319801][ C1] vprintk_emit+0x1db/0x3c0 [ 767.319803][ C1] printk+0x62/0x83 [ 767.319805][ C1] should_fail+0x414/0x5b0 [ 767.319807][ C1] ? __tty_buffer_request_room+0x1f3/0x540 [ 767.319809][ C1] should_failslab+0x5/0x20 [ 767.319811][ C1] __kmalloc+0x74/0x330 [ 767.319814][ C1] __tty_buffer_request_room+0x1f3/0x540 [ 767.319816][ C1] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 767.319818][ C1] pty_write+0xda/0x180 [ 767.319820][ C1] n_tty_write+0xcbf/0x1170 [ 767.319822][ C1] ? wait_woken+0x240/0x240 [ 767.319824][ C1] tty_write+0x593/0x940 [ 767.319826][ C1] ? n_tty_read+0x1bc0/0x1bc0 [ 767.319828][ C1] ? redirected_tty_write+0xb0/0xb0 [ 767.319830][ C1] __vfs_write+0x9c/0x6e0 [ 767.319833][ C1] ? __fget_files+0x4b9/0x4e0 [ 767.319835][ C1] ? fsnotify_perm+0x64/0x390 [ 767.319836][ C1] vfs_write+0x274/0x580 [ 767.319839][ C1] ksys_write+0x11b/0x220 [ 767.319841][ C1] do_syscall_64+0xf3/0x1b0 [ 767.319843][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 767.319845][ C1] RIP: 0033:0x45ca59 [ 767.319852][ C1] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.319854][ C1] RSP: 002b:00007f1147e14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 767.319860][ C1] RAX: ffffffffffffffda RBX: 000000000050c5c0 RCX: 000000000045ca59 [ 767.319863][ C1] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 767.319866][ C1] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 767.319869][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 767.319872][ C1] R13: 0000000000000cc9 R14: 00000000004cf26b R15: 00007f1147e156d4 [ 767.324457][ T2506] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 767.327681][ T1958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.330048][ T2494] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 767.336974][ T1958] Call Trace: [ 767.579697][ T2494] usb 3-1: Using ep0 maxpacket: 16 [ 767.582002][ T1958] dump_stack+0x1e9/0x30e [ 767.582019][ T1958] should_fail+0x433/0x5b0 [ 767.587407][ T2506] usb 2-1: Using ep0 maxpacket: 16 [ 767.591852][ T1958] ? sock_kmalloc+0x98/0x100 [ 767.591862][ T1958] should_failslab+0x5/0x20 [ 767.591871][ T1958] __kmalloc+0x74/0x330 [ 767.591879][ T1958] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 767.591888][ T1958] ? __local_bh_enable_ip+0x133/0x230 [ 767.591898][ T1958] sock_kmalloc+0x98/0x100 [ 767.591911][ T1958] hash_recvmsg+0x1bd/0x810 [ 767.699922][ T2494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.703457][ T1958] ? hash_sendmsg+0xb40/0xb40 [ 767.703472][ T1958] ____sys_recvmsg+0x24a/0x510 [ 767.705820][ T2494] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 767.711641][ T1958] ? import_iovec+0x12a/0x2c0 [ 767.711653][ T1958] do_recvmmsg+0x429/0x1500 [ 767.711663][ T1958] ? rcu_lock_release+0x5/0x20 [ 767.711683][ T1958] ? retint_kernel+0x2b/0x2b [ 767.711696][ T1958] ? check_preemption_disabled+0xb0/0x240 [ 767.717436][ T2494] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 767.717686][ T1958] ? debug_smp_processor_id+0x5/0x20 [ 767.725347][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.726547][ T1958] __x64_sys_recvmmsg+0x11d/0x1a0 [ 767.726557][ T1958] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 767.726573][ T1958] ? do_syscall_64+0x19/0x1b0 [ 767.732038][ T2494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.734126][ T1958] do_syscall_64+0xf3/0x1b0 [ 767.734150][ T1958] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 767.739526][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 767.744825][ T1958] RIP: 0033:0x45ca59 [ 767.744835][ T1958] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.744840][ T1958] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 767.744849][ T1958] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 767.744855][ T1958] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 767.744861][ T1958] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 767.744866][ T1958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 767.744871][ T1958] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 767.914085][ T1969] caif:caif_disconnect_client(): nothing to disconnect [ 767.923544][ T2494] usb 3-1: config 0 descriptor?? [ 767.955472][ T1975] FAULT_INJECTION: forcing a failure. [ 767.955472][ T1975] name failslab, interval 1, probability 0, space 0, times 0 [ 767.976481][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 767.979043][ T1975] CPU: 0 PID: 1975 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 767.989973][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.991691][ T1975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.003078][ T2506] usb 2-1: config 0 descriptor?? [ 768.005206][ T1975] Call Trace: [ 768.443359][ T1975] dump_stack+0x1e9/0x30e [ 768.447657][ T1975] should_fail+0x433/0x5b0 [ 768.452048][ T1975] ? sock_kmalloc+0x98/0x100 [ 768.456609][ T1975] should_failslab+0x5/0x20 [ 768.461081][ T1975] __kmalloc+0x74/0x330 [ 768.465207][ T1975] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 768.470813][ T1975] ? __local_bh_enable_ip+0x133/0x230 [ 768.476167][ T1975] sock_kmalloc+0x98/0x100 [ 768.480556][ T1975] hash_recvmsg+0x1bd/0x810 [ 768.485064][ T1975] ? hash_sendmsg+0xb40/0xb40 [ 768.489718][ T1975] ____sys_recvmsg+0x24a/0x510 [ 768.494515][ T1975] ? import_iovec+0x12a/0x2c0 [ 768.499162][ T1975] do_recvmmsg+0x429/0x1500 [ 768.503635][ T1975] ? rcu_lock_release+0x5/0x20 [ 768.508368][ T1975] ? trace_lock_release+0x137/0x1a0 [ 768.513550][ T1975] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 768.519030][ T1975] ? check_preemption_disabled+0xa2/0x240 [ 768.524718][ T1975] ? retint_kernel+0x2b/0x2b [ 768.529273][ T1975] __x64_sys_recvmmsg+0x11d/0x1a0 [ 768.534267][ T1975] do_syscall_64+0xf3/0x1b0 [ 768.538736][ T1975] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 768.544600][ T1975] RIP: 0033:0x45ca59 [ 768.548462][ T1975] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 768.568166][ T1975] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 768.576543][ T1975] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 768.584484][ T1975] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 768.592438][ T1975] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 22:00:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44000) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_send_signal(r2, 0x39, &(0x7f0000000080)={0x1c, 0xfffffffd, 0x101}, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) [ 768.600379][ T1975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 768.608330][ T1975] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 768.627240][ T1974] FAULT_INJECTION: forcing a failure. [ 768.627240][ T1974] name failslab, interval 1, probability 0, space 0, times 0 [ 768.639824][ T1974] CPU: 0 PID: 1974 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 768.648040][ T1974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.658095][ T1974] Call Trace: [ 768.661378][ T1974] dump_stack+0x1e9/0x30e [ 768.665699][ T1974] should_fail+0x433/0x5b0 [ 768.670106][ T1974] ? __tty_buffer_request_room+0x1f3/0x540 [ 768.675914][ T1974] should_failslab+0x5/0x20 [ 768.680403][ T1974] __kmalloc+0x74/0x330 [ 768.684547][ T1974] __tty_buffer_request_room+0x1f3/0x540 [ 768.690178][ T1974] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 768.691787][ T2494] usbhid 3-1:0.0: can't add hid device: -71 [ 768.696400][ T1974] pty_write+0xda/0x180 [ 768.706598][ T1974] n_tty_write+0xcbf/0x1170 [ 768.711102][ T1974] ? wait_woken+0x240/0x240 [ 768.712822][ T2494] usbhid: probe of 3-1:0.0 failed with error -71 [ 768.715593][ T1974] tty_write+0x593/0x940 [ 768.715605][ T1974] ? n_tty_read+0x1bc0/0x1bc0 [ 768.730783][ T1974] ? redirected_tty_write+0xb0/0xb0 [ 768.735969][ T1974] __vfs_write+0x9c/0x6e0 [ 768.737839][ T2494] usb 3-1: USB disconnect, device number 59 [ 768.740281][ T1974] ? trace_lock_release+0x137/0x1a0 [ 768.740295][ T1974] ? __fget_files+0x4b9/0x4e0 [ 768.740304][ T1974] ? fsnotify_perm+0x64/0x390 [ 768.740315][ T1974] vfs_write+0x274/0x580 [ 768.740326][ T1974] ksys_write+0x11b/0x220 [ 768.740344][ T1974] do_syscall_64+0xf3/0x1b0 [ 768.751723][ T2506] usbhid 2-1:0.0: can't add hid device: -71 [ 768.756126][ T1974] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 768.765140][ T2506] usbhid: probe of 2-1:0.0 failed with error -71 [ 768.769279][ T1974] RIP: 0033:0x45ca59 [ 768.786442][ T2506] usb 2-1: USB disconnect, device number 59 [ 768.791958][ T1974] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 768.791964][ T1974] RSP: 002b:00007f1147e14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.791973][ T1974] RAX: ffffffffffffffda RBX: 000000000050c5c0 RCX: 000000000045ca59 [ 768.791979][ T1974] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 768.791984][ T1974] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 768.791989][ T1974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 768.791994][ T1974] R13: 0000000000000cc9 R14: 00000000004cf26b R15: 00007f1147e156d4 22:00:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:12 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x5, 0x6, 0x6, "5cbdd4ac9b664bb9881f689d34092e68e20e8f19ad68da9b1ea9c65578d6ea31", 0x47504a50}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6fd80000", @ANYRES16=r6, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r5, @ANYBLOB="0a00090000000000000000008f00a9994fcc054e"], 0x30}}, 0x45) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x3600) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000580)={@remote, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockname$tipc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) syz_open_dev$video(0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r9, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) splice(r9, 0x0, r10, 0x0, 0x1000000007, 0x0) 22:00:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 22:00:12 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$caif_stream(0x25, 0x1, 0x3) splice(r2, 0x0, r1, 0x0, 0x10000000001f, 0x6) 22:00:12 executing program 3 (fault-call:4 fault-nth:76): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 769.303453][ T2003] caif:caif_disconnect_client(): nothing to disconnect [ 769.308538][ T2012] FAULT_INJECTION: forcing a failure. [ 769.308538][ T2012] name failslab, interval 1, probability 0, space 0, times 0 [ 769.326551][ T2012] CPU: 1 PID: 2012 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 769.334784][ T2012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.344815][ T2012] Call Trace: [ 769.348098][ T2012] dump_stack+0x1e9/0x30e [ 769.352420][ T2012] should_fail+0x433/0x5b0 [ 769.356834][ T2012] ? sock_kmalloc+0x98/0x100 [ 769.361402][ T2012] should_failslab+0x5/0x20 [ 769.365893][ T2012] __kmalloc+0x74/0x330 [ 769.370039][ T2012] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 769.375665][ T2012] ? __local_bh_enable_ip+0x133/0x230 [ 769.381032][ T2012] sock_kmalloc+0x98/0x100 [ 769.385443][ T2012] hash_recvmsg+0x1bd/0x810 [ 769.389978][ T2012] ? check_preemption_disabled+0xa2/0x240 [ 769.395685][ T2012] ? hash_sendmsg+0xb40/0xb40 22:00:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x8}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 769.400350][ T2012] ____sys_recvmsg+0x24a/0x510 [ 769.405098][ T2012] ? __sanitizer_cov_trace_const_cmp2+0xa0/0xa0 [ 769.411320][ T2012] ? import_iovec+0x12a/0x2c0 [ 769.415978][ T2012] do_recvmmsg+0x429/0x1500 [ 769.420457][ T2012] ? rcu_lock_release+0x5/0x20 [ 769.425196][ T2012] ? trace_lock_release+0x137/0x1a0 [ 769.430365][ T2012] ? __this_cpu_preempt_check+0x9/0x20 [ 769.435795][ T2012] ? ksys_write+0x1b1/0x220 [ 769.440268][ T2012] ? ksys_write+0x1b1/0x220 [ 769.444757][ T2012] ? check_preemption_disabled+0xb0/0x240 22:00:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x9}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 769.450458][ T2012] ? debug_smp_processor_id+0x5/0x20 [ 769.455720][ T2012] __x64_sys_recvmmsg+0x11d/0x1a0 [ 769.460744][ T2012] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 769.466370][ T2012] ? do_syscall_64+0x19/0x1b0 [ 769.471047][ T2012] do_syscall_64+0xf3/0x1b0 [ 769.475548][ T2012] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 769.481422][ T2012] RIP: 0033:0x45ca59 [ 769.485288][ T2012] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.504865][ T2012] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 769.513245][ T2012] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 769.521231][ T2012] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 769.529297][ T2012] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 769.537240][ T2012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 769.545181][ T2012] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 22:00:12 executing program 3 (fault-call:4 fault-nth:77): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:12 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) r1 = socket$caif_stream(0x25, 0x1, 0x3) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000000001f, 0x6) 22:00:12 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) syz_open_dev$video(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b000000000000000012"], 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xc8, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x57f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8b7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x11) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x3600) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 769.622915][ T2029] caif:caif_disconnect_client(): nothing to disconnect [ 769.627763][ T2032] FAULT_INJECTION: forcing a failure. [ 769.627763][ T2032] name failslab, interval 1, probability 0, space 0, times 0 [ 769.644008][ T2032] CPU: 1 PID: 2032 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 769.652239][ T2032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.662280][ T2032] Call Trace: [ 769.665554][ T2032] dump_stack+0x1e9/0x30e 22:00:12 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x280103, 0x145) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000100)={0x2, 0x767, [0x7, 0x0, 0x3, 0x8, 0x4], 0x7fff}) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x0, 0x70, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x9, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "6b17"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x8000, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3f, 0x6}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x81, 0x1f, 0xc1, 0x20, 0xff}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x3, [{0xd3, &(0x7f00000004c0)=@string={0xd3, 0x3, "a8b58aa85c2afc2f202678299e4e8fd318160994aee55bb28f15cde19a615e9b4d1c3f4f0cd2184afd8cc888bbfafcb6deebb069039bd419f0f99415f28584c3faee4708aef00c24f52ddd21be37bc04cd350a09c5693c1d1c8f2f403ae0375a4b81bcbb38892b6541c40c66a48731cbecb4827ec1a737e47456bb1bc566ca6099af83aae7f33700d514acb7d1e56ee28321b9f209881197401feaa3f9c64f808e35490657de6c82a6b96e9ec3fedb26d5638ed819aa2d73cbeec42f5dd59e769270301421267122b12ee2d74e48723f71"}}, {0xa9, &(0x7f00000005c0)=@string={0xa9, 0x3, "e3ecfe8455757e598b81ed9d1c8c165623d2a96ba8c1c72b4e89b625f74831c4e7ab7d40f359c008e6a8c19dfcc460db0cf85669d09ca4d588305844215b483bc4ff4dab234a35bbf1370f2da44b6c8702634c1c2aee78d211e67ed8cbda814859e29ecaf8eec16c0046a631c69193ab0270f9e63e2302135160c03675d7215cde32bc5aa4670bdb3d4581c8c223fc65a50a190e2b33fca87c27d8800ea1d72cd6291aa2a4dd95"}}, {0x3b, &(0x7f0000000680)=@string={0x3b, 0x3, "65bf141aa4c43e1f0d9e948ce87bf789438a9d57afc9a033e408295cbaf64e7c558fcbf2d0c88d5ac34754dd8fce2fd1ed6024204bbc07e752"}}]}) r3 = syz_open_dev$video(0x0, 0x4, 0x0) splice(r3, 0x0, r1, 0x0, 0x1000000008, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000700)={0x40, 0x100, 0x9}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x4, @win={{0x195, 0x6, 0x90f5, 0x100}, 0x5, 0x3a, &(0x7f00000001c0)={{0x101, 0x5, 0x8, 0x8}, &(0x7f0000000180)={{0x1, 0x100, 0x0, 0x5}, &(0x7f0000000140)={{0x7, 0x0, 0x40, 0x9}}}}, 0x5, &(0x7f0000000200)="469e200ec9f4d9d819b28bcb5ef0e9f7212659de9d97f0fd320533188ab56b31dfe9fe7d9b6bd1a0df9a031d8bfdd20b1ca3a83c158e42d7d81d08998c14209637af88e28aae9a323c87ca54cc6b2639b0064af052dbe02aa7669bdff6448fec21ccdbfd3b869018aded2598647689ea1c06887dfb8c19f2a03bcdfbf19b03bb6d9cef7e358de41cf34dfdb561dfd12ffe2e47ba0cb13c9658fc8c5aaab6e378c782b197ef9307f2", 0x20}}) [ 769.669861][ T2032] should_fail+0x433/0x5b0 [ 769.674273][ T2032] ? sock_kmalloc+0x98/0x100 [ 769.678852][ T2032] should_failslab+0x5/0x20 [ 769.683338][ T2032] __kmalloc+0x74/0x330 [ 769.687480][ T2032] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 769.693141][ T2032] ? __local_bh_enable_ip+0x133/0x230 [ 769.698531][ T2032] sock_kmalloc+0x98/0x100 [ 769.702953][ T2032] hash_recvmsg+0x1bd/0x810 [ 769.707447][ T2032] ? hash_sendmsg+0xb40/0xb40 [ 769.712135][ T2032] ____sys_recvmsg+0x24a/0x510 [ 769.716915][ T2032] ? import_iovec+0x12a/0x2c0 [ 769.721599][ T2032] do_recvmmsg+0x429/0x1500 [ 769.726114][ T2032] ? rcu_lock_release+0x5/0x20 [ 769.730856][ T2032] ? retint_kernel+0x2b/0x2b [ 769.735461][ T2032] ? check_preemption_disabled+0xb0/0x240 [ 769.741149][ T2032] ? debug_smp_processor_id+0x5/0x20 [ 769.746409][ T2032] __x64_sys_recvmmsg+0x11d/0x1a0 [ 769.751436][ T2032] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 769.757037][ T2032] ? do_syscall_64+0x19/0x1b0 [ 769.761684][ T2032] do_syscall_64+0xf3/0x1b0 [ 769.766245][ T2032] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 769.772103][ T2032] RIP: 0033:0x45ca59 [ 769.775967][ T2032] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.795540][ T2032] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 769.803917][ T2032] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 769.811857][ T2032] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 769.819962][ T2032] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 769.827921][ T2032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 769.835863][ T2032] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 769.851847][ T2506] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 769.919672][T29588] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 769.999535][ T8150] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 770.089516][ T2506] usb 2-1: Using ep0 maxpacket: 16 [ 770.159527][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 770.209707][ T2506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.220631][ T2506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 770.233773][ T2506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 770.242856][ T2506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.251715][ T2506] usb 2-1: config 0 descriptor?? [ 770.262130][ T8150] usb 5-1: Using ep0 maxpacket: 16 [ 770.301337][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.312575][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 770.327589][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 770.336657][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.346895][T29588] usb 3-1: config 0 descriptor?? [ 770.409665][ T8150] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 770.420457][ T8150] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 770.630392][ T8150] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 770.639641][ T8150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.647629][ T8150] usb 5-1: Product: 뽥ᨔ쒤Ἶ鸍貔篨觷詃垝즯㎠ࣤ尩籎轕죐媍䟃캏턯惭․뱋 [ 770.659669][ T8150] usb 5-1: Manufacturer: 蓾畕奾膋鷭谜嘖툣殩솨⯇襎▶䣷쐱ꯧ䁽姳ࣀ꣦鷁쓼楖鳐햤よ䑘嬡㭈ￄꭍ䨣묵㟱ⴏ䮤蝬挂᱌퉸䢁쪞況䘀ㆦ釆ꮓ瀂⌾ጂ恑㛀흵尡㋞媼枤䔽좁⏂旼થน㌫꣼❼胘ꄎⳗ⧖ꈚ [ 770.684911][ T8150] usb 5-1: SerialNumber: syz [ 770.969524][ T2506] usbhid 2-1:0.0: can't add hid device: -71 [ 770.975511][ T2506] usbhid: probe of 2-1:0.0 failed with error -71 [ 770.983311][ T2506] usb 2-1: USB disconnect, device number 60 [ 771.009693][ T8150] cdc_ncm 5-1:1.0: bind() failure [ 771.071646][ T8150] cdc_ncm 5-1:1.1: bind() failure [ 771.099509][T29588] usbhid 3-1:0.0: can't add hid device: -71 [ 771.099589][T29588] usbhid: probe of 3-1:0.0 failed with error -71 [ 771.100946][T29588] usb 3-1: USB disconnect, device number 60 [ 771.150907][ T8150] usb 5-1: USB disconnect, device number 4 22:00:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0xa}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 22:00:14 executing program 3 (fault-call:4 fault-nth:78): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:14 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) r1 = socket$caif_stream(0x25, 0x1, 0x3) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000000001f, 0x6) 22:00:14 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_mr_vif\x00') setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x49d4, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) [ 771.454536][ T2069] caif:caif_disconnect_client(): nothing to disconnect [ 771.465513][ T2074] FAULT_INJECTION: forcing a failure. [ 771.465513][ T2074] name failslab, interval 1, probability 0, space 0, times 0 [ 771.486542][ T2074] CPU: 0 PID: 2074 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 771.494789][ T2074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 22:00:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:14 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) semget$private(0x0, 0x2, 0x580) [ 771.504827][ T2074] Call Trace: [ 771.508109][ T2074] dump_stack+0x1e9/0x30e [ 771.512434][ T2074] should_fail+0x433/0x5b0 [ 771.516847][ T2074] ? sock_kmalloc+0x98/0x100 [ 771.521427][ T2074] should_failslab+0x5/0x20 [ 771.525921][ T2074] __kmalloc+0x74/0x330 [ 771.530061][ T2074] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 771.535670][ T2074] ? __local_bh_enable_ip+0x133/0x230 [ 771.541033][ T2074] sock_kmalloc+0x98/0x100 [ 771.545442][ T2074] hash_recvmsg+0x1bd/0x810 22:00:14 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r1, r2, 0x1}, 0x10) r3 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 771.549939][ T2074] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 771.555568][ T2074] ? hash_sendmsg+0xb40/0xb40 [ 771.560233][ T2074] ____sys_recvmsg+0x24a/0x510 [ 771.564990][ T2074] ? check_preemption_disabled+0xa2/0x240 [ 771.570697][ T2074] ? retint_kernel+0x2b/0x2b [ 771.575291][ T2074] ? import_iovec+0x12a/0x2c0 [ 771.579959][ T2074] do_recvmmsg+0x429/0x1500 [ 771.584469][ T2074] ? rcu_lock_release+0x5/0x20 [ 771.589237][ T2074] ? trace_lock_release+0x137/0x1a0 [ 771.594425][ T2074] ? __this_cpu_preempt_check+0x9/0x20 [ 771.599873][ T2074] ? ksys_write+0x1b1/0x220 22:00:14 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'pids'}, {0x6, 'memory'}]}, 0xe) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000000c0)={0x54, 0x7ff, 0x5b3, {0x1000, 0x8}, {0xffff, 0x9}, @ramp={0x9, 0x59a5, {0x9, 0x1, 0x2, 0x9}}}) [ 771.604374][ T2074] ? ksys_write+0x1b1/0x220 [ 771.608868][ T2074] ? check_preemption_disabled+0xb0/0x240 [ 771.614576][ T2074] ? debug_smp_processor_id+0x5/0x20 [ 771.619850][ T2074] __x64_sys_recvmmsg+0x11d/0x1a0 [ 771.624866][ T2074] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 771.630480][ T2074] ? do_syscall_64+0x19/0x1b0 [ 771.635143][ T2074] do_syscall_64+0xf3/0x1b0 [ 771.639657][ T2074] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 771.645540][ T2074] RIP: 0033:0x45ca59 22:00:14 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) syz_open_dev$video(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3600) splice(r0, 0x0, r1, 0x0, 0x9, 0x0) 22:00:14 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) pipe(&(0x7f0000000040)) syz_open_dev$video(0x0, 0x0, 0x0) [ 771.649421][ T2074] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.669007][ T2074] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 771.677408][ T2074] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 771.685449][ T2074] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 771.693417][ T2074] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 22:00:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3600) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={{0x1, 0x0, @reserved="811539e3d98fb0d83cb759b881efff9c10944faef875d77516ffe8649830e5ff"}}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x3600) r3 = inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x402) inotify_rm_watch(r0, r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r1, 0x80000) openat$cgroup_ro(r5, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0) r6 = syz_open_dev$video(0x0, 0x0, 0x0) splice(r6, 0x0, r4, 0x0, 0x1000000008, 0x0) [ 771.701376][ T2074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 771.709337][ T2074] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 771.829472][ T3370] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 771.889408][ T8150] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 772.069430][ T3370] usb 3-1: Using ep0 maxpacket: 16 [ 772.149430][ T8150] usb 2-1: Using ep0 maxpacket: 16 [ 772.189469][ T3370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.200429][ T3370] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 772.214042][ T3370] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 772.223498][ T3370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.234533][ T3370] usb 3-1: config 0 descriptor?? [ 772.289597][ T8150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.300501][ T8150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 772.313617][ T8150] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 772.322932][ T8150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.331992][ T8150] usb 2-1: config 0 descriptor?? [ 772.949462][ T3370] usbhid 3-1:0.0: can't add hid device: -71 [ 772.955422][ T3370] usbhid: probe of 3-1:0.0 failed with error -71 [ 772.965257][ T3370] usb 3-1: USB disconnect, device number 61 [ 773.059503][ T8150] usbhid 2-1:0.0: can't add hid device: -71 [ 773.065484][ T8150] usbhid: probe of 2-1:0.0 failed with error -71 [ 773.075469][ T8150] usb 2-1: USB disconnect, device number 61 22:00:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:16 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x5, 0xa, 0x7) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x9, 0x5, 0x0, @broadcast, 'erspan0\x00'}) r1 = socket$caif_stream(0x25, 0x1, 0x3) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000000001f, 0x6) 22:00:16 executing program 3 (fault-call:4 fault-nth:79): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0xd}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 22:00:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 773.543214][ T2140] FAULT_INJECTION: forcing a failure. [ 773.543214][ T2140] name failslab, interval 1, probability 0, space 0, times 0 [ 773.561716][ T2134] caif:caif_disconnect_client(): nothing to disconnect [ 773.578346][ T2140] CPU: 1 PID: 2140 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 773.586581][ T2140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.596616][ T2140] Call Trace: [ 773.599879][ T2140] dump_stack+0x1e9/0x30e [ 773.604188][ T2140] should_fail+0x433/0x5b0 [ 773.608611][ T2140] ? sock_kmalloc+0x98/0x100 [ 773.613177][ T2140] should_failslab+0x5/0x20 [ 773.617649][ T2140] __kmalloc+0x74/0x330 [ 773.621813][ T2140] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 773.627413][ T2140] ? __local_bh_enable_ip+0x133/0x230 [ 773.632760][ T2140] sock_kmalloc+0x98/0x100 [ 773.637147][ T2140] hash_recvmsg+0x1bd/0x810 [ 773.641622][ T2140] ? hash_sendmsg+0xb40/0xb40 [ 773.646303][ T2140] ____sys_recvmsg+0x24a/0x510 [ 773.651054][ T2140] ? import_iovec+0x12a/0x2c0 [ 773.655709][ T2140] do_recvmmsg+0x429/0x1500 [ 773.660185][ T2140] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 773.665613][ T2140] ? check_preemption_disabled+0x33/0x240 [ 773.671335][ T2140] ? trace_lock_release+0x137/0x1a0 [ 773.676517][ T2140] ? __this_cpu_preempt_check+0x9/0x20 [ 773.682041][ T2140] ? ksys_write+0x1b1/0x220 [ 773.686511][ T2140] ? ksys_write+0x1b1/0x220 [ 773.691012][ T2140] ? check_preemption_disabled+0xb0/0x240 [ 773.696707][ T2140] ? debug_smp_processor_id+0x5/0x20 [ 773.701963][ T2140] __x64_sys_recvmmsg+0x11d/0x1a0 [ 773.706956][ T2140] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 773.712586][ T2140] ? do_syscall_64+0x19/0x1b0 [ 773.717243][ T2140] do_syscall_64+0xf3/0x1b0 [ 773.721735][ T2140] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 773.727593][ T2140] RIP: 0033:0x45ca59 [ 773.731465][ T2140] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 773.751055][ T2140] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 773.759451][ T2140] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 773.767399][ T2140] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 773.775355][ T2140] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 773.783307][ T2140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:00:16 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socket(0x5, 0xa, 0x7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$caif_stream(0x25, 0x1, 0x3) splice(r1, 0x0, r0, 0x0, 0x10000000001f, 0x6) 22:00:16 executing program 3 (fault-call:4 fault-nth:80): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 773.791254][ T2140] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 773.799277][ T8150] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 773.819467][ T2693] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 773.827079][T29588] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 773.853788][ T2154] caif:caif_disconnect_client(): nothing to disconnect [ 773.863125][ T2158] FAULT_INJECTION: forcing a failure. [ 773.863125][ T2158] name failslab, interval 1, probability 0, space 0, times 0 [ 773.876336][ T2158] CPU: 1 PID: 2158 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 773.884546][ T2158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.894578][ T2158] Call Trace: [ 773.897860][ T2158] dump_stack+0x1e9/0x30e 22:00:16 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$caif_stream(0x25, 0x1, 0x3) splice(r1, 0x0, r0, 0x0, 0x10000000001f, 0x6) [ 773.902178][ T2158] should_fail+0x433/0x5b0 [ 773.906585][ T2158] ? sock_kmalloc+0x98/0x100 [ 773.911170][ T2158] should_failslab+0x5/0x20 [ 773.914516][ T2159] caif:caif_disconnect_client(): nothing to disconnect [ 773.915656][ T2158] __kmalloc+0x74/0x330 [ 773.915666][ T2158] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 773.915676][ T2158] ? __local_bh_enable_ip+0x133/0x230 [ 773.915691][ T2158] sock_kmalloc+0x98/0x100 [ 773.941965][ T2158] hash_recvmsg+0x1bd/0x810 [ 773.946445][ T2158] ? hash_sendmsg+0xb40/0xb40 [ 773.951092][ T2158] ____sys_recvmsg+0x24a/0x510 [ 773.955828][ T2158] ? import_iovec+0x12a/0x2c0 [ 773.960489][ T2158] do_recvmmsg+0x429/0x1500 [ 773.964973][ T2158] ? rcu_lock_release+0x5/0x20 [ 773.969709][ T2158] ? trace_lock_release+0x137/0x1a0 [ 773.974879][ T2158] ? __this_cpu_preempt_check+0x9/0x20 [ 773.980311][ T2158] ? ksys_write+0x1b1/0x220 [ 773.984793][ T2158] ? ksys_write+0x1b1/0x220 [ 773.989395][ T2158] ? check_preemption_disabled+0xb0/0x240 [ 773.995084][ T2158] ? debug_smp_processor_id+0x5/0x20 [ 774.000352][ T2158] __x64_sys_recvmmsg+0x11d/0x1a0 [ 774.005354][ T2158] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 774.010972][ T2158] ? do_syscall_64+0x19/0x1b0 [ 774.015620][ T2158] do_syscall_64+0xf3/0x1b0 [ 774.020106][ T2158] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 774.025978][ T2158] RIP: 0033:0x45ca59 [ 774.029849][ T2158] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.039286][ T8150] usb 3-1: Using ep0 maxpacket: 16 22:00:17 executing program 3 (fault-call:4 fault-nth:81): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 774.049425][ T2158] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 774.049435][ T2158] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 774.049441][ T2158] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 774.049447][ T2158] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 774.049452][ T2158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 774.049458][ T2158] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 22:00:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x8}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 774.104101][ T2163] FAULT_INJECTION: forcing a failure. [ 774.104101][ T2163] name failslab, interval 1, probability 0, space 0, times 0 [ 774.120779][ T2163] CPU: 1 PID: 2163 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 774.129017][ T2163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.139063][ T2163] Call Trace: [ 774.139263][ T2693] usb 5-1: Using ep0 maxpacket: 16 [ 774.142342][ T2163] dump_stack+0x1e9/0x30e [ 774.142353][ T2163] should_fail+0x433/0x5b0 [ 774.142368][ T2163] ? sock_kmalloc+0x98/0x100 [ 774.147483][T29588] usb 2-1: Using ep0 maxpacket: 16 [ 774.151763][ T2163] should_failslab+0x5/0x20 [ 774.151772][ T2163] __kmalloc+0x74/0x330 [ 774.151781][ T2163] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 774.151790][ T2163] ? __local_bh_enable_ip+0x133/0x230 [ 774.151801][ T2163] sock_kmalloc+0x98/0x100 [ 774.151812][ T2163] hash_recvmsg+0x1bd/0x810 [ 774.151821][ T2163] ? hash_sendmsg+0xb40/0xb40 [ 774.151830][ T2163] ____sys_recvmsg+0x24a/0x510 [ 774.151846][ T2163] ? import_iovec+0x12a/0x2c0 [ 774.208427][ T2163] do_recvmmsg+0x429/0x1500 [ 774.212911][ T2163] ? rcu_lock_release+0x5/0x20 [ 774.217659][ T2163] ? trace_lock_release+0x137/0x1a0 [ 774.222829][ T2163] ? __this_cpu_preempt_check+0x9/0x20 [ 774.228253][ T2163] ? ksys_write+0x1b1/0x220 [ 774.229437][ T8150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.232729][ T2163] ? ksys_write+0x1b1/0x220 [ 774.232741][ T2163] ? check_preemption_disabled+0xb0/0x240 [ 774.232753][ T2163] ? debug_smp_processor_id+0x5/0x20 [ 774.244101][ T8150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 774.248168][ T2163] __x64_sys_recvmmsg+0x11d/0x1a0 [ 774.248177][ T2163] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 774.248191][ T2163] ? do_syscall_64+0x19/0x1b0 [ 774.258340][ T8150] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 774.259136][ T2163] do_syscall_64+0xf3/0x1b0 [ 774.273544][ T8150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.276846][ T2163] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 774.276855][ T2163] RIP: 0033:0x45ca59 [ 774.276867][ T2163] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.287950][ T8150] usb 3-1: config 0 descriptor?? [ 774.296113][ T2163] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 22:00:17 executing program 3 (fault-call:4 fault-nth:82): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) [ 774.296123][ T2163] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 774.296128][ T2163] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 774.296134][ T2163] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 774.296139][ T2163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 774.296144][ T2163] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 774.359085][ T2171] FAULT_INJECTION: forcing a failure. [ 774.359085][ T2171] name failslab, interval 1, probability 0, space 0, times 0 [ 774.359624][ T2693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.359639][ T2693] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 774.359660][ T2693] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 774.359671][ T2693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.360091][T29588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.369805][ T2171] CPU: 1 PID: 2171 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 774.377810][ T2693] usb 5-1: config 0 descriptor?? [ 774.383600][ T2171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.383604][ T2171] Call Trace: [ 774.383619][ T2171] dump_stack+0x1e9/0x30e [ 774.383631][ T2171] should_fail+0x433/0x5b0 [ 774.383649][ T2171] ? sock_kmalloc+0x98/0x100 [ 774.404555][T29588] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 774.414955][ T2171] should_failslab+0x5/0x20 [ 774.414964][ T2171] __kmalloc+0x74/0x330 [ 774.414973][ T2171] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 774.414982][ T2171] ? __local_bh_enable_ip+0x133/0x230 [ 774.414995][ T2171] sock_kmalloc+0x98/0x100 [ 774.415008][ T2171] hash_recvmsg+0x1bd/0x810 [ 774.433860][T29588] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 774.436719][ T2171] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 774.445576][T29588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.455469][ T2171] ? hash_sendmsg+0xb40/0xb40 [ 774.455480][ T2171] ____sys_recvmsg+0x24a/0x510 [ 774.455492][ T2171] ? check_preemption_disabled+0xa2/0x240 [ 774.455502][ T2171] ? retint_kernel+0x2b/0x2b [ 774.455518][ T2171] ? import_iovec+0x12a/0x2c0 [ 774.467114][T29588] usb 2-1: config 0 descriptor?? [ 774.468632][ T2171] do_recvmmsg+0x429/0x1500 [ 774.592471][ T2171] ? rcu_lock_release+0x5/0x20 [ 774.597215][ T2171] ? trace_lock_release+0x137/0x1a0 [ 774.602387][ T2171] ? __this_cpu_preempt_check+0x9/0x20 [ 774.607822][ T2171] ? ksys_write+0x1b1/0x220 [ 774.612293][ T2171] ? ksys_write+0x1b1/0x220 [ 774.616765][ T2171] ? check_preemption_disabled+0xb0/0x240 [ 774.622448][ T2171] ? debug_smp_processor_id+0x5/0x20 [ 774.627711][ T2171] __x64_sys_recvmmsg+0x11d/0x1a0 [ 774.632700][ T2171] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 774.638296][ T2171] ? do_syscall_64+0x19/0x1b0 [ 774.643031][ T2171] do_syscall_64+0xf3/0x1b0 [ 774.647501][ T2171] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 774.653359][ T2171] RIP: 0033:0x45ca59 [ 774.657220][ T2171] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.676792][ T2171] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 774.685168][ T2171] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 774.693107][ T2171] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 774.701045][ T2171] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 774.708984][ T2171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 774.716925][ T2171] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 775.199282][ T2693] usbhid 5-1:0.0: can't add hid device: -71 [ 775.205339][ T2693] usbhid: probe of 5-1:0.0 failed with error -71 [ 775.214334][ T8150] usbhid 3-1:0.0: can't add hid device: -71 [ 775.220420][ T8150] usbhid: probe of 3-1:0.0 failed with error -71 [ 775.229093][ T2693] usb 5-1: USB disconnect, device number 5 [ 775.239246][T29588] usbhid 2-1:0.0: can't add hid device: -71 [ 775.245390][ T8150] usb 3-1: USB disconnect, device number 62 [ 775.257278][T29588] usbhid: probe of 2-1:0.0 failed with error -71 [ 775.268518][T29588] usb 2-1: USB disconnect, device number 62 22:00:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:18 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$caif_stream(0x25, 0x1, 0x3) splice(r1, 0x0, r0, 0x0, 0x10000000001f, 0x6) 22:00:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x9}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 22:00:18 executing program 3 (fault-call:4 fault-nth:83): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") 22:00:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000500)="c8") [ 775.715053][ T2207] FAULT_INJECTION: forcing a failure. [ 775.715053][ T2207] name failslab, interval 1, probability 0, space 0, times 0 [ 775.728571][ T2204] caif:caif_disconnect_client(): nothing to disconnect [ 775.740744][ T2207] CPU: 1 PID: 2207 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 775.749007][ T2207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.759052][ T2207] Call Trace: [ 775.762336][ T2207] dump_stack+0x1e9/0x30e [ 775.766650][ T2207] should_fail+0x433/0x5b0 [ 775.771040][ T2207] ? sock_kmalloc+0x98/0x100 [ 775.775608][ T2207] should_failslab+0x5/0x20 [ 775.780082][ T2207] __kmalloc+0x74/0x330 [ 775.784206][ T2207] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 775.789807][ T2207] ? __local_bh_enable_ip+0x133/0x230 [ 775.795153][ T2207] sock_kmalloc+0x98/0x100 [ 775.799585][ T2207] hash_recvmsg+0x1bd/0x810 [ 775.804069][ T2207] ? hash_sendmsg+0xb40/0xb40 [ 775.808718][ T2207] ____sys_recvmsg+0x24a/0x510 [ 775.813453][ T2207] ? import_iovec+0x12a/0x2c0 [ 775.818097][ T2207] do_recvmmsg+0x429/0x1500 [ 775.822573][ T2207] ? rcu_lock_release+0x5/0x20 [ 775.827355][ T2207] ? trace_lock_release+0x137/0x1a0 [ 775.832607][ T2207] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 775.838033][ T2207] ? check_preemption_disabled+0xa2/0x240 [ 775.843734][ T2207] ? retint_kernel+0x2b/0x2b [ 775.848301][ T2207] __x64_sys_recvmmsg+0x11d/0x1a0 [ 775.853328][ T2207] do_syscall_64+0xf3/0x1b0 [ 775.857800][ T2207] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 775.863659][ T2207] RIP: 0033:0x45ca59 [ 775.867523][ T2207] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 775.887093][ T2207] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 775.895472][ T2207] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 775.903414][ T2207] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 22:00:18 executing program 3 (fault-call:4 fault-nth:84): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:18 executing program 0: pipe(0x0) r0 = socket$caif_stream(0x25, 0x1, 0x3) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000000001f, 0x6) [ 775.911354][ T2207] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 775.919295][ T2207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 775.927235][ T2207] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 775.987213][ T2223] FAULT_INJECTION: forcing a failure. [ 775.987213][ T2223] name failslab, interval 1, probability 0, space 0, times 0 [ 775.990149][ T2224] caif:caif_disconnect_client(): nothing to disconnect [ 776.000483][ T2223] CPU: 1 PID: 2223 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 776.014945][ T2223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.024983][ T2223] Call Trace: [ 776.028243][ T2223] dump_stack+0x1e9/0x30e [ 776.032628][ T2223] should_fail+0x433/0x5b0 [ 776.037013][ T2223] ? sock_kmalloc+0x98/0x100 [ 776.041568][ T2223] should_failslab+0x5/0x20 [ 776.046039][ T2223] __kmalloc+0x74/0x330 [ 776.050160][ T2223] ? __local_bh_enable_ip+0x133/0x230 [ 776.055500][ T2223] sock_kmalloc+0x98/0x100 [ 776.059886][ T2223] hash_recvmsg+0x1bd/0x810 [ 776.064358][ T2223] ? hash_sendmsg+0xb40/0xb40 [ 776.069004][ T2223] ____sys_recvmsg+0x24a/0x510 [ 776.073740][ T2223] ? import_iovec+0x12a/0x2c0 [ 776.078392][ T2223] do_recvmmsg+0x429/0x1500 [ 776.082864][ T2223] ? rcu_lock_release+0x5/0x20 [ 776.087598][ T2223] ? trace_lock_release+0x137/0x1a0 [ 776.092765][ T2223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.098194][ T2223] ? check_preemption_disabled+0xa2/0x240 [ 776.103887][ T2223] ? retint_kernel+0x2b/0x2b [ 776.108446][ T2223] __x64_sys_recvmmsg+0x11d/0x1a0 [ 776.113441][ T2223] do_syscall_64+0xf3/0x1b0 [ 776.117950][ T2223] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 776.123809][ T2223] RIP: 0033:0x45ca59 [ 776.127675][ T2223] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 776.147276][ T2223] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 776.155678][ T2223] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 776.163619][ T2223] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 776.171644][ T2223] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 776.179585][ T2223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:00:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0xa}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 22:00:19 executing program 3 (fault-call:4 fault-nth:85): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x45d, 0x0, 0x0) 22:00:19 executing program 0: pipe(0x0) r0 = socket$caif_stream(0x25, 0x1, 0x3) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000000001f, 0x6) [ 776.187543][ T2223] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 776.242173][ T2230] FAULT_INJECTION: forcing a failure. [ 776.242173][ T2230] name failslab, interval 1, probability 0, space 0, times 0 [ 776.259819][ T2230] CPU: 0 PID: 2230 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 776.268048][ T2230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.269212][ T23] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 776.278102][ T2230] Call Trace: [ 776.278117][ T2230] dump_stack+0x1e9/0x30e [ 776.278128][ T2230] should_fail+0x433/0x5b0 [ 776.278144][ T2230] ? sock_kmalloc+0x98/0x100 [ 776.302164][ T2230] should_failslab+0x5/0x20 [ 776.306635][ T2230] __kmalloc+0x74/0x330 [ 776.310773][ T2230] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 776.316384][ T2230] ? __local_bh_enable_ip+0x133/0x230 [ 776.318063][ T2231] caif:caif_disconnect_client(): nothing to disconnect [ 776.321734][ T2230] sock_kmalloc+0x98/0x100 [ 776.321747][ T2230] hash_recvmsg+0x1bd/0x810 22:00:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0xd}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 776.321758][ T2230] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 776.321767][ T2230] ? hash_sendmsg+0xb40/0xb40 [ 776.321776][ T2230] ____sys_recvmsg+0x24a/0x510 [ 776.321792][ T2230] ? import_iovec+0x12a/0x2c0 [ 776.321803][ T2230] do_recvmmsg+0x429/0x1500 [ 776.321814][ T2230] ? rcu_lock_release+0x5/0x20 [ 776.321829][ T2230] ? trace_lock_release+0x137/0x1a0 [ 776.321843][ T2230] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.321856][ T2230] ? check_preemption_disabled+0xa2/0x240 [ 776.382650][ T2230] ? retint_kernel+0x2b/0x2b [ 776.387213][ T2230] __x64_sys_recvmmsg+0x11d/0x1a0 [ 776.392221][ T2230] do_syscall_64+0xf3/0x1b0 [ 776.396697][ T2230] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 776.402567][ T2230] RIP: 0033:0x45ca59 [ 776.406433][ T2230] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 776.426013][ T2230] RSP: 002b:00007fe383c75c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 776.434411][ T2230] RAX: ffffffffffffffda RBX: 00000000004fc440 RCX: 000000000045ca59 [ 776.442373][ T2230] RDX: 000000000000045d RSI: 00000000200019c0 RDI: 0000000000000005 [ 776.450325][ T2230] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 776.458281][ T2230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 776.466225][ T2230] R13: 00000000000008c3 R14: 00000000004cba0d R15: 00007fe383c766d4 [ 776.474505][T29588] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 776.482062][ T2693] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 776.519162][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 776.641722][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.652583][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 776.665594][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 776.674725][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.683642][ T23] usb 2-1: config 0 descriptor?? [ 776.739116][T29588] usb 3-1: Using ep0 maxpacket: 16 [ 776.744347][ T2693] usb 5-1: Using ep0 maxpacket: 16 [ 776.869529][T29588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.880694][ T2693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.891545][ T2693] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 776.905489][T29588] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 776.918712][ T2693] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 776.928177][T29588] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 776.937610][ T2693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.946016][T29588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.956171][ T2693] usb 5-1: config 0 descriptor?? [ 776.966379][T29588] usb 3-1: config 0 descriptor??