[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts. 2020/07/04 13:31:10 fuzzer started 2020/07/04 13:31:10 dialing manager at 10.128.0.26:34645 2020/07/04 13:31:10 syscalls: 3122 2020/07/04 13:31:10 code coverage: enabled 2020/07/04 13:31:10 comparison tracing: enabled 2020/07/04 13:31:10 extra coverage: enabled 2020/07/04 13:31:10 setuid sandbox: enabled 2020/07/04 13:31:10 namespace sandbox: enabled 2020/07/04 13:31:10 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/04 13:31:10 fault injection: enabled 2020/07/04 13:31:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/04 13:31:10 net packet injection: enabled 2020/07/04 13:31:10 net device setup: enabled 2020/07/04 13:31:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/04 13:31:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/04 13:31:10 USB emulation: enabled 13:34:34 executing program 0: syzkaller login: [ 261.009836][ T6848] IPVS: ftp: loaded support on port[0] = 21 [ 261.138784][ T6848] chnl_net:caif_netlink_parms(): no params data found 13:34:35 executing program 1: [ 261.211918][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.220870][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.230630][ T6848] device bridge_slave_0 entered promiscuous mode [ 261.242556][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.250507][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.260175][ T6848] device bridge_slave_1 entered promiscuous mode [ 261.285176][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.296873][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.326486][ T6848] team0: Port device team_slave_0 added [ 261.335242][ T6848] team0: Port device team_slave_1 added [ 261.356856][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.365139][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.391997][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.406096][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.413844][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.453323][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.487246][ T7002] IPVS: ftp: loaded support on port[0] = 21 13:34:35 executing program 2: [ 261.536509][ T6848] device hsr_slave_0 entered promiscuous mode [ 261.583088][ T6848] device hsr_slave_1 entered promiscuous mode [ 261.837421][ T7052] IPVS: ftp: loaded support on port[0] = 21 13:34:35 executing program 3: [ 261.881928][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 262.065879][ T6848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.148637][ T6848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.237885][ T6848] netdevsim netdevsim0 netdevsim2: renamed from eth2 13:34:36 executing program 4: [ 262.305459][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 262.320340][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.326434][ T7197] IPVS: ftp: loaded support on port[0] = 21 [ 262.340523][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.365603][ T7002] device bridge_slave_0 entered promiscuous mode [ 262.391270][ T6848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.478046][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.487651][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.499827][ T7002] device bridge_slave_1 entered promiscuous mode [ 262.569497][ T7296] IPVS: ftp: loaded support on port[0] = 21 [ 262.606201][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.639679][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.695713][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.707529][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.716925][ T7052] device bridge_slave_0 entered promiscuous mode 13:34:36 executing program 5: [ 262.785722][ T7002] team0: Port device team_slave_0 added [ 262.793854][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.801161][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.823488][ T7052] device bridge_slave_1 entered promiscuous mode [ 262.894516][ T7002] team0: Port device team_slave_1 added [ 262.911705][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.934920][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.988442][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 263.033802][ T7052] team0: Port device team_slave_0 added [ 263.047299][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.054907][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.084011][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.141239][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.150226][ T7052] team0: Port device team_slave_1 added [ 263.167031][ T7460] IPVS: ftp: loaded support on port[0] = 21 [ 263.169215][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.180349][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.206861][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.271980][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.282479][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.292338][ T7197] device bridge_slave_0 entered promiscuous mode [ 263.305769][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 263.325800][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.335669][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.362447][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.376498][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.384124][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.410882][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.426249][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.433449][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.441085][ T7197] device bridge_slave_1 entered promiscuous mode [ 263.475917][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.487787][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.512087][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.521953][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.537186][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.585321][ T7002] device hsr_slave_0 entered promiscuous mode [ 263.623246][ T7002] device hsr_slave_1 entered promiscuous mode [ 263.662790][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.670508][ T7002] Cannot create hsr debugfs directory [ 263.700097][ T7197] team0: Port device team_slave_0 added [ 263.737663][ T7197] team0: Port device team_slave_1 added [ 263.756235][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.765337][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.792066][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.806244][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.818297][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.827414][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.834878][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.844721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.895268][ T7052] device hsr_slave_0 entered promiscuous mode [ 263.943072][ T7052] device hsr_slave_1 entered promiscuous mode [ 263.992734][ T7052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.000320][ T7052] Cannot create hsr debugfs directory [ 264.013845][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.020812][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.048480][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.072048][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.081015][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.089442][ T7296] device bridge_slave_0 entered promiscuous mode [ 264.098666][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.108258][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.117875][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.124992][ T3407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.132484][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.166875][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.176274][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.186001][ T7296] device bridge_slave_1 entered promiscuous mode [ 264.245150][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.257340][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.296096][ T7197] device hsr_slave_0 entered promiscuous mode [ 264.343122][ T7197] device hsr_slave_1 entered promiscuous mode [ 264.412784][ T7197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.420413][ T7197] Cannot create hsr debugfs directory [ 264.447849][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.481514][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.496733][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.539276][ T7296] team0: Port device team_slave_0 added [ 264.566073][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.574791][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.584742][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.607974][ T7296] team0: Port device team_slave_1 added [ 264.647583][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.656943][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.704805][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.712311][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.740840][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.777471][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.786286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.796557][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.806474][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.835928][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.848340][ T7002] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.917501][ T7460] chnl_net:caif_netlink_parms(): no params data found [ 264.928385][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.950958][ T7002] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.008549][ T7002] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.078725][ T7002] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.186161][ T7296] device hsr_slave_0 entered promiscuous mode [ 265.243042][ T7296] device hsr_slave_1 entered promiscuous mode [ 265.292714][ T7296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.300293][ T7296] Cannot create hsr debugfs directory [ 265.439267][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.447697][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.492882][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.499956][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.516514][ T7460] device bridge_slave_0 entered promiscuous mode [ 265.525363][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.532401][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.541075][ T7460] device bridge_slave_1 entered promiscuous mode [ 265.551104][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.580822][ T7052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.652112][ T7052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.727824][ T7460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.737714][ T7052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.785428][ T7197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.856089][ T7197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.909153][ T7197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.978541][ T7460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.994886][ T7052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.073383][ T7197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.169149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.179172][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.190697][ T7460] team0: Port device team_slave_0 added [ 266.200756][ T7460] team0: Port device team_slave_1 added [ 266.228664][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.236013][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.262067][ T7460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.313180][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.320159][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.349553][ T7460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.367644][ T7296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.440748][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.449013][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.466138][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.486655][ T7296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.525183][ T7296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.569438][ T7296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.635767][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.643766][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.651561][ T6848] device veth0_vlan entered promiscuous mode [ 266.693248][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.709802][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.718083][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.787996][ T7460] device hsr_slave_0 entered promiscuous mode [ 266.842910][ T7460] device hsr_slave_1 entered promiscuous mode [ 266.902625][ T7460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.910216][ T7460] Cannot create hsr debugfs directory [ 266.935712][ T6848] device veth1_vlan entered promiscuous mode [ 266.964945][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.980151][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.002421][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.010631][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.056206][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.065628][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.074776][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.081963][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.116556][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.129933][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.139935][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.156104][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.167158][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.174487][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.183415][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.192144][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.201340][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.210352][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.219508][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.228789][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.237748][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.245524][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.260931][ T6848] device veth0_macvtap entered promiscuous mode [ 267.285558][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.294390][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.303474][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.312324][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.321342][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.330586][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.340096][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.349340][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.357843][ T2674] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.364990][ T2674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.393150][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.401067][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.410736][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.420065][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.437669][ T6848] device veth1_macvtap entered promiscuous mode [ 267.451533][ T7002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.467427][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.489154][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.499174][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.508388][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.521212][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.529336][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.543409][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.564413][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.599567][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.608380][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.620952][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.628080][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.636445][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.645350][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.654419][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.661462][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.669630][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.682278][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.703355][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.710862][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.726535][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.757185][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.769088][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.779620][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.788460][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.797366][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.806471][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.820527][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.846100][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.855881][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.865521][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.874192][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.883071][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.910286][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.927083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.936685][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.946354][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.956839][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.966006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.975302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.983895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.991564][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.001179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.010314][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.019434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.033335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.041670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.062823][ T7460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.116133][ T7460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.169559][ T7197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.179646][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.192833][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.201555][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.215995][ T7052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.228965][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.275626][ T7460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.352130][ T7460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.424492][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.433890][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.442106][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.451605][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.461024][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.468150][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.484922][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.534130][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.585528][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.594163][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.602886][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.609944][ T3407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.618204][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.627147][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.635805][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.644874][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.652274][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.662087][ T7002] device veth0_vlan entered promiscuous mode 13:34:42 executing program 0: [ 268.748243][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.759780][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 13:34:42 executing program 0: [ 268.795942][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.813406][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.822278][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 13:34:42 executing program 0: [ 268.856784][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.865829][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.883055][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 13:34:42 executing program 0: [ 268.985887][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.996720][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.006002][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.015411][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 13:34:42 executing program 0: [ 269.042979][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.051746][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.060829][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.075861][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.092268][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.133019][ T7002] device veth1_vlan entered promiscuous mode 13:34:43 executing program 0: [ 269.151439][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:34:43 executing program 0: [ 269.227786][ T7052] device veth0_vlan entered promiscuous mode [ 269.280482][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.291588][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.309317][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.320602][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.340566][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.351893][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.390522][ T7052] device veth1_vlan entered promiscuous mode [ 269.405985][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.427343][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.439977][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.450020][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.459259][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.468355][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.482215][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.503341][ T7002] device veth0_macvtap entered promiscuous mode [ 269.531373][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.542988][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.551028][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.559916][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.575513][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.586528][ T7002] device veth1_macvtap entered promiscuous mode [ 269.598364][ T7197] device veth0_vlan entered promiscuous mode [ 269.607997][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.617496][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.626855][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.639356][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.647982][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.656561][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.666167][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.675298][ T3404] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.682340][ T3404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.715465][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.724403][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.736388][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.747509][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.757218][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.766982][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.774087][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.781758][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.803515][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.814638][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.827233][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.835927][ T7197] device veth1_vlan entered promiscuous mode [ 269.846611][ T7052] device veth0_macvtap entered promiscuous mode [ 269.870843][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.879696][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.888762][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.899382][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.908506][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.919929][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.933975][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.945355][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.956364][ T7052] device veth1_macvtap entered promiscuous mode [ 269.979321][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.987461][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.997240][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.007554][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.016550][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.025813][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.035002][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.077917][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.086601][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.096881][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.106599][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.190709][ T7197] device veth0_macvtap entered promiscuous mode [ 270.198315][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.209399][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.220690][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.231911][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.244506][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.253328][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.261573][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.275225][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.284554][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.294496][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.305266][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.314215][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.325671][ T7296] device veth0_vlan entered promiscuous mode [ 270.406125][ T7197] device veth1_macvtap entered promiscuous mode [ 270.416055][ T7460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.426730][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.437604][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.449339][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.460291][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.471734][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.479484][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.488135][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.496079][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.503984][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.512772][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.526675][ T7296] device veth1_vlan entered promiscuous mode 13:34:44 executing program 1: perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x285) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 270.676398][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.687034][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.713216][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.721884][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.743091][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.750642][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.786764][ T7296] device veth0_macvtap entered promiscuous mode [ 270.802413][ C1] hrtimer: interrupt took 46183 ns [ 270.803190][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.824493][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.899027][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.913702][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.925504][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.937179][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.948006][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.960260][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.977476][ T7460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.996905][ T7296] device veth1_macvtap entered promiscuous mode [ 271.048303][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.070515][ T3406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.088765][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.142448][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.154370][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.166985][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.177342][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.187869][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.199589][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.266194][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.280643][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.310712][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.327735][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.338609][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.351596][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.361871][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.372752][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.382656][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.393733][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.405464][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 13:34:45 executing program 2: mount$9p_fd(0x0, 0x0, 0x0, 0x87800000, 0x0) [ 271.491795][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.514004][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.630436][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.655279][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.674746][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.702413][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.712247][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.751622][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.762754][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.773750][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.789339][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.797238][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.807358][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.816235][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.825025][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.931507][ T7460] device veth0_vlan entered promiscuous mode [ 271.957786][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.970141][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 13:34:45 executing program 3: set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0xa) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 271.989111][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.999814][ T3407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.056265][ T7460] device veth1_vlan entered promiscuous mode 13:34:46 executing program 4: [ 272.280180][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.293723][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.319949][ T7460] device veth0_macvtap entered promiscuous mode [ 272.342790][ T7460] device veth1_macvtap entered promiscuous mode [ 272.380894][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.392260][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.402609][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.413813][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.425033][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.436351][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.448835][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.460195][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.470418][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.481076][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.494196][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.503557][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.511700][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.519861][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.529414][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.541948][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.555699][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.566085][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.576559][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.586436][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.596925][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.606858][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.619237][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.629317][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.639950][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.651314][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.678652][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.688404][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:34:46 executing program 5: 13:34:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="665307031dc518cd3a5dffcfe60b582f59a36f9c931ef50b39563a72e490103bda248676f6f04d944002ddab6c92d42cc438bf16b7e955b0fc786aa3e306b3a62ab31f1633f49a5cd7fb6cb9be", 0x4d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:34:46 executing program 1: perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x285) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 13:34:46 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000880)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) 13:34:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSOFTCAR(r0, 0xc0045878, 0x0) 13:34:46 executing program 4: 13:34:46 executing program 4: 13:34:46 executing program 3: 13:34:46 executing program 5: 13:34:46 executing program 4: 13:34:47 executing program 5: 13:34:47 executing program 1: 13:34:47 executing program 3: 13:34:49 executing program 0: 13:34:49 executing program 4: 13:34:49 executing program 5: 13:34:49 executing program 3: 13:34:49 executing program 1: 13:34:49 executing program 2: 13:34:49 executing program 2: 13:34:49 executing program 4: 13:34:49 executing program 3: 13:34:49 executing program 1: 13:34:49 executing program 5: 13:34:49 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) write(r1, &(0x7f0000000100), 0x92000) open$dir(0x0, 0x0, 0x0) 13:34:50 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) write(r1, &(0x7f0000000100), 0x92000) 13:34:50 executing program 4: syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f00000005c0)=@nl, 0x80, 0x0}, 0xffffff63}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}, {&(0x7f0000003180)=""/69, 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f0000003500)}, 0xb1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006ec0)=""/110, 0x6e}}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xd2) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@private0, @in=@broadcast, 0x4e22, 0x69, 0x0, 0x8000, 0xa, 0xe0, 0x20, 0x8}, {0xe5, 0x80000001, 0x80, 0xf6, 0x0, 0x8, 0x401, 0xdaee}, {0x0, 0xfffffffffffffffe, 0x5, 0x7fff}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0xff}, 0xa, @in6=@loopback, 0x3506, 0x2, 0x2, 0x2, 0x0, 0x3}}, 0xe8) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr=0x64010103, @remote}, 0xc) truncate(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 13:34:50 executing program 3: 13:34:50 executing program 5: 13:34:50 executing program 1: 13:34:50 executing program 1: 13:34:50 executing program 5: 13:34:50 executing program 2: 13:34:50 executing program 0: 13:34:50 executing program 3: 13:34:50 executing program 2: 13:34:50 executing program 0: 13:34:50 executing program 1: 13:34:50 executing program 4: 13:34:50 executing program 5: 13:34:50 executing program 3: 13:34:50 executing program 0: 13:34:50 executing program 1: 13:34:50 executing program 2: 13:34:50 executing program 3: 13:34:50 executing program 0: 13:34:50 executing program 1: 13:34:51 executing program 2: 13:34:51 executing program 5: 13:34:51 executing program 4: 13:34:51 executing program 1: 13:34:51 executing program 2: 13:34:51 executing program 5: 13:34:51 executing program 0: 13:34:51 executing program 3: 13:34:51 executing program 1: 13:34:51 executing program 5: 13:34:51 executing program 2: 13:34:51 executing program 4: 13:34:51 executing program 3: 13:34:51 executing program 0: 13:34:51 executing program 1: 13:34:51 executing program 2: 13:34:51 executing program 5: 13:34:51 executing program 4: 13:34:51 executing program 3: 13:34:51 executing program 0: 13:34:51 executing program 1: 13:34:51 executing program 2: 13:34:51 executing program 4: 13:34:51 executing program 5: 13:34:51 executing program 3: 13:34:51 executing program 0: 13:34:51 executing program 4: 13:34:51 executing program 1: 13:34:51 executing program 2: 13:34:51 executing program 5: 13:34:51 executing program 0: 13:34:51 executing program 4: 13:34:51 executing program 3: 13:34:51 executing program 5: 13:34:51 executing program 1: 13:34:51 executing program 2: 13:34:51 executing program 3: 13:34:51 executing program 4: 13:34:51 executing program 0: 13:34:51 executing program 5: 13:34:51 executing program 1: 13:34:51 executing program 3: 13:34:52 executing program 2: 13:34:52 executing program 4: 13:34:52 executing program 1: 13:34:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba3436307f83b947e4b3bbed4d2465ea61dc83f405bdee260e3a5f79b5c7ff3c", 0x6c, 0x404c80a, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x11a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8954a00b915a89af) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/243, 0xf3) 13:34:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) shmat(0x0, &(0x7f000012f000/0x3000)=nil, 0x6000) shmget(0x2, 0x1000, 0x2, &(0x7f00001b7000/0x1000)=nil) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="113c9d8579221c17625f2cc080fc9138", 0x10) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)={0x3ff, 0x3ff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 13:34:52 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000085) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r3, 0x5000aea5, &(0x7f0000000000)=ANY=[]) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r5, 0xc573de0d27bdfe6f, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0xb0, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x8881) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = dup(r8) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000600)={0x1, r9}) 13:34:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x9a0000, 0x5, 0x6, r3, 0x0, &(0x7f0000000180)={0x980919, 0x200, [], @p_u16=&(0x7f0000000100)}}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000200)={0x6}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000140)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) sendto$inet6(r0, &(0x7f0000000080)='9', 0x1, 0x40, 0x0, 0x0) 13:34:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000772ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getpeername$inet(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet(0x2, 0x3, 0x4) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x200, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141280, 0xcb) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000300)={0x8001, 0x3, 0x4, 0x8, 0x8, {r9, r10/1000+60000}, {0x2, 0x0, 0xfa, 0x20, 0x3f, 0xd3, "deb4414c"}, 0x8903, 0x4, @offset=0x4, 0x6, 0x0, r7}) 13:34:52 executing program 4: syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000777125400120001adbc6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 278.321453][ T8304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:34:52 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="665f07000005eb301420664f1af1b146ad157b6e3873bc33760036f30000ff61af074bc5e034ee9fc0c6b18f3b92d043c1", 0x31}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x101) prlimit64(r1, 0x1, &(0x7f0000000040)={0x7fffffff, 0x1}, &(0x7f0000000140)) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 278.403584][ T8311] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 278.509441][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:34:52 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x804803, 0x0) socket(0x25, 0x0, 0xe46) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x22081, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x8, 0x2, 0xbe0b, 0x5, &(0x7f0000000340)=[{}, {}]}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4}, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x1}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x3ae1, [], @p_u32=&(0x7f0000000040)=0x7fffffff}}) [ 278.665376][ T8311] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 13:34:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="f2bde58d379f2d5ddda43509e0db5c547c2f2d3499f101c491176d7b9618f5abbf0cc685fb5eceeb2534991429a79cf9445f348419c6673dffa61c38bd511984e34a678097c15b8fe98169d37b78dfe99957b48a1439110ce480a7ebc2c5dea46d4bd6e73a31d9ebe3b510790bb630843a82ce9f13b0f12ff5993f88a277a20c6d5386fd3f14745086605a1598434524b7966228dac796b141dee2f252499fa0a3cb9017080f8e2cac55622cb6faa9c44ef53a88944680fac26528a2bd20361bf5ae7da33e96c73680d17e88e23350e0a9697f36a7d8adf0b2e9ab4aeb5a14c602782be293d065fa37dfdb51c2a1e459b8c4fed2", 0xf4}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:34:52 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r5) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x80000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@obj_role={'obj_role', 0x3d, '/dev/ubi_ctrl\x00'}}, {@obj_type={'obj_type', 0x3d, '\\#]-\'y]{-%*-:'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@euid_gt={'euid>', r6}}, {@pcr={'pcr', 0x3d, 0x3a}}, {@audit='audit'}]}}) [ 278.762358][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 278.887879][ T8339] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 278.919815][ T8339] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 278.942596][ T8339] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 278.975822][ T8339] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:34:52 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x804803, 0x0) socket(0x25, 0x0, 0xe46) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x22081, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x8, 0x2, 0xbe0b, 0x5, &(0x7f0000000340)=[{}, {}]}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4}, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x1}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x3ae1, [], @p_u32=&(0x7f0000000040)=0x7fffffff}}) [ 279.048434][ T8339] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 279.072472][ T2474] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 279.132558][ T23] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=c6.db [ 279.141764][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.199753][ T23] usb 5-1: config 0 descriptor?? 13:34:53 executing program 2: userfaultfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) gettid() r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x9a0000, 0x4, 0x2, r3, 0x0, &(0x7f0000000180)={0x990a7a, 0x5cbe787a, [], @p_u8=&(0x7f0000000140)=0x8}}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000200)={0x73, @empty, 0x4e21, 0x3, 'none\x00', 0x19, 0x10001, 0x31}, 0x2c) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481141ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a683059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 13:34:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000440)="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", 0xc16}], 0x0, 0x0) [ 279.384017][ T8369] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 279.407508][ T8369] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 279.462774][ T2474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.488644][ T8369] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 279.509157][ T8378] kvm: emulating exchange as write [ 279.532924][ T8369] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 279.594845][ T8369] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 279.632360][ T2474] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 279.665886][ T2474] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 279.701984][ T2474] usb 2-1: Product: syz [ 279.761676][ T2474] usb 2-1: Manufacturer: syz 13:34:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, @in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @remote}, 0x8000}, @in={0x2, 0x4e22, @remote}], 0x3c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 279.837227][ T2474] usb 2-1: config 0 descriptor?? 13:34:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000580)) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)=']\x00', &(0x7f00000000c0)='./file0\x00', r4) close(r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r6, 0x8}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500250000000000"], 0x3c}}, 0x0) [ 279.912150][ T2474] usb 2-1: bad CDC descriptors [ 279.939083][ T2474] usb 2-1: bad CDC descriptors [ 279.956017][ T2474] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 279.987118][ T2474] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 280.011138][ T2474] cdc_acm: probe of 2-1:0.0 failed with error -22 13:34:54 executing program 0: r0 = socket(0x1a, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002805de4d1999681b50b000419abb06373656300e10b0002fb0400ff200003e1ff0a004df91be3a8e7b29d161aa2653a9831bcf1a3d5e93bf3c6060000000000000048bbcfe90000000000"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 280.125419][ T3405] usb 2-1: USB disconnect, device number 2 [ 280.142492][ T23] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 280.162905][ T23] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 13:34:54 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050021000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRESDEC=r4], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={0x1}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000580)) r7 = pidfd_getfd(r6, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = dup(r8) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x6, 'virt_wifi0\x00', {0x7ff}, 0x7fe}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) [ 280.212973][ T23] asix: probe of 5-1:0.0 failed with error -71 [ 280.240112][ T23] usb 5-1: USB disconnect, device number 2 [ 280.247671][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.327069][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.902437][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 280.932398][ T3407] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 281.262297][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 13:34:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xa55, 0x20001000, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) poll(0x0, 0x0, 0x204) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) [ 281.372211][ T3407] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 281.379810][ T3407] usb 5-1: can't read configurations, error -71 [ 281.392831][ T23] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 281.401974][ T23] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 281.411073][ T23] usb 2-1: Product: syz [ 281.415983][ T23] usb 2-1: Manufacturer: syz [ 281.425706][ T23] usb 2-1: config 0 descriptor?? [ 281.470529][ T23] usb 2-1: bad CDC descriptors [ 281.479589][ T23] usb 2-1: bad CDC descriptors [ 281.497356][ T23] cdc_acm 2-1:0.0: Control and data interfaces are not separated! 13:34:55 executing program 5: r0 = socket$inet(0x10, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a00030a1f0000080c1008000800060012000000140000001a00ffffba16a0aa1c090000b37c0000", 0x6d}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "23935979f2fb2aeb", "4a95c977885c96776cf0e3fa20c9e309", "f90c07f1", "17326160f99763d6"}, 0x28) 13:34:55 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) unlinkat(r0, &(0x7f0000000080)='./bus\x00', 0x200) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on']) chdir(&(0x7f0000000340)='./bus\x00') setxattr$security_evm(&(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0) [ 281.516853][ T23] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 281.537407][ T23] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 281.603380][ T8463] overlayfs: filesystem on './file1' not supported as upperdir [ 281.673721][ T2474] usb 2-1: USB disconnect, device number 3 13:34:55 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) unlinkat(r0, &(0x7f0000000080)='./bus\x00', 0x200) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on']) chdir(&(0x7f0000000340)='./bus\x00') setxattr$security_evm(&(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0) 13:34:55 executing program 4: syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000777125400120001adbc6000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 13:34:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x33) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6006000000b3fe4ad60411dd604ecc1d3a8a193a82d8e6", @ANYRES32=0x0, @ANYBLOB="bb0e0000000000003000128009000100766c616e00000000200002aac67efcd7762146000c000200160000000e0000000600050088a8000008000500f3e7b256cd67428766862404094897c163f2679f477f2402cad8f8e50e0a484e631cd66ad2853704a8f6320db332f73ad0078b8dfe9460cefab72f8560e0e503e5742bb139c4b96dd7cac4d04b95b48b0f43a33e7260bb4c6a4f28f2b3dea20c666bf095ad97e19456d61979f891da470e1cde691e3bdc2460b0da04fbade3e962753566e49929da85f809a8abed", @ANYRES32=r2], 0x60}}, 0x0) r3 = socket(0x21, 0x6, 0x4) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) 13:34:55 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r5) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x80000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@obj_role={'obj_role', 0x3d, '/dev/ubi_ctrl\x00'}}, {@obj_type={'obj_type', 0x3d, '\\#]-\'y]{-%*-:'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@euid_gt={'euid>', r6}}, {@pcr={'pcr', 0x3d, 0x3a}}, {@audit='audit'}]}}) 13:34:55 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@remote={[], 0x2}, 0xb, 'team_slave_1\x00'}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/31) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x4000, 0x3, 0x20000003, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @empty}, 0x35) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000040)={0x7, 0x6, 0x1fe}) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @timestamp, @mss, @window, @window, @sack_perm, @sack_perm, @timestamp], 0x2000000000000283) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x347, 0x32fe3cf0}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9aec) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 13:34:55 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x80800, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f000037153e", 0x23}], 0x1000000000000167}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:34:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x805}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x1}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) chown(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x76, 0x57}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 13:34:56 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x3, 0x200, 0x9}) perf_event_open(&(0x7f000025c000)={0x2, 0xfffffffffffffd2d, 0xe9, 0xff, 0xfc, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x400000, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x800, 0x4) 13:34:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xa55, 0x20001000, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) poll(0x0, 0x0, 0x204) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) 13:34:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x5}}, 0xffffffffffffffff, 0x0, r1, 0x1) r2 = getpid() r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x16, &(0x7f0000000100)={0x10, 0x1ff}) ptrace$pokeuser(0x6, r2, 0x388, 0x8) r4 = getpid() getpid() write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r3, @ANYRESHEX=r4, @ANYRESDEC, @ANYRES32=r1, @ANYRESHEX, @ANYRES32], 0x32600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) getsockopt$sock_buf(r7, 0x1, 0x3d, 0x0, &(0x7f0000000580)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000000)=0xff) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0xda00) r8 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xcd87, 0x202) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) write$cgroup_int(r5, &(0x7f0000000200), 0x434c0) [ 282.272340][ T2474] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 282.307896][ T3407] usb 5-1: new high-speed USB device number 4 using dummy_hcd 13:34:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r2) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r3, r4, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000280)=""/66, &(0x7f0000000300)=0x42) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={{0x2, 0x0, @descriptor="1dd74189b3fe5247"}, 0x3e, r3, [], "e30c9fa994e6ddcc417003515a68f16066eb228288aa44620d9cade66a361dc078df30c1e006c92a93dc4549b777f59acb892a8e71e867c96ab1349a5b74"}) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000040)='/dev/net/tun\x00', &(0x7f0000000240)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 13:34:56 executing program 5: r0 = memfd_create(&(0x7f0000000040)='{],/:\x00', 0x5) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb990}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000002c0)=0x48f) [ 282.642728][ T2474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.687892][ T3407] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=c6.db [ 282.710200][ T3407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.739721][ T3407] usb 5-1: config 0 descriptor?? [ 282.782684][ T2474] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 282.791751][ T2474] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 282.810675][ T2474] usb 2-1: Product: syz [ 282.833588][ T2474] usb 2-1: Manufacturer: syz 13:34:56 executing program 5: r0 = memfd_create(&(0x7f0000000040)='{],/:\x00', 0x5) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb990}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000002c0)=0x48f) [ 282.856861][ T2474] usb 2-1: config 0 descriptor?? [ 282.919921][ T2474] usb 2-1: bad CDC descriptors [ 282.926766][ T2474] usb 2-1: bad CDC descriptors [ 282.931926][ T2474] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 282.954186][ T2474] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 282.961416][ T2474] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 283.162269][ T3404] usb 2-1: USB disconnect, device number 4 [ 283.666373][ T3407] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 283.689869][ T3407] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 283.709281][ T3407] asix: probe of 5-1:0.0 failed with error -71 [ 283.717869][ T3407] usb 5-1: USB disconnect, device number 4 13:34:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000f40)=[{{&(0x7f00000001c0)=@ipx={0x4, 0xfd3, 0x7ff, "c411ff416714", 0x79}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="e0adf3f15934fd5c4ad16cef8c423b4b715a7d81e4c0178215bd009792e0098ba2c896115e7e564169fb3086af96d410e6509ee427c6e9e52dadc1a17c8c693d4d7d691eb19127c31999174b5e588df8842ea7b625e2526a245c1c5d35946e83229d0d0415b690dcdc0812d38a5dedab9ed97dfefb6ecb935d2371348baf228e6e61b1f47b5cc670894d2e958432ff8f67f825bc8921523e2c3a9121fd736a48c4feb22a6d954d35ccb78083c2a7cddb884e990c84a79279d4fcc97ab43c7953925c7c3b29defe3b072c5405529c46e2e8de5b9950be4ea02f08f73b", 0xdc}, {&(0x7f00000004c0)="c1bf2dc919a9b4c9ced7e9dda7ad9298ca6bfb37fc5fc3e0f620ae2f1bf9c7ce89ae051ca7469c6103dfefd2b72a64ff9a46226be9d52a8e86139730f70c4125cf419b018e2368bcda1ea51b044e2de7b8a0ee5aa9fa039d8b2c73", 0x5b}], 0x2}}, {{&(0x7f0000000580)=@l2={0x1f, 0xfff, @none, 0x1, 0x1}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000600)="df07b34f762f0d965661e6ae5dfc87597ab45b4bfec3f8d9f4b4d7ef8702d2650a64df912fc702f3af68df519aaa280d80087fee27929e2d7af53c185ac7fd8ca51e90", 0x43}, {&(0x7f0000000680)="8f66d577a5086b522e1ebe961076fdcb9cfc749ffcb62df07f685b040bd290750e8d4a11c1745bf30cf9d146a66b470546f36349559e2ddc03353898ee3d8df526ae5620a6dd173a4fc4f86e4c11a0247d0fa9e14b076b", 0x57}, {&(0x7f0000000700)="38dc41202875b521058c45ce832732d55857f5674f52a9284986f41ac678885905187105c932d0f3b065ca84e8c64d9715d66e626554472a6b8847946c5b73f3961a07e44a13be9d03e199e38e3882fe45c3d751cfcb8a76d575e3937873e808cf54a9c6a27cd285ddfef1ce68fdf6209d13040f9a479bfc23999d3120b77a083e3bcbdd61bbc3906cd5be63914f98e4c489bb21fa2af889a2453cef37eb480c3446f1641cd55440aa065e7a65d8311b3d364653ad826fdbc52e049e8c9afae443a1e97a9a59e7fa32080e", 0xcb}, {&(0x7f0000000800)="fd847e1295e7ae9988e117a8fe6d1335710bf5401139c96b767a7f136ce30c8e8ef8b0945f5ec7db23bc33891f3644105f0c4d19c18b3edbb69e0c1c4b94cb6a308e39ce2977ece0f638e3ad592056d2c13e5900e96f3c4b1b24dd86ff47ac22f5c482e316ad0df686d5454dacac6dc622e6e7d4240f926d4c833bfee4095399258c9d4ae3d5bc33f1664b9579644e8a707f5d09a4ce727efba66f9c436c417d8f8f4e6bb6ada6914e8ab041fd8b158b68dff6c7a18b233177930964bf6c73bbb9082ba6f7a6fc07d6c8df", 0xcb}, {&(0x7f0000000900)="047fa942dec727464d6dcc39ba71acb096d8a6a48f555da41694e2cc659b8ead7d941b1023f086bc82ba19c63cacdd629b14f474999fede73e9333dcae0af79581ab3108e85da3c4aeb18c374af6fa99183c42f213752e39cc6898f06fbb2bc7ab091b3316402848b65642f933d8918b88732e1ea25e", 0x76}, {&(0x7f0000000980)="dbd72a3e08d379844bd28b9344a0baedfb6d414aa522b51463cc9384006c3174823f7f6e32242d24b0582d5d7021a3a233a4dcf6eb2ac4e6bc8b1a5434e6c5340f7df56487055086b6655d68de6a0b4a7154f6f29063", 0x56}, {&(0x7f0000000a00)="60c8d65371f3201ca6442c63b70ae5cad794a7c0717fdf7684ffef7ac6e65262227db6642a07e06b5ce31c50f82bc8e6af4f22328b42babaa4d9a9797e4baf867def05b619f612d8e4a1af9e0424237ee075f9391c0020e81ac0ca576af6aa73b5b824280020041eb63c5fdaddfd19151c32b0657d4fa20124a0b26d6d89e51a90", 0x81}], 0x7, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)="835872bf8cd92b183ed50a334c88ac4482cf509d292b4f5375dd84e9481235ea856ec2d396", 0x25}, {&(0x7f0000000c40)="ebfdbe92da1631bbb2a809c2bdcee87ec6efd76516216fd446c9d83316bf24a0eaad8a12b01bd1bab7459f2b925657eb41aa38a44cb1bace4cbfb9c8c0c2ad3f3c4083ca2caa642dda8e5978be6d7e76664cca4c9b2733ad74480a51da74bc752cef98e1005a4cc5ed724c9906074776ab20ef6f22ddcdd51f06dbf8a9848b740d7f533ef20a45a2b20d2ee0afe6c2926f72ca02c8e37f811353ab80", 0x9c}, {&(0x7f0000000d00)="527cb2bfa11e4650b9d31e48d9a70c795679ca043b6ee371098e5c6fbdb8eacc0bbbe0", 0x23}, {&(0x7f0000000d40)="367c0a2a05d8cd96aaf0dff1ec0ede857cb325baed4849ef19178fe4eb6fb4059a13321af7f211ad73", 0x29}, {&(0x7f0000000d80)="1b84142be20a58758ab8ae41eeda01dfac277be4e12a712d77823701cf069e35db6d7abda2c13ad6e5bf4aea05843fc1bf23b0f7a1aae203646b36c3d416ff7815eb92e6299f1c8c43d8e3cc", 0x4c}], 0x5, &(0x7f0000000e80)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xc0}}], 0x3, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x4e24, 0x4, 'fo\x00', 0x38, 0x3, 0x7b}, 0x2c) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r6 = pidfd_getfd(r1, r5, 0x0) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2, 0x3f, 0x5, 0x2}, {0x200, 0x1, 0x2, 0x1b}]}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) getsockname(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000002c0)=0x80) 13:34:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000040)) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x101, 0x7, 0x40, 0xff, 0x3, @multicast}, 0x10) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7, 0x0, 0x0, 0x1f}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) shmget(0x2, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) 13:34:58 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x90dd) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202003100050fd25a80648c63940d0624fc601000034002000000051a82c137153e6708000380c00e0000d1bd", 0x2e}], 0x1}, 0x2400c004) 13:34:58 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r5) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x80000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@obj_role={'obj_role', 0x3d, '/dev/ubi_ctrl\x00'}}, {@obj_type={'obj_type', 0x3d, '\\#]-\'y]{-%*-:'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@euid_gt={'euid>', r6}}, {@pcr={'pcr', 0x3d, 0x3a}}, {@audit='audit'}]}}) 13:34:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000100)=0x4) getsockopt$sock_buf(r3, 0x1, 0x3d, 0x0, &(0x7f0000000580)=0x62) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0x8}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) [ 284.532171][ T3407] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.934533][ T3407] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 13:34:58 executing program 3: syz_mount_image$nfs(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='netdevsim\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$RTC_PIE_OFF(r1, 0x7006) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000000)={0x81, 0xf3}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x80000000, 0x3136564e, 0x2, @stepwise={0x1200, 0xfffffffb, 0xffff, 0x1, 0xfb05, 0x3fc00}}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) 13:34:58 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = socket$inet(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) flistxattr(r3, &(0x7f00000000c0)=""/8, 0x8) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r4, 0x3, &(0x7f0000000040)={&(0x7f00000005c0)=""/4096, 0x1000}) mq_open(&(0x7f0000000480)='[em\x9d\n\xc0P^\xa1\xbfn\x19j\x90\xa9\xe4[\x8c0\x10^1\t\xe4\x80\xbae\xdc\xedVh\xa6M\xf0\x8d\xd5G\n\xca\xa1\xb2\xfdkR\xae\x98\x01=c\xbf7\xd0\xcf\xc0\xe8\xcc\xe0\x16\x88\xb8k\xa4\xa9!\xa8\xb2I8\x92+\x01\x87\xe9\xf5,\x80\x1d{\x88m\xfc\x16T\x94~\x8e\xe8\xda&.\xa4\xac\xbf\xa2\r:Y\xb1 \x80\xfe\x91f\x8b\xb1\xd5\xbe\xdd5\xce\xa9\xee\xcf\xb9\x80\xb5t:8\x85\xb9]\xfe|r\xe6\xbe\xc2\xc2\x17A\xec\xc2\v\xdd\x0eb\xc0F\x06\xf5\xae\xbf.(UB\xffE\xfd\xbe\x9eU\xc1\xff\xf3\x86\x1a\x05\b\xafA\xd2\xb7\"yT\xb2\xcb\xac\xe6\x9fr\xa7\xab\xcf\x9f\xf4[mG\xc3B\xa4Fc\xa6\xf0y\xe5N\xd2\x8f\x81\xd5\xfe\xa2\x88n\xab\x84\x82\xccun8%\x98-\xaaN\x8e\xe5\xe7\x16\xb3x)v\xb2\xe9&\\n\xfcXK\xeb\xa0}=\x16Ri\x9f0p\x1f\xf0\xb9}w\xe2v\xc5Hpp(\x80S\xac\x8c1uiU\x03_)r\x85\xf2\xab\xa9\x1cl\x1b\x1c\x16u\x01s\x8a', 0x0, 0x0, 0x0) 13:34:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="9af1accf3ec000f30f200766baf80cb8548a6888ef66bafc0cedf2ac650f30c4c2f9a6f52e0fef300f011f650f796c80b566baf80cb8a796a388ef66bafc0cec", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000100), &(0x7f0000000200)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f00000000c0)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffe}]}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:34:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0096616, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x8dffffff}, 0x80, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002e80)={&(0x7f0000002e40)='./file0\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x8001a0, 0xe80, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x3b, 0x0, 0x22d}, 0x28) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000b00)=[{&(0x7f00000000c0)=0x1, 0x1}, {&(0x7f0000000100)=0x1}, {&(0x7f0000000140), 0x1}, {&(0x7f0000000280), 0x2}, {&(0x7f00000002c0), 0x1}, {&(0x7f0000000300)=0x1, 0x1}, {&(0x7f00000003c0)=0x1, 0x1}, {&(0x7f0000000400)}, {&(0x7f0000000440)=0x1, 0x1}, {&(0x7f0000000500)=0x1, 0x2}, {&(0x7f0000000540), 0x2}, {&(0x7f0000000580)=0x1}, {&(0x7f00000005c0), 0x2}, {&(0x7f0000000600), 0x1}, {&(0x7f0000000640)=0x1, 0x1}, {&(0x7f0000000680)=0x1}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=0x2, 0x1}, {&(0x7f0000000a00)=0x1, 0x2}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=0x1, 0x1}, {&(0x7f0000000ac0), 0x2}], 0xd, 0x16, &(0x7f0000000c80)={0x77359400}, 0x0, 0x0) r3 = perf_event_open$cgroup(0x0, r1, 0xb, r1, 0x1) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x1f, 0x26, 0x7f, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xf73}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0x2, r3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x42400, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0096616, 0x0) 13:34:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000040)) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x101, 0x7, 0x40, 0xff, 0x3, @multicast}, 0x10) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7, 0x0, 0x0, 0x1f}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) shmget(0x2, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) [ 285.072536][ T3407] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 285.081599][ T3407] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 285.102004][ T3407] usb 2-1: Product: syz [ 285.120183][ T3407] usb 2-1: Manufacturer: syz [ 285.137191][ T3407] usb 2-1: config 0 descriptor?? [ 285.204024][ T3407] usb 2-1: bad CDC descriptors [ 285.215328][ T3407] usb 2-1: bad CDC descriptors 13:34:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x12a}, {&(0x7f0000000380)="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", 0x160}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 285.258406][ T3407] cdc_acm 2-1:0.0: Control and data interfaces are not separated! 13:34:59 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x3c}, 0x8}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x1) [ 285.324042][ T3407] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 285.363699][ T3407] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 285.434119][ T8628] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 285.491379][ T3406] usb 2-1: USB disconnect, device number 5 [ 285.493732][ T8632] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 13:34:59 executing program 4: open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x3, 0x4) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 285.586665][ T8632] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 13:34:59 executing program 5: unshare(0x40000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x339, 0x0) timerfd_create(0x6, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) 13:34:59 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x7ffffe, 0x4002011, r2, 0x4c893000) ftruncate(r0, 0x200004) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 285.825178][ T8655] IPVS: ftp: loaded support on port[0] = 21 [ 285.840673][ T8656] nfs: Unknown parameter 'netdevsim' [ 285.961440][ T8656] nfs: Unknown parameter 'netdevsim' 13:34:59 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r5) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x80000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@obj_role={'obj_role', 0x3d, '/dev/ubi_ctrl\x00'}}, {@obj_type={'obj_type', 0x3d, '\\#]-\'y]{-%*-:'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@euid_gt={'euid>', r6}}, {@pcr={'pcr', 0x3d, 0x3a}}, {@audit='audit'}]}}) 13:34:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000580)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r3, 0x4) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f00000001c0)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40000, 0x0, "98cc8ffac2d9798000"}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) 13:34:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x100000000802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) move_pages(r5, 0x6, &(0x7f00000000c0)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000100)=[0x7, 0x0, 0x3ff, 0xcc1, 0x6, 0x5, 0xffffff45], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xf3be1b829a9f5f42) 13:34:59 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x40) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6c6f7765726469723d2e2e6275732c776f736b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530133c2c9eed8fbfdb89a9381f17168c82c41c9c4da0b8ce7791f48ee778d09a17b25eb4f2c5ceb5a78d35292dce2a3dd2bfa9608b2de135a5d9876a88b29f49f835a4d0c20e595672af54356584013a9343ae635221"]) chdir(&(0x7f00000002c0)='./bus\x00') syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x3f, 0x5, &(0x7f0000000680)=[{&(0x7f00000001c0)="c5f816f5b566c5de5f7b8562663beafeba7a", 0x12, 0x40}, {&(0x7f0000000300)="305fe8314c78ad2fa8fb52450d5df75ccefde14c8ebc60b616f41a4449f228edb04be76865cd8a6591dfd30a6f1c38f3a25a5521f5bdb2c36e5fcaa70b9631f6992bbbfb120e52bf6538812e8b56c0e7ba0cb1df9093b4df6f85bf53969e8ab3f6b7255d6749fbe32c336ee2a9379decd72ac76e1fa8a6af4aba283955f1c9eb02c02beb935bfd3da3cc1154238ed86edcbe8edb18be2be3a0e2a7199992fb208e02705e4bcdda48c74d97f0611e3e90739380aec2b5085eae0399966825", 0xbe, 0xb59}, {&(0x7f00000004c0)="c11cee31c7c071842c845fb0e0d6f1ff2512a78246fba7f905631098c1e50fd52b2e92ac1c041fc216edad5a6f08ad720af94c0eb35b2f420286120596d4994d7e4b3efb43d9cae535bdb55b88c3c90667e9fd61e55d3bd0e72d95b1fadfbe39665d7f08bb01f132df913b004432475c0f87000585277ad9e0034712f8bd4cf9b05ee634b0eba2dd4d863aa3fb5396b8af57687e687330362d0352eb8bbc3f49385cf99b5c23417b2919119da547c09a265d7dec4261f4a442aa2a826c6d7ff04e7d0f52d7eec73e20405b260be2ace26f2422243362943e906f8bb7da26213753", 0xe1, 0x8000}, {&(0x7f00000003c0)="f0ca1a691c1d90e1521dfa682cd2d779aed4f506871dfc5fdc48ff7d3e738a92250433b33eb2499d4374da79d91bf9ea323889d4bd20d2bf3db66d0c19a7b1b64f01d0cb75de07fc2ea09cf835a49f6854d77a656d98b30a50a8d0d69c850f65bb7ea5d09d9703934093525213af28f1eddfb68d101786", 0x77, 0x79}, {&(0x7f00000005c0)="1f4f96035c3cf6068344d8738de214b3ea4dc53d493c12754ddf6400acdd3f1ced46cd73c988a774c36c73a4a9d23d35b8871ca8833eb4019d76db60d0ff340e50e1a8ec73553d52a0428e8411f1c71081776b30ac5279fa68ec097b5497fe98cb20401e30ed4f19241be908e5606adc3c6e345da2111af153ad7af4494f4b414f1c4a8e0690bc13617ed34a44e5d149d55813164c", 0x95, 0x7}], 0x4000, &(0x7f0000000700)={[{@balloc_test4='block-allocator=test4'}, {@hash_rupasov='hash=rupasov'}, {@commit={'commit', 0x3d, 0x7}}, {@errors_continue='errors=continue'}, {@data_writeback='data=writeback'}], [{@audit='audit'}, {@subj_type={'subj_type', 0x3d, '%\x03'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xf6$'}}]}) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) bind$llc(0xffffffffffffffff, &(0x7f0000000d40)={0x1a, 0x339, 0x97, 0xae, 0x2, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 13:34:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private0={0xfc, 0x0, [], 0x1}, r4}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r5], 0x24}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) [ 286.146198][ T8690] EXT4-fs (loop2): filesystem is read-only [ 286.154252][ T8694] overlayfs: unrecognized mount option "woskdir=./file1" or missing value [ 286.163525][ T8690] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 30050 [ 286.206720][ T8655] IPVS: ftp: loaded support on port[0] = 21 [ 286.270241][ T8694] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "hash=rupasov" [ 286.284883][ T8704] EXT4-fs (loop2): unsupported inode size: 12336 [ 286.301543][ T8704] EXT4-fs (loop2): blocksize: 4096 13:35:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000040)={{0x3, 0x0, @descriptor="798b325e22189bcd"}}) ioctl$TIOCOUTQ(r1, 0x5411, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 286.320412][ T29] audit: type=1804 audit(1593869700.162:2): pid=8709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir961462973/syzkaller.kXAtVb/23/bus/bus" dev="sda1" ino=15867 res=1 [ 286.452305][ T2486] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 286.473551][ T8694] overlayfs: unrecognized mount option "woskdir=./file1" or missing value 13:35:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x7) ioctl$TIOCSETD(r1, 0x8910, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0xc9, 0x8, 0x4, 0x3, 0x8, 0x9bb8}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) [ 286.499188][ T8709] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "hash=rupasov" [ 286.516539][ T29] audit: type=1804 audit(1593869700.342:3): pid=8733 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir961462973/syzkaller.kXAtVb/23/bus/bus" dev="sda1" ino=15867 res=1 13:35:00 executing program 5: unshare(0x40000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x339, 0x0) timerfd_create(0x6, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) 13:35:00 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000001006866736300000000080002c9c04ac16626d9b2bc5b5b437fb6f0830210c6aab28dbbda7affed148354359a46abc4dd8d18e14c364dd5068be632e7a47f37c2ca165168836fbc21ab2b77529d2cdb"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000000a00006f7700000000400002003c000b8008000100050200003000020100000007000000000000000000000000001800020000000100ff00000000000000000000000000000000000000000000e83cfe45ff3583e072d7df87d4753ee0325cd37b2f4acc95f9d1f6a8bcc22366dd4e650d079cfd39edc92d8312ce85a1b4f63757b6610b041545aed9d9a8abd025d418a4073b3c2c53b4755c1b21b42dd59236378e7c887e4ff9119765"], 0x70}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @ax25={0x3, @bcast, 0x3}, @ipx={0x4, 0xef0d, 0x6, "28f6c56eaec7", 0x7}, @xdp={0x2c, 0x0, r6, 0x35}, 0x983, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x5, 0x7}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={@private1, 0x5e, r7}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc561f2b0ba5b2166}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x5, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8880) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 286.713377][ T26] tipc: TX() has been purged, node left! [ 286.751266][ T8743] sp0: Synchronizing with TNC [ 286.822485][ T2486] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.850618][ T8751] IPVS: ftp: loaded support on port[0] = 21 [ 286.964872][ T2486] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be 13:35:00 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x2000, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000400)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq'}}]}}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f00000000c0)=""/65) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_mount_image$tmpfs(&(0x7f0000000280)='tmpfs\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="e3132b95c80bff558d9a89a17013c9d00f9b242d284b6340d78a00de61d3f59d339d2047becfd4277cc3fd011ae7355031164414853d07653978d263586cbeae2f2fd318f9c0c59ed99737ce6868805e19547e2f3f3716be7f1177821d8f540751bfb4f959ae", 0x66, 0x995}], 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) socket$nl_route(0x10, 0x3, 0x0) [ 287.006268][ T2486] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 287.064036][ T2486] usb 2-1: Product: syz [ 287.093157][ T2486] usb 2-1: Manufacturer: syz [ 287.131605][ T2486] usb 2-1: config 0 descriptor?? [ 287.203220][ T2486] usb 2-1: bad CDC descriptors [ 287.210120][ T2486] usb 2-1: bad CDC descriptors [ 287.262138][ T2486] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 287.303876][ T2486] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 287.353821][ T2486] cdc_acm: probe of 2-1:0.0 failed with error -22 13:35:01 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000100), 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0xfff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev, @in6=@empty, 0x4e22, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x0, 0x67}, {0x0, 0x8, 0x0, 0x0, 0x1ff}, {0x0, 0xfffffffffffffffa, 0x9}, 0x5, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1}, 0xa, @in=@multicast2, 0x0, 0x0, 0x0, 0x1, 0xfffffe01}}, 0xe8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x800, 0x9b) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000140)=[0x0, 0x1ca]) 13:35:01 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x2000, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000400)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq'}}]}}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f00000000c0)=""/65) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_mount_image$tmpfs(&(0x7f0000000280)='tmpfs\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="e3132b95c80bff558d9a89a17013c9d00f9b242d284b6340d78a00de61d3f59d339d2047becfd4277cc3fd011ae7355031164414853d07653978d263586cbeae2f2fd318f9c0c59ed99737ce6868805e19547e2f3f3716be7f1177821d8f540751bfb4f959ae", 0x66, 0x995}], 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) socket$nl_route(0x10, 0x3, 0x0) [ 287.435385][ T2486] usb 2-1: USB disconnect, device number 6 13:35:01 executing program 5: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x4a, @loopback, 0x0, 0x0, 'lblcr\x00'}, {@empty, 0x0, 0x10000}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000580)) read$usbmon(0xffffffffffffffff, &(0x7f0000000300)=""/97, 0x61) ftruncate(r1, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x100) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r3, r2, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x11) write$binfmt_elf64(r5, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r5, r4, 0x0, 0xa198) 13:35:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000140)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002000100000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r2}}, 0x24}}, 0x0) 13:35:01 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x400) [ 288.115453][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.140054][ T8813] FAT-fs (loop5): bogus number of reserved sectors [ 288.167877][ T8813] FAT-fs (loop5): Can't find a valid FAT filesystem [ 288.209383][ T8791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 288.239848][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.322751][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.412125][ T2486] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 288.490403][ T29] audit: type=1804 audit(1593869702.332:4): pid=8824 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/30/file0/file0" dev="sda1" ino=15871 res=1 13:35:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x9, 0x4}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010000008000000000000c00028008001b0000000000"], 0x3c}}, 0x0) 13:35:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getpid() write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="c4e3121e9295f9b9f46d858b3b3f480ea7a8e55b5d0480920a268dfe3a87139027ca6a07c75b49645f25414b4f9c49e7f993d205378fd524efc64da7208f2f0be76efc7a60650fbbd85fc86c58416e73326c3ca06cc1771da4f0e5b03c8198b199e71a06b009bae9a452e92768c64e134e6cc1fb4baa666945a33f85929257ddae0990b9903cc194247854f0e8804058b54610223afa2c704ced7f43d1b84e"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000040)={0x100, 0x9}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0xb00000000065808, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) r8 = socket(0x10, 0xdc8d931fea7e14f1, 0x3) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES64=r7, @ANYRES32=r2], 0x5c}}, 0x50) sendfile(r6, r5, 0x0, 0x8000096a7) [ 288.639940][ T29] audit: type=1804 audit(1593869702.372:5): pid=8824 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/30/file0/file0" dev="sda1" ino=15871 res=1 [ 288.782298][ T2486] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.940256][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.950366][ T2486] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 288.963702][ T2486] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 288.972230][ T29] audit: type=1804 audit(1593869702.813:6): pid=8842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/30/file0/file0" dev="sda1" ino=15871 res=1 [ 289.000045][ T8830] FAT-fs (loop5): bogus number of reserved sectors [ 289.000065][ T2486] usb 2-1: Product: syz [ 289.012532][ T2486] usb 2-1: Manufacturer: syz [ 289.019932][ T8830] FAT-fs (loop5): Can't find a valid FAT filesystem [ 289.023653][ T2486] usb 2-1: config 0 descriptor?? [ 289.046961][ T29] audit: type=1804 audit(1593869702.863:7): pid=8844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/30/file0/file0" dev="sda1" ino=15871 res=1 [ 289.084525][ T2486] usb 2-1: bad CDC descriptors [ 289.092221][ T2486] usb 2-1: bad CDC descriptors [ 289.116654][ T2486] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 289.155868][ T2486] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 289.176992][ T2486] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 289.208694][ T29] audit: type=1804 audit(1593869702.863:8): pid=8842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/30/file0/file0" dev="sda1" ino=15871 res=1 [ 289.278563][ T3406] usb 2-1: USB disconnect, device number 7 [ 289.294976][ T29] audit: type=1804 audit(1593869702.863:9): pid=8844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/30/file0/file0" dev="sda1" ino=15871 res=1 [ 289.355030][ T29] audit: type=1804 audit(1593869702.863:10): pid=8842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/30/file0/file0" dev="sda1" ino=15871 res=1 13:35:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000002000}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0xfff, 0x101, 0x45, 0x1f, 0x28, 0x80, 0x6, 0x40, 0x9, 0x3f, 0x2, 0x0, 0x3}, {0x6, 0x1, 0x2, 0x0, 0x0, 0x9, 0xff, 0x3f, 0x9e, 0x1, 0x32, 0xc0, 0x10001}, {0x81, 0xb26, 0x11, 0x0, 0x3, 0x3, 0x0, 0x7, 0x20, 0x40, 0x6, 0xc0, 0x8001}], 0x8001}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x46, 0x0, 0x4b) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') dup3(r2, r5, 0x0) dup2(r1, r6) 13:35:05 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa0e3}, r0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4f4edc5b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_SET(r2, 0x0, 0x4000880) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x65580000, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffdb5) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) 13:35:05 executing program 5: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x4a, @loopback, 0x0, 0x0, 'lblcr\x00'}, {@empty, 0x0, 0x10000}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000580)) read$usbmon(0xffffffffffffffff, &(0x7f0000000300)=""/97, 0x61) ftruncate(r1, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x100) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r3, r2, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x11) write$binfmt_elf64(r5, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r5, r4, 0x0, 0xa198) 13:35:05 executing program 4: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x4a, @loopback, 0x0, 0x0, 'lblcr\x00'}, {@empty, 0x0, 0x10000}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000580)) read$usbmon(0xffffffffffffffff, &(0x7f0000000300)=""/97, 0x61) ftruncate(r1, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x100) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r3, r2, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x11) write$binfmt_elf64(r5, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r5, r4, 0x0, 0xa198) 13:35:05 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x400) 13:35:05 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000300)="aa1d613844e700f32665e690558c438288708d1e8dd28d3ffab1701b20a29f53193789febbf0395b55cff0c9d7e3cb56806a7cb249807f5d83e1dafd4dd078b193b785f6d79c025fde44225bbe0c87638a1715f99a16f747a7e2b06103a4", &(0x7f0000000380)=""/130, &(0x7f00000000c0)="5faa78ae25c084da6d3166e176d74476e1f751f0cee81cc629cda8c5ee7ceeb9211139e1def520706489f6036f844a1947957af7d7030eb89bc00d378aef1e", &(0x7f0000000440)="b835ebb4649b165a70c99749f066204b03109b89db1e5357c2cde8c738239d8e99a2ca281f0ff2c0878148ae59f5d60b38235ffab453682a59c1e057826512b6d66573b12ea3905454343894062808d31f9db70bd9245245f7decd0e3f10c8ef01d46438661b92487b31b6d1c605eada45ca1a478ae1604a09f71fe23aa4e36156ecab80633b394106d300a43a2d4d72d9311e0e5d213cc42ec8ad03d9b209469ef9830104b73dba5b71970058b10385a19bebb0ba4810f7b9e503bdb427f1df67fc4efd4d5b5517f0a1fad811f977888ab3f285255ff4395c852d6765e0759dc4058e4c75ba347b651d", 0xaa7, r0}, 0x38) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x804803, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x3}, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000640)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)={0x5, 0x0, [{0x80000008, 0x4a8d9356, 0x2, 0x9, 0x7, 0xcd, 0xa5}, {0x40000001, 0x10001, 0x6, 0xffffff6a, 0x1f, 0x1ff, 0x1}, {0xa, 0x6, 0x6, 0x400, 0x7, 0x1, 0xa7f4}, {0xc0000000, 0x401, 0x6, 0x2, 0x6, 0x7820bcc, 0x1}, {0x80000000, 0x6, 0x0, 0x6, 0x96}]}) 13:35:05 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xa263}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x62401, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000040)={0x0, 0xfe}, 0x2) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) eventfd(0xffffffc1) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 291.497312][ T8880] FAT-fs (loop5): bogus number of reserved sectors [ 291.506151][ T8881] FAT-fs (loop4): bogus number of reserved sectors [ 291.515691][ T26] tipc: TX() has been purged, node left! [ 291.518650][ T8880] FAT-fs (loop5): Can't find a valid FAT filesystem [ 291.534082][ T8881] FAT-fs (loop4): Can't find a valid FAT filesystem [ 291.546456][ T8887] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 291.580270][ T8887] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 291.591676][ T8887] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 291.601817][ T8887] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 291.657237][ T8887] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 291.685734][ T29] audit: type=1804 audit(1593869705.533:11): pid=8902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir961462973/syzkaller.kXAtVb/25/file0/file0" dev="sda1" ino=15892 res=1 [ 291.732247][ T2589] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 291.764532][ T26] tipc: TX() has been purged, node left! [ 291.895510][ T29] audit: type=1804 audit(1593869705.563:12): pid=8902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir961462973/syzkaller.kXAtVb/25/file0/file0" dev="sda1" ino=15892 res=1 [ 292.061353][ T29] audit: type=1804 audit(1593869705.563:13): pid=8893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir961462973/syzkaller.kXAtVb/25/file0/file0" dev="sda1" ino=15892 res=1 [ 292.142147][ T2589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.333809][ T2589] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 292.384526][ T2589] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 292.417379][ T29] audit: type=1804 audit(1593869705.683:14): pid=8880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/31/file0/file0" dev="sda1" ino=15891 res=1 [ 292.454733][ T2589] usb 2-1: Product: syz 13:35:06 executing program 4: r0 = getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) wait4(r2, &(0x7f0000000200), 0x1000000, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f0000001240)=[{&(0x7f0000000100)=""/127, 0x7f}], 0x1, 0x6) r4 = dup(0xffffffffffffffff) sched_setscheduler(r0, 0x3, &(0x7f00000001c0)=0x8) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000040)={0x4, 0x0, [0x200, 0xf3, 0x7fff, 0x80, 0x8], 0x4}) shutdown(r4, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 13:35:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xe, 0x0) [ 292.489971][ T2589] usb 2-1: Manufacturer: syz [ 292.548270][ T29] audit: type=1804 audit(1593869705.723:15): pid=8880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir213485802/syzkaller.heqFhL/31/file0/file0" dev="sda1" ino=15891 res=1 [ 292.549946][ T2589] usb 2-1: config 0 descriptor?? 13:35:06 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xa263}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x62401, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000040)={0x0, 0xfe}, 0x2) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) eventfd(0xffffffc1) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 292.703622][ T2589] usb 2-1: bad CDC descriptors [ 292.710319][ T2589] usb 2-1: bad CDC descriptors [ 292.738963][ T2589] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 292.791804][ T2589] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 292.827393][ T2589] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 292.899082][ T17] usb 2-1: USB disconnect, device number 8 [ 292.942889][ T8937] misc userio: No port type given on /dev/userio 13:35:07 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x400) 13:35:07 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0)={0x800}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) sendfile(r1, r0, 0x0, 0x80000002) [ 293.912730][ T17] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 294.272244][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.422790][ T17] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 294.436751][ T17] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 294.455720][ T17] usb 2-1: Product: syz [ 294.465066][ T17] usb 2-1: Manufacturer: syz 13:35:08 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000002000}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0xfff, 0x101, 0x45, 0x1f, 0x28, 0x80, 0x6, 0x40, 0x9, 0x3f, 0x2, 0x0, 0x3}, {0x6, 0x1, 0x2, 0x0, 0x0, 0x9, 0xff, 0x3f, 0x9e, 0x1, 0x32, 0xc0, 0x10001}, {0x81, 0xb26, 0x11, 0x0, 0x3, 0x3, 0x0, 0x7, 0x20, 0x40, 0x6, 0xc0, 0x8001}], 0x8001}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x46, 0x0, 0x4b) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') dup3(r2, r5, 0x0) dup2(r1, r6) 13:35:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7e13, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) socket$kcm(0x2, 0x0, 0x2) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0xe6, &(0x7f0000000180)="9bc3bf2e781ff35e296b49b8a2d3eb6c74a9fd86773b5e7e652eaa1272e743a83fd2b75209db1ae44ae0ee88e7bcdd45db40de17d9550eb83f61479bdd2c45d45c568764037ef32aa0f256711f27cb27723b4da8e86433d6549f982e9e74df263fb133750281b60274b6f7d673824de978eba7533eab574eabac8f8ad310b9a157895dc2d56d271702e41a0adec6bfbf26520b7fe42f55232c96d7d091bc953c7f9116f01144757d91b828f09e87bfd599d6a56f389f69462b653baa1fcb568d72285ba5e080790e061ea2ffbd793abe3e056b99ce7f1451f5adc800e4398e5941c6709cd160", 0x2, 0x0, &(0x7f0000000000)="f64a"}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0x7, 0xa7, 0x0, 0x6}) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x15555555555555f8, &(0x7f0000000140)=[{&(0x7f0000000b40), 0x700}], 0x0, 0x0) 13:35:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000580)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0xf}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xfff, 0x0, "5bae67c0589bdda129cd04177825d392dfa86c"}) ioctl$TCSETSF(r5, 0x5412, &(0x7f00000000c0)={0x80ffffff, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000000)=0x200000) 13:35:08 executing program 4: openat$null(0xffffff9c, 0x0, 0x2001, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0xa00) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x1, 0x8}, 0x1000}, 0x0, 0xffffffffffffffff, r0, 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) dup2(r3, r1) r4 = syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') sendfile(r1, r4, 0x0, 0x0) ioctl$TIOCCBRK(r4, 0x5428) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={'macvlan0\x00', 0x8, 0x2}) r5 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SETINTERFACE(r5, 0x41045508, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=0x9, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) [ 294.478861][ T17] usb 2-1: config 0 descriptor?? [ 294.572264][ T17] usb 2-1: bad CDC descriptors [ 294.599212][ T17] usb 2-1: bad CDC descriptors [ 294.604195][ T8986] IPVS: ftp: loaded support on port[0] = 21 [ 294.627851][ T17] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 294.648751][ T8990] No such timeout policy "" [ 294.667644][ T17] cdc_acm 2-1:0.0: This needs exactly 3 endpoints 13:35:08 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x3, &(0x7f0000000540)=[{&(0x7f0000000080)="8da4363ac0ed02000af9fdffff014c4d01000000000400fb00007a0000000900fff6f2a2299748aeb81e1300b10efd9a0000010000000000203aeccf2bc3699c5f42485266535f4db08cf2fad13933cb16825d0675ba88f516b1148de9cb7d59bef3062da60f8bf27ea8a321d155e7ac538efd96e0faee13e36d39a53ca3b8215f", 0x81, 0x10000}, {&(0x7f0000000140)="94d479ab46ee5d1c3029404a7f104c9046d2e51f0b220192393d9fe2052fceebc700db32cc7402ab72fe11e5908f7eb1b19a9166fa668ffd567c431a4c2e4255db4ad49cce1a3173f5a0cffe3591a82ffd59dc4bbdfca3cfebaada0fa435e2fcb74712b3e9f636407fc4fbadd302d43d7191f1fd8934a30b54b7a3bec3cdb849a45fbefeaa6fc1b1c20b8fd984730b38f9afc5b8bab0201671e59e68d8181906347d4ef679e695050c14a7fdb0d89e5f7219ac85113ed6daff69b109f3124144115a6d7cd98d3bd8cdccd3ba82f2b6222ca14f09a04e48770e", 0xd9, 0x400}, {&(0x7f0000000280)="b93bff91d4a976afb692b256281c5e3f10756310d699effc305b47b531cde778bfe1a5b03c8f3db06d4d1e546601e8bf5a1c48248b7a8f137a3910c6cca047a215093a634d66d4ee895853e08d25bc6223bb4ebd36", 0x55, 0xfffffffffffffffd}], 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000240)='ocfs2\x00', &(0x7f0000000380)='./file1\x00', 0xe52, 0x1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="ad15f542e6393cbd472bb94a438f31994b049617ed38ce9af34c6edff53f9c8028959fe182109fff856c6129017f62b474f82afcfb7b2e77cf2cecfbba78b85191e42339ea29d163905bf6c4dc6a7709d3bd30dabf6389fc5b455149f7d02cc84b8aed3674b4247ab14356b4367dd6d0624d0553b94fe619209b10b4c4c971a67dcd149957931d00e9644eed3c88a0888d9120900b3576bdd65dcfcd11f32444017c7808e1c3474601430336bf37bff38baee20206eb01c273a45caf997788612893069146e64c586236e814b67cbe0e910f9e1012e00ed2176c444f89746191200fa0ce9e40e55d1dede87e5a74d48821a2ced3f46deac1a59ce1a5", 0xfc, 0x7ff}], 0x20, &(0x7f0000000500)='&.\\*-&^.-\x00') [ 294.706279][ T17] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 294.750379][ T17] usb 2-1: USB disconnect, device number 9 [ 294.866243][ T9021] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1300b10efd9a devid 0 transid 14642110387532762288 /dev/loop3 scanned by syz-executor.3 (9021) [ 295.021789][ T8993] IPVS: ftp: loaded support on port[0] = 21 13:35:09 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x400) 13:35:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000000975fae5779586fe4020000000000069078ac141400ac1408bb0d009078000000000000000000000000000000001eb03607f390fce5e5b2ca756d1747a971ccaa77c1988993e9c48785bf680ae964996cf8128c63fde0c76208cb4fe9e448b6f9b823d548b2c0b27adbb705a8117d1c9f63c4fbcfb36e39335840d9a372dc062939e21314a5f739c09efe77bff8e44e90c30bda1dc48bdab94a0d912005919ce5a6745dafbcd17695ce8a17930cfafe430784fec92c7304c43af560da4cc9d8037b"], 0x100c) 13:35:09 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = getpid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5ddd6b59303534e9, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xfffffffffffffd64) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000001c0)=ANY=[@ANYBLOB="01cc3dddd4ff572621ffe44d1b8aa8000000718200000700"]) 13:35:09 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) 13:35:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r6, 0x0) syz_mount_image$hfs(&(0x7f00000002c0)='hfs\x00', &(0x7f0000000300)='./file0\x00', 0x1000, 0x2, &(0x7f0000001800)=[{&(0x7f0000000340)="c84016ae3fd968fce770872edad7da51491964272774801ef6e392ea884942232382b1ea79c5bdce512ef7e4b0bff80e4f5fa2ad2272cdd3c83292d710df485b87963d108b1a85ead5836433cece17c1b995a3faa351de9990a9050dc8dfa7a3aef40b017c89f239b173e7796ff2e6e8ed0dcf42418c818d86360e78ee412284afc1712e6c558d8da008713cbe6c750c183ab81645992b3fd7990c6c032c7eb25bdec9f2892d7004af87f4", 0xab, 0x5}, {&(0x7f0000000800)="5c4d8cdfceae9cd76134b6a7dd45970902e5eda915153a667af0bc05240956d466e4b3212743bef37f9079b945c9993f05da77bf6258e37fd476f9e3af5129f64f7e4131a7feea0ec9d4c251ec9712a2d9529ea0c2837a0c31970eb7f0738d2d61db77c501e02712b65cc97969dce25be3e528726825ce9de2592dc95e9e9eae870bc397a58db88d7442ff7b4fdee2e14504fc580104bf0ae0e118adbb5bee23829d0e349db604e48b9a76d360f26f5dedc8d417d4c1ee53446adc68a77eb02ce2d6f3031cb429c0c791624661348fbd7d27009fe1aeac1bab9fa0c00443552c249106be28f95b41de776d80bb275ef693698ff7ccfa3537c74d1cf45db6348320f0d3f30875869139490e391428999130204c5ef9055e461051c49956a090b1f7965cfbe8d385fdee59672f1e8d691e53baf1275e1c5374e599e18d41273397a050844e94ea46bdc41180ce29ae690a3870f9ae8ff8e0ab0a518020d4505882d2c8fd4de644fd15e379264cb256854cdf877f6b9ad088f8deba25ecd1324d6dd0220d28d8600e739918223a04c419fb4d3b1db5e6330e8cfc0d113551ed232b3dea09355de7b9ea7a607b4058849b04d2c176773084268b1365725124a90cd485153d5436cba5813dcdb41f8ccb0162165c9bb0d16de321a578515b55b093316ba099cd73a9e13ff2bc7ee91b8bd9933db0ab8ba8fd7cc075ad46844275bc02f136ba6e905ca43b448f2dc3980baa3f849c7ac52cb9e86d0ba83bf422023669d371adcdec803b6dbfff92e71d066202df63ece98889dbf73aadc5dd3b36c8223499541d6635b560e1e9c6603f9d05fd892a7ef45344713b8eed588b1e9d8bc657c54fc85d2bcf41e0c0f95e666c595b68bf71126220ab77059f7f4a56082bec3193a9a7ae58c3078858736ab66a72524747e26f80bbe0e2ea93fcd18c2dbb68798e6dc5b4d042d760bf5ffecd638ffc7ddb8bcbb8d8f3eb8188176cb4e6b1fde0498678575897dde8dcdfdb2e0605efbaae87a579056987da6b9612bd2a7a896ddaf3413e8afa5764a4f3a0393791d83668f99bd232b4c1200b693a440aaf5c304ce54942ace2075bec80a777b2d2aacbc54e8e2f7eb0e9a520f7d54248388d15779f977a567ab0ff6def9c28b1c0b490d4118e7c999be70d60bf962a73338793e62114e2e4cbba6ea82d81049a2d5b8bc49020179c6c7daefddd2316732026ed5d1d866ad9d6ab859d266db4b72ebbe6a42448cdbb72e093a45a4ffff71d51f2c4ba59e6e81e99d16dce9dd8bf277fa723ba08c302cca9a16ae6b492e90113a3cc967759c778a4f36b622680f638f4d9733dfcbd957c4c29e1df344f26e562c47b297110b5edd764a7d5cac33a33908460b42148df5076970ec9b00e7b73d512c7d65f06877802a0fda69ad7d726c7c48b8fd9744c16f76576da448e5c63cfc3409d57828c1c2e229c4cc2bedf0f811da7c316ce6838f56dcd3ea451848758bf081a845ad400edb6594084a144aa4ee9b12871055d781f2850c9454dbce32b542aa284385dd88ea38c49db22030671383f72ca125fa54067b52d70f6c19d1e924532207dbcd7b10cdcc1762fc1b2a5c268234a405247e154c0924970eb21022d937210c8082831df258c775562f9fdb5dfae43e3c2e05946974b0ad4a0e25c18fc40213e7962ae9267cb255297e78b3d21c1e9bbcb0207914cf780c30bbc90b9283b9a278dd75c0d223f46a0a9824e22358e8c92bc2df376e3f22bd2ee2765232e0763790be7d9cf0a787f1b81cebb1df537561be66a63969dcf32c89240a056325044aab62376b6c574a8a81e59e1ab4e0b552f76779db73a0900a96fdcefcaa41f1b6e654620d14ca96cab5673410747ae9389c35bdb594c6cfdaf1cce1829ddf266fb00b5dcc41cf0037dde9519944ec574b7ed1ff9990dc68ee6d16037bd1d88b476f466012de75ca422c96b69e4e0d4629f2da57cd204b104bf674fc81d62009da0bb02464f445dbbfa309fb1d63e22efa964f036929fbcb7eb89e98de3d7f39028ae7c4f0174184fa501fc6d20a91c58bdaaf610ab708be19972bed5e95aa72bc3917688a5b8baab38f1c7a235de7008569a6d6a0167723f3dbefb7512dd8f7474b155fe604581caebf96dcf88de36ca6546b48844b5bf0a691d947187b36c901e948a5ecef8c34f2801861913932e0eda26034d5896f9c4cf8d801d5cd4c01c0b1d4ddb458c04cc3bdc0061507fc567fbbfdcde2e9afdb8e71e2b8608dea7b41b02c6fcd8ffe744d4d5e392a3b9b667b211f81b539f617f60e0ae585931a54801d31b4295e5d0856ef5537dde8133561dafe9d4cf6b8cad28a9222a71fe652e36a01b5bd6128853496ab6387a45d305fb19da2b971889ab77dd5cf4db78c35a4d82f293c2dc7bdebaf1fa21cd55a106efceeee3042ee40e1043208eb352ca9914945c02ed6de6baa34c18803d0ca4e87d0b73ca4937012a9759f3f436a7ee39117fcb4d8f8edfc8a137bbb054c0207236550a9c95ab50556bcd5586cbc9ff7444c8f447f00fda11a250a9d193489d285c209b1cabc578865be59140414e2e569cb183116f97dc996d51dca253ea6052d83910c4bf38b7d7bb6341249057e33f73e399abe8a71a1839b6da497b4035c29a86655c99a731afd614753ac5f4fd601ed688aee0c748099db9c259a76587d4bf7871d37c9ee679f54ae51e22fe9ca1bc63d0bb2078d737049ceb29722092eef2927b74a7430f386f1782df156cacce05b0f69f47871b06890cf7f042a1ed7a476d7b8ca1886a61b01b28b73e550a18fa56cf1ccb60d307d77cac046f87b56ac7b9112e069e71a522f21435e33daa45a38052c20fa6f2fc5b360bca325897989d01b55eec4c45ca518bc49e8748514920b3a40b11aefbf657673a7630e722bc1f3ad9a0b77bf173846025922c3b7361b9d2a940d46571b1782288c61fb15684f00a1b8479e2d71a5768c7ef7fe25fd5042e38710a4103a2d02832ca02c7224885286bdd60a8b28336ce2861fde8d1535725e433545cf75ab05d2d89cef403d8872223e045d98c17971dd61f2e678192f10c54b75f816b2255f5ac359ee86698619941ff551d31bf563023f30719d4adf0b88f53738e87e40e52aa2698ccd45fe0fdcc493ea9077be738655122e7e9ee4e63af1071710dd8570499073872ac27c8e42a9e87570efcb1faa61e03d4b6eb0ae215e8408ff1ba10d92b8f7bb643a55f7eace9da98516adab72be742f5b3e41a9095773a682b00bc4bac91f4294e41170f96a83af6bc0c3978f6edc9fa8137517b3cc60d9e3694bf9ce1639fd123f16c2c9df278d690090b6c17be6e0dea6803bc57ab1258aa785113191bb0a055962b0ecbce1d5a966e7026affd94013c66107a6f5ced3bba55d4df9fbbaa9a102d74f24190f9cde25240429e6ed7fc4a9f890a3393782273fa6973bf29098fba5acc02d113ef1758268597193d8c8127d97bfa442aa770366b7530799e343cdb6e33561528fba53e5ef9848d6f1a962df23569acac1086b2a434aa910db7a9bba866c0362caf58ea03233c22bb05d513698b989f4b175e8f13989c23183e95c3a97e8557bc2b50c860d192b941fc27854856551df371f69fdb77d2a86d883070fa51961c3600a5cadc1be503ebe7fe414998e72b62090dfe9488e57d65757e6549f062aa43647e435887d4d2c4a14917c672bfefad996bd2eb4016364a1706a68869b81b44f75823fc0316b2a06401e97549cf1adc7c1950eed6aa9cdfe5b6bd5ca0ea1a26d7deae3eb6fa71ccf61efcc9001d3316f66b7f5b75c808bd202e803ba9a58fac754f3ccb6230623e0c6964be880474db54f2ba294fb7621b04afc9ad02e7d8a5d35af36c399d9276860590329418896a84f300eebc270d5b631e6eb4145949f2869d9e4ac10bc9c074393cadb5bb7796ad1a7a40f8d071c0a46b6d7502cc98f568481de543bc902b321243b4610dd9cb4bb335d6b37bb9520dd0866546229e5c9d78728714dd23ca55711ebe5e01a78ea70d7e21e0b4ed3c5d9426092dc285b2ba1809af8e2f04803a2c6a6f2b064aead356395432b2634d7be4ee76441ea8ca45ebd5ada26bfe7940caeac118fe2f56ac2358e048b0a8a6c9b2430185e07754d339268a66cc9865da67ed0ed8ddb027c40e736edb985d119d1a1069f69e0faced86748ac78d8777cb0b9683f80150a20520c88dde7c4c13de61ff8fcd53d29136eb612a4ffeb5f61c4116da277143c5e08db0c84cd9583c1196320425d5a98337674540305a96e557aebef8bf48edc214f99707bd8035d24f2f9308b086ce67ad0641ffd8120dfe42cc45e86f47f73f659fb39315bc5ac4680e81770a7735d57189122e5a40ebd4e83bc3bccff3cfafe34f1ca731a6eadb73111a857e952d56e69211a15d036ff31171feb1a2cd0e9d11492ba24bb2484216fdd5e8f583c2763a9bb70be6ebf35f74002d44cb621219c0e4c74c7f4ad986a9b0c53c5734342ffb76ff73c54b9c8fa50bfcdbe8b0438161d1cdaf6fe4320ee43fb0de71822115a60867fa42ad5cfe5ab4e08228e54ba817c071b4a1fdd79e7d7293ff3b134548fa291dcca3901db015c8d7495fe7304eab87da37d5ecde9bacda9db7c442981ba48ecc66c2bea54f5a0d60322159ec9feeb6c2bb093918b713d7e9689d4ef5631250c4fa3720bf413cb4ee1c0c2462235a672f90b73a2d12ae0b7947cf48ecca9a590cec30a733e1c9f841159094e1bac87178ce55689c4ef257f0d81619e5554c8199deb3fa665e14afbecf40f62bdb7161d30972cfc4145f7fe7017e3ac377e52f2f6f5edcdd7a5559b237f6cf4e0e2a6f726a86a03d0130fb66746769beaf92336cdb29a3152ef8c86e243dfec2dc3d7997e027b287fa24cb152a9e6e63fd9a6b805cde73656c3a4eafdce4bc6cf46be05d99ada6fad8e3482a25a1d0af9093ec6d14209f7717696833abfe6a69f26c5209657d4b37e76258c95c29d73c0388d11141046e52b9039ae97594756a5d2918fda8ff1fcf42696b7657d13105d92563418a4890b1e4c2a95ae269eef0fa83dbdea37683339ea33b44bb70dfb5990fbc927f8f6d304a53c4e6a1b9120ecc584a2158c589e44478fcfc66eb391719220eb2a929ec4df3fcb04faf2003dbf94ee388575fe8cdb58ea8b86f560f5dd9e1b261ab1b7fce06e0a4675748757a281699c2442cb9a14588d6d0bcae2ca4bf983c9ecdab7274263cf3b835673618a2ffafda9d81137e883f124dedb96a55a96f4e1bf5e397a6986c227cb7f7ad0c7547c50dcc0f27b67b6a0f37a45fa732a79022eb4485a0066fd8118df688b4ea70755b39ec5ff92520c82ea48be0339a65686bc6ceb019dbdcf25e34b20d6c589ed556808125367c36f9b3785af7b58a1166901240555c1e29f74aed9e3d1cda1c999718e287202f2f5656a996f5ae37ea24a0a78134933348677a84a3a3a12e6020e9f3676b6e09dd25f07babe4522eb25b25b1e4166bd83f52d92f1ec0d7d806d0e5cabce242a360cbe618edfd1566ee4913ddc0781e2a09697cc5c493b933b841114319e649917c125aec379f344015822286f3ec5f9a6a3ec9ec605090e76d31100af43548c0667d2ccbcf4e4c8b6523998d8d97e7729338fee28ee3e546c70a42588dc5a8ab05175324faf2ba24f1a476346ba9eda10bd41c462e73aeb65c17038d72e4c2a2376b3f85f45f47647da3e136628f74271de83752e18aa20fd7df004bed81371400a80789d321706af20955b35ef58aa3b6", 0x1000, 0x9}], 0x4, &(0x7f0000001b40)=ANY=[@ANYBLOB="66696c65ff0f0000736b3d30303030303030aa21193030303030303030303030303031312c7375626a5f747970653d292c7569643e000000000000", @ANYRESDEC=r6, @ANYBLOB=',appraise_type=imasig,fsmagic=0x0000000000000001,fsmagic=0x00000000000003ff,\x00']) fcntl$dupfd(r4, 0x0, r3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x4400, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x14000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001840)=ANY=[@ANYBLOB="240000000001030000000000000000000000000808001540000000000800074000000002981b7962a73b2cb44198f594766d1b4d06725cd1eeba7a6801e99a189f3de331988ea79a5752b8bbb003a03fd5fe8a4ff5d7d15b97b681b5b8a39a9112ec08d6d50c0104b2a1541762b68831702a0e7c4087e28e5e8661ef938e09914b96528ebbc331567c6ec9eea1"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) read$midi(0xffffffffffffffff, &(0x7f0000001a80)=""/175, 0xaf) r7 = syz_open_dev$vcsn(&(0x7f0000001900)='/dev/vcs#\x00', 0x18, 0x202000) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000001940)={0x9, @sdr={0xf4171c6c, 0x10001}}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000240)={0x6, 0x2, {0x1, 0x0, 0x20, 0x2, 0x7}, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) [ 295.952306][ T2589] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 295.983133][ T9077] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 296.162368][ T3404] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 296.352571][ T9084] hfs: unable to parse mount options [ 296.372655][ T2589] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 13:35:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061101800000000001e0500000000000095000000000000002eb1697fb760486e776c9e8aa225b715f53220382d4272ce823408d595fb231521602b3c5febed4903c2a3093d8930869e8c82d597b5b9b0a6ca9632ba04000000000000046489fc8dba375a41256ad293e0d8f624b2129e49b4c206147324a3ab997dcfa09f4c233d63e78017942842b8edefd1930200a1926468a2e6c67e5aa7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000180)=""/128, &(0x7f0000000200)=0x80) close(r0) [ 296.532187][ T2589] usb 1-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 296.549939][ T2589] usb 1-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 296.581420][ T2589] usb 1-1: Product: syz [ 296.586645][ T3404] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.601311][ T2589] usb 1-1: Manufacturer: syz [ 296.622653][ T2589] usb 1-1: config 0 descriptor?? [ 296.677479][ T2589] usb 1-1: bad CDC descriptors [ 296.696198][ T2589] usb 1-1: bad CDC descriptors [ 296.722640][ T3404] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 296.744475][ T2589] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 296.762284][ T3404] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 296.779801][ T2589] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 296.792327][ T3404] usb 2-1: Product: syz [ 296.801135][ T3404] usb 2-1: Manufacturer: syz [ 296.808180][ T2589] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 296.823310][ T3404] usb 2-1: config 0 descriptor?? [ 296.902068][ T3404] usb 2-1: bad CDC descriptors [ 296.908871][ T3404] usb 2-1: bad CDC descriptors [ 296.938705][ T3404] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 296.973294][ T3404] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 297.001930][ T3404] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 297.028112][ T3406] usb 1-1: USB disconnect, device number 2 [ 297.082027][ T3405] usb 2-1: USB disconnect, device number 10 13:35:11 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x62c3, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000140)={0x806c, 0x1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="6c6ca6d2e4f80e91d7c52725a5d95018abb9cce642dac0c0a1d148cfa72c07cd9490eb202c3f38efdae1fb3e8a37e6a57ab91c565ede803acef91e", 0x3b, 0x888c1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) 13:35:11 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) 13:35:11 executing program 3: open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5e, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x2ac8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xfffffffd}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f00000003c0)='127.0.0.1\x00', 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000004c0)={0x20, "41543839fa3c753440b7b8f468c3d6233e748fb73bebf115a962333ac56d4e38e6eb2897a57f58db62a9d169e8a939133ccd0010b2df4bcc22bb1e9a9293180e"}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0xc010) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000200)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000080)='./bus\x00'}, 0x10) connect(r1, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x3, 0x1, {0xa, 0x0, 0xfff, @private2, 0x1}}}, 0x80) rmdir(&(0x7f00000000c0)='./bus/file0\x00') open(&(0x7f0000000040)='./file0/file0\x00', 0x20101, 0x0) 13:35:11 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x200401, &(0x7f00000000c0)={[{@huge_advise={'huge=advise', 0x3d, '['}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x38, 0x65]}}]}) 13:35:11 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x400) 13:35:11 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 13:35:11 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = getpid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5ddd6b59303534e9, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xfffffffffffffd64) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000001c0)=ANY=[@ANYBLOB="01cc3dddd4ff572621ffe44d1b8aa8000000718200000700"]) [ 297.990354][ T9140] tmpfs: Bad value for 'huge' [ 298.044917][ T9137] overlayfs: unrecognized mount option "uppeÝir=." or missing value [ 298.067095][ T9140] tmpfs: Bad value for 'huge' 13:35:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000580)) write$P9_RRENAME(r2, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x400040, 0x10ff00}) [ 298.128811][ T9156] overlayfs: unrecognized mount option "uppeÝir=." or missing value [ 298.241822][ T2589] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 298.252043][ T2674] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 298.259634][ T17] usb 2-1: new high-speed USB device number 11 using dummy_hcd 13:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x14, r3, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r3, 0x4, 0x70bd28, 0x25dfdc00, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000000) 13:35:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000796453159713ffe4000000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x78) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r7, &(0x7f0000000040)={0x2c, 0x0, r8}, 0x10) getpid() r9 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r9], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1001, &(0x7f0000001200)=""/4097, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x78) 13:35:12 executing program 4: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000580)) read$usbmon(r4, &(0x7f00000000c0)=""/64, 0x40) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x81, 0x200, 0xfffffffe}, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 298.532668][ T26] tipc: TX() has been purged, node left! 13:35:12 executing program 3: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x60, 0x0, 0x90, [0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000006100"/129]}, 0xf9) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x180) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r3, 0x8000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) [ 298.632315][ T2674] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.642815][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.662207][ T26] tipc: TX() has been purged, node left! [ 298.662311][ T2589] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 13:35:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000665acf4f8f36460234432479aeaf81dcfc6dfd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59a7ed4140cf2fc52e9be5805183e2390c7e24c6f1592251deee3a2eaffae67b604d60ad78ae9896ae0060d872f014b72a73c14a45f4e2bc5ce556ff0199af980cbceecfd250eef10686c844a181c115ea298d2f3c30cc083a3080224d4a9249d13138e2b923567fe2c278a76da311a325ad89f63461dfe90210a0b09aa9184fdc0fb7dab6d93d10647dd0f5dfd0933c2205bae303a4a2017ecccc77efe877a62d49a3909e9e1b7f0109c74a3ac0ccdfe1aa3697892e595ffb2b26f5ffff4ee46ffa54b0ec6e6a09910a220830d34dcc4ef03ef78fa84f19fa8fec60e2ac1de71c126167c7f362ddfefdb5955f3dbff2087197a44e252b6b9f43899bff366c389bdd174a5fcce59e7472e3572227f512a8d4844d29b66455161fbb5c740f6c1a7373f847544c9ddb939f1d0e8295e1b7290fa9225f347752d0ac738c0b6fcdef2adbc8fd1b489eb3723f347b13e9044f5d02756925c52848c4d2c7dcead9b13ecef2f0ed5412e21dabda83ad4d6bb1615ba76d5b3e019df8f33711fd741298729b131cb31f3a38ce6198722d48f1ae0a282d81e21750a10b1d2b933cf1e5000000000000000000", 0x1f7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 298.803216][ T17] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 298.812583][ T2674] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 298.837364][ T17] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 298.849809][ T2674] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 298.882101][ T2589] usb 1-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 298.901285][ T2589] usb 1-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 298.905142][ T17] usb 2-1: Product: syz [ 298.913933][ T2674] usb 3-1: Product: syz [ 298.938739][ T2674] usb 3-1: Manufacturer: syz [ 298.963525][ T17] usb 2-1: Manufacturer: syz [ 298.980655][ T2674] usb 3-1: config 0 descriptor?? [ 298.982966][ T2589] usb 1-1: Product: syz [ 299.004461][ T2589] usb 1-1: Manufacturer: syz [ 299.004647][ T17] usb 2-1: config 0 descriptor?? [ 299.033153][ T2589] usb 1-1: config 0 descriptor?? [ 299.065094][ T2674] usb 3-1: bad CDC descriptors [ 299.080506][ T2674] usb 3-1: bad CDC descriptors [ 299.105809][ T2674] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 299.143203][ T17] usb 2-1: bad CDC descriptors [ 299.148676][ T2589] usb 1-1: bad CDC descriptors [ 299.148860][ T17] usb 2-1: bad CDC descriptors [ 299.155123][ T2589] usb 1-1: bad CDC descriptors [ 299.162088][ T2674] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 299.172011][ T2674] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 299.191569][ T17] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 299.217091][ T2589] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 299.238746][ T17] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 299.262050][ T2589] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 299.297660][ T17] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 299.304502][ T2589] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 299.352840][ T2589] usb 1-1: USB disconnect, device number 3 [ 299.361927][ T17] usb 2-1: USB disconnect, device number 11 [ 299.462406][ T2486] usb 3-1: USB disconnect, device number 2 13:35:13 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) 13:35:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000200)={0x701, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x1000, 0x3, 0x7fffffff, 0x8d, 0x0], &(0x7f0000000180)=[0x4, 0xfffffffc, 0x0, 0x8001, 0x9], &(0x7f00000001c0)=[0x3, 0x4, 0x7, 0x800], 0x0, 0x5}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000024000b0f000000000000000001fc0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000007000100667100000c0002000800050000000000"], 0x38}}, 0x0) 13:35:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) dup(r0) 13:35:13 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) socket(0x10, 0x2, 0x0) 13:35:13 executing program 3: socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0xe00000000000000, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x8001}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r1, 0x2, 0x2, 0x10001}, &(0x7f00000002c0)=0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000580)) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c0000000b0603000000000000000000070000036c0008800c00078008000b40000000050c000780080006400000001f100007800c00194000000000000000010c00078006001d400f7e00000c00078008000840000000000c00078005000700840000000c000780060004404e220000100007800900130073797a3000000000080009400000010005000100070000000900020073797a310000fa00"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044014) 13:35:13 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x400) 13:35:14 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000500)={'veth1_vlan\x00', @broadcast}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x42482, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000010000002d00140012800b00010062726964896500000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r3, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x188, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 13:35:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 300.381792][ T2589] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 300.382017][ T2486] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 300.396947][ T17] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 300.480291][ T9243] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 300.560004][ T9243] team0: Device ipvlan1 failed to register rx_handler [ 300.752017][ T2589] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.771874][ T3405] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 300.781998][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.832015][ T2486] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.922865][ T17] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 300.922954][ T2589] usb 1-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 300.963948][ T2589] usb 1-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 300.972086][ T2486] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 300.981238][ T2486] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 300.983376][ T2589] usb 1-1: Product: syz [ 301.002418][ T17] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 301.021986][ T2589] usb 1-1: Manufacturer: syz [ 301.047129][ T17] usb 2-1: Product: syz [ 301.056073][ T2486] usb 3-1: Product: syz [ 301.060913][ T2589] usb 1-1: config 0 descriptor?? [ 301.070412][ T3405] usb 5-1: Using ep0 maxpacket: 8 [ 301.074149][ T17] usb 2-1: Manufacturer: syz [ 301.083773][ T2486] usb 3-1: Manufacturer: syz [ 301.098003][ T17] usb 2-1: config 0 descriptor?? [ 301.124665][ T9253] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 301.149543][ T2486] usb 3-1: config 0 descriptor?? [ 301.189723][ T2589] usb 1-1: bad CDC descriptors [ 301.201837][ T3405] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 301.209959][ T3405] usb 5-1: config 0 has no interface number 0 [ 301.221453][ T17] usb 2-1: bad CDC descriptors [ 301.226716][ T2486] usb 3-1: bad CDC descriptors [ 301.226887][ T2589] usb 1-1: bad CDC descriptors [ 301.233400][ T2486] usb 3-1: bad CDC descriptors [ 301.242108][ T17] usb 2-1: bad CDC descriptors [ 301.249775][ T2486] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 301.251887][ T2589] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 301.258002][ T9253] team0: Device ipvlan1 failed to register rx_handler [ 301.271800][ T3405] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 301.273050][ T17] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 301.300052][ T2486] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 301.320300][ T17] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 301.329547][ T2486] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 301.350214][ T17] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 301.352440][ T3405] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 301.379383][ T2589] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 301.410621][ T17] usb 2-1: USB disconnect, device number 12 [ 301.411762][ T2589] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 301.423860][ T3405] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 301.453138][ T2589] usb 1-1: USB disconnect, device number 4 [ 301.462698][ T3405] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 301.501728][ T3405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.511620][ T3405] usb 5-1: config 0 descriptor?? [ 301.621010][ T9245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 301.698545][ T9245] raw-gadget gadget: fail, usb_ep_enable returned -22 13:35:15 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) 13:35:15 executing program 5: socket$unix(0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00000000c0)={0x787, 0xffffffff, 0x8}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000580)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000580)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r6, 0x13}}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 13:35:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x8, 'ipvlan0\x00', {'ip6gre0\x00'}, 0xf20e}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x2bcf) shutdown(r0, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2b8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x80c00) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x42bc0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), 0x0) 13:35:16 executing program 3: socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0xe00000000000000, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x8001}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r1, 0x2, 0x2, 0x10001}, &(0x7f00000002c0)=0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000580)) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c0000000b0603000000000000000000070000036c0008800c00078008000b40000000050c000780080006400000001f100007800c00194000000000000000010c00078006001d400f7e00000c00078008000840000000000c00078005000700840000000c000780060004404e220000100007800900130073797a3000000000080009400000010005000100070000000900020073797a310000fa00"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044014) 13:35:16 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) [ 302.136032][ T3406] usb 3-1: USB disconnect, device number 3 [ 302.421854][ T3407] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 302.497627][ T2474] usb 5-1: USB disconnect, device number 5 13:35:16 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x400000, 0xfffffffc, 0x3}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x1a21d55040eb2332) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000020000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf25040000002c000180140002006d61637674617030000000000000000014000200726f73653000000000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006970766c616e300000000000000000000830b88ce8649b06c3000300020000001db952821f2375a74a3013b58e7f"], 0x78}, 0x1, 0x0, 0x0, 0x240000c0}, 0x2000c054) io_uring_setup(0x0, &(0x7f0000002b00)={0x0, 0x0, 0xa, 0x4, 0x3b}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x40000000) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x365400, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffa88f) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e00000010008108040f35ecdb4cb92e0a480e002a000000e8bd6efb250309000e", 0x21}], 0x1}, 0x0) ioctl(0xffffffffffffffff, 0xffffffff, &(0x7f00000002c0)="6950ba083e3df322f10ef57332926f53c9832186a3a8420aff16b90741a53730f932cef1984313c63208ed757f276a1eb898e2f9af27171c905c0fe22789628dfd8dc7af4d7eab53d7d9270b14c924eed3c412bac464f42d69a9ad0839d85326d6d319c3477d47e439a65c2f246fa66a2dbe7244a5b8c42c472f8b88dd5a48821e937003098c64a443496bc3bfd8afd5b3e423a8d493806b7b7552d3d8e7db210eb08e1b13a348b13cb21bbd44b0c95ce16f3cdaefd1dc223fe0c385cccebe12b8cb03") pipe(&(0x7f0000000000)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:35:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x420800, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, 0x0, 0x388, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x51, 0xc0, 0x20, 0x0, 0x7, 0x7e, 0x92f9, 0x2}, 0x0) rt_tgsigqueueinfo(r3, r2, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, r2, 0x388, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x4, 0xffffffff}, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='\x01@#:,}vboxnet1$(\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)='/\x00', r5}, 0x30) ptrace$setsig(0x4203, r6, 0x8, &(0x7f0000000180)={0x19, 0x7fff, 0x80000001}) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x0, 0x4, 0x7}}, 0x14) 13:35:16 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x8000000000000003, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) prctl$PR_GET_DUMPABLE(0x3) socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="66ffffffffd233490c00000000478d75ee0c74fdd924d9e3a660f5ff8e659642a0643ad5a3285a008b90b3c9423ca370bd4e0ec80f1d31ee99e7eee06955a5da1090625d0b787882910ae523cb701066f89f943a7fd6178580a9ec648e61b100edac63bb24244b0fb08b66426289727f9847ba8e523041d078746e07a735a93c8230603281416ed58f7830f35758"], &(0x7f0000000200)=0x24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) [ 302.682297][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 302.738303][ T3406] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 302.842406][ T3407] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.018583][ T3407] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 303.040783][ T3407] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 303.080173][ T3407] usb 2-1: Product: syz [ 303.115148][ T3407] usb 2-1: Manufacturer: syz 13:35:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 303.142125][ T3406] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.163442][ T3407] usb 2-1: config 0 descriptor?? 13:35:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 303.240359][ T3407] usb 2-1: bad CDC descriptors [ 303.246693][ T3407] usb 2-1: bad CDC descriptors [ 303.289053][ T3407] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 303.322055][ T3406] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 303.340395][ T3407] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 303.354623][ T9345] syz-executor.0 (9345) used greatest stack depth: 23216 bytes left [ 303.356567][ T3407] cdc_acm: probe of 2-1:0.0 failed with error -22 13:35:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001240)={0xffffffffffffffff, &(0x7f00000010c0)="bff17207a190f57372a6b7610d05a9f6ba14fc9ab109db9b5f6d87704b2d", 0x0}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r3, 0xe, 0x40}, &(0x7f0000001100)={'enc=', 'oaep', ' hash=', {'poly1305-neon\x00'}}, &(0x7f0000000100)="e7527d071d47e99ea19070688657", &(0x7f00000001c0)=""/64) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="674c906f01bc1afe53cabda9210cf9e3e4192b065f54afae475836dad542052d14a5b5b20800cb0826c7349af307e687b379dc1385a0bdc7425be837b8b3e3d513ca165629037e8ea549fb3e85da0e65b67abf35e4722fa716df2866f38933a316290201dc12b62cc4b39b376e0bbefe186edd0a9dceb70c0cf10fe3cec023b4d18acb720b0c0bca22dd5c6fcf21d7133907c04296282bd12522a0e5f8fa236ace7c02a71cb0bfd7a01039fb7f69ccab076dc78a42792df8194ee278d914ce9f7d818e7cb73eab36dc2d5ef2cff37e51fda5f50bb4ca0d9b1f396efb02ee438890804c97259bcaf7340bfac71c0609b00a8219b999db4ba382ee1714d9306037ab6f88707e058e3e39e55dd641362e056629077e045ff87d652bc8dadbd18423441d1d6cfc65ed0f1efbbce39f5812ca6665da2fec3548eeeb9a6b38754af7650605d929f8951fb1a3c27cd9b8214898284c75033ba1348abb35af12dc0b1d6c7a2aaa6452467751e422d7ae6659deb427d56e99b18c520d134bb0a403d9690e74f6d44c6ee9d87f6a80c48ed582b78fd550ae3de05494afa15f55519fe1cd894b8d497ed3fbe831b193657c28bcbb27f6a6a2131df353a106083d197719ed42733649a3df9c68713ddac2f5e2bd04354b91be1b5e10765df1ef6d5b6bd5701e86bdb9f4c7c8f03d6f9fbb4f593a5c22930e37f1a62fc2b8d5a68005994c317e7c84b4177defeec4e10b852b627c981c935dd8505df5112a3e3eb4dbc3bc715938fee73d91080329dca50dfd88df1db417c137dc7b91a5b742c14f3c3c73a0edaa02c8497b77f32a6c11929aee162520d67e41ee78dc1dde990a9a9c87175cafe5b9bc76bf559f875478ded01ed6ee0185a5310ab901f4beaa1afcadf06b87f25add88779a7d9478d547e5a3abea611c88510a5aec2bb01bdb52b87d42b857cb5aeca7d8415ee23af89d9eda2cad4684030bc22df102a3fe10d9fa58065c60d150f8a77e26d31f1855a140ac24351806b05140e67296a974634cbd90b60672d6bf1704c9286ada993b4d5e3d7d42e8aa2547ff501df39a155f1084b3497da42b9f96b554a2660662c80ea1006f66f739ec440ff790aae80812c4845e40301b159d21d9908f092cee579d3084cf410d6eff2d0a9b079fa322624ba110ebcb68ae3563595d774588d9c23d896b434524aa6fc3bb6124c61a751983266bca4e4dd18f5fefc0f3071a57c4f7e1dbd2b51cc2d9ec37c0d5b8d304b31c53b9a2a3f9321fa3112d6fa71112ba66fe9c050235ee58340d74ace26b8012407f5beea3506722617a03f00cdd54dd572c709f8b518017cfefe27975e89d70a7af7ae54919c0aead70157468548721e88760b1e41188a7bf91580a78e13363054543868e448dfc859daecf4a1614f528db93126e9647276d54e41dbd197cf8909ffe1e4acb34376ec5d24b06244ba9c48cad6f05a49ad141a9d247f5080c6a0527191a5ca96b6f35e7ef93f81c25e2d5ba671c456567a75c3d38a006671dddc5f89c5a3f5f942cb822d164f8dd13c11d9afa4a48eefbbc6c55ff8c39fd5e7f434223b874c4a12f23db3850128bfc809faf88e8636be02e68b04db60531599678d3a598440f55c1c02ac9c9d9e2b0aac119db99bf5711f4567f8dbe155e53d409a33a10a5efe0f0207d88eca00dd891a4db6e7113c327e66450f3df0eea775f77f3b488fb3b3639d345af3819fc3d164f78ce50d44b9f66e0b729176827fea21e9578cc38d76c652f362cd59ff0b77b49a9f12ee7aaccde07df8ad98066f267ada51e4b6a39f033ce46954200f7111a976acbab65cecf3ffa9cb7d5ef053425a31c930ad0d6f59379c0cfa6670d5daeaab24c4e33625abcb01c5a863d6d7f71a065716d8f1c257eab2665a27b9fa26b3c0275de42ea85dc2b0940c4fe0d3c2346d1e478ef738d9171c0f766939cc66d2143b289afaeb1e53f1b6be2381b9dc104fef0b90479090108f83f56e3f388f6c6fda2e6a6b30f83cb5c32696cfb45fb4bd105a7016d8d754db3f6d347ee20915d75e68035505fa4ab81a14e0715265cb810a6bcbfe55386d52443faf965ae6e4153c66aa5bd142371941b680c1db05969091a724a066a42780e27d0287be164a0ba9a7a02262fa072a4e30e402003f8fba497947e4ecd2e590acf96b7d44349931e44a99dea51bf23b1bf0a2b9d68b9ca115014c5257d7daf0f101f2976271dad03ce781c587eb525d1cb48889a7063f3ee38da92c15fdf5a5eeca59d5162a74d3377df03d64392d3904422bbf798320a3a20c0aa7621f4a2fe5546e849b700b0f441ea1c8945cf3b4408ec6ea007cc953a5e0f331b1ee6cd2faf63ff5efe727b6c1b351f6c21653e409945bd01d04dee6357e1463bdfc8a69cc02a467fbd6296461c4d96fc2af9ca4d4030d0a66e63d3812d5b45d67f837fe4d2b4d90496c60b40f909289f13bb3623db492b52fb2741e6eb0a79fa7fd54d3a5df44abcc7717345a2daca5bfbc1c205cd3c2f7c50eb08dacb406ae217501efa90831b18b1a8d36915ab57a534317e4ce9dd812e34ba3d47a640e4d3242405d3e9d80768b3b73299622560648c5e34d9277947281945b225d0065088bdadeb51a76b393f16b90ce51c20855f9f67bfe5386c0b8fb80f4d6b7fe119f40a12d968d2441acd112f9dd5e6858e79b61c9059d4444c1d6e5a1d43ff11c0121dbe900beb70facb4fb17ee18991728dd8ce0327b5ecd17ecf9fd8edd9aa5144eacd8ba4e214e4606d0d5064419acbcc170bd1e661be3882a204347bbe0bc1248e9cbac1b3d4cc971390a7850bdd0af6bcbe9eeac70bd077c59bc4fbfafd8331a11cb47679be3cb448c224e3cc92bd887e4a317fa4c9f090b8134279eda34757d04875b8d8152b4f0dae61ef5b0090ca86c2d2c0499799427569b97a25d590ab2c0a56c246e3432f9d750d03b24bfef9f695b9213bf6f6b7c21dc04c0bad2ccba7046d5caa4ff5288db9004da0d22d7f293051cf5fe88b3c37115da4799a6e528df8718f7cf0414ed84c2e91141ccc6ab42dc39872fee28287dc40eeeaabab0cf7652ba178fdbb733a1b5eebbb1b693ec742905b53730b6a2f43a0b7bb1b52d16c332cefcd523e33261dd24fccdd8195d7bd5dcfc69e0b7c9277477124ec11edc1b909262d4a08ef8352f97565db9506f3cae0c3ae2175d363a8cb05953ef828dc8aee4d4ec669ceea4107e0311a69a496e05c4dbb37c00c0237257cc513ce9d5024e7f1a9eb49aef24f595ec683a072519b96b6e9a9bb99b3e12f8e4ba0d70f4d05a6a474239b2f0880aab2834e74a466622e310b71363f57df5bf90d2b467dce44d0161686b3be2836626227d609278d690a3a99d9cc45149594cb8d0ab444cf472ae2527b003de50b7a7350d140a3830c455b6dfd1e75081594d4d2f9f0f08fba00ad717a679539b975a3134b0f386b2b3e521abf26d4b8ed412ef10ba327ecb39437c68db321243b28bcd7407bf2392c18645bd8e1f64373885231e5d18ba7b0263013e06b1dac304d2df7b366c7095112de6b7968774aa096f88626edb2c584d5cc33a8edc485e289549707cbd0f6e0b2a33a1f44396dc32ee18a825e547122843f61a0972d1a529c671691e0e5a8220b49b0e26debb227cb176a88a72f0e0b5d498ab540cf2a5b673b6c559693ceebf06db0459b61cbcd7ca5af077f16c11ad8a7f047267f017bc3288bcbb4c4c8ffc474e006166cd16baf50066e2dda700222e250c429daf47584efcb1ed43b07a1077479ecbd75a79e85a048e17c6caedace8b3fb02dbcea1618461fd0f2e78548db3ca467312ab3f90680513f17b73cd888e8a20fe8b38eb83ae1011f8bcc573d82f31f52c9ea3282e0a257469308ebabbb94559d26ba4371059d6ffd5086b96b49992ef563f3f9ec1e38d9a2c05d2c35f38bdc26eca293a88b5114f065b5f555df29403e131c0725994570ead8380323cf7ff678526b564012fbbe0b183612cef24bdd6d1d2aa562c3c153277fa19fb2483993b8d1f13eac9c30f3ff8f9bf9efce0c6bff88a477f561fc79647e731dbc393e34191386a2d2adaebf19ab16f71d6794dfb15428b626f7893c596805e9aff16e5f29b409bb2ac976d3a6e17f7506b80b8c0c5edcbc2404d090a22d2240ae467c97151bc6f6525009eebd86e3cfdc0cdafd75ef849c45102672654dc02c555ff1c357255a60165c2d565a66a421461221c26f55fc482383c8ecb5645b14821fd56f208faff5adf6307398ea17153006289173122fd0d845d79660eddf40ba19ba13968b9cad6e903184e9db2b896b880d4b02fba590d4d77d5db8175168898ca6b6f35f38582fe27086ebdd12641c882b57d76f96dedf9344e19096bfe638fe062c498bc95af290ba74b9ee88f3b290b3b2fb2f1c91d4a52257e1b1541fcebb02b558c30d860149f80345357453cf60735d79538149d1b337301e6d1c387b5cc93476de6e7b528d0e1a1c3f1027f5f8a150cd156730864233fe7bd5ef8ad34f43c1ccdb8837235f70252636fc0d311cf6c13377e69473f700106ed447fda884fc2123f4f0005f6e9cf1272a15c0f0ca3ff8d9c3f6c51066629c8434d6a6442963e5eb494972cd124fe6c0f06bfd1cf699c12c96364d7b4e3e12f00498f1e3bb45d8bf30fd46e81e65a8894873271bf6bd2145c03e96b3efe1709ba0180311532b1d33b5895dcab5d89ce9856e8feb7dacf880dd92ba39d13ab719f4c8bd1fb0ddc87e92b207e37c02423117502b30d22dfc8f3c85b6782b695d35171bbee63e6cda9f9ec3c41d26ba12bc96a6a9fff8fb40c875ca331f46bae3dc7d3997234f56ebb0e4aac15ccc7243485480eb2bc73a3651a183d03f14e13599bddfc3702e8c5a22be5314ccb735338e17cfde59dfba424970527d9820d8d5a39a54b9476f5010d5b91ab94121b719bb84cb64653c64ad764cab17f8e8aaf65a2c13c5b15e2969ace37f218e863a087d03aadc5f50b56f44c7056d769da3f114e2311944988eafddf38d899e843cfc98d3d475fdbeb8bbc843cc43560f91caf54a74c9870db914479f2054f2e1463cd73fc25e1632159a7330", 0xe16}], 0x1}, 0x0) [ 303.374862][ T3406] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 303.398192][ T3406] usb 3-1: Product: syz [ 303.412704][ T3406] usb 3-1: Manufacturer: syz [ 303.437385][ T2474] usb 2-1: USB disconnect, device number 13 [ 303.450899][ T3406] usb 3-1: config 0 descriptor?? [ 303.480665][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 303.565175][ T3406] usb 3-1: bad CDC descriptors [ 303.571025][ T3406] usb 3-1: bad CDC descriptors [ 303.590658][ T3406] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 303.616402][ T3406] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 303.634715][ T3406] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 303.726985][ T17] usb 5-1: new high-speed USB device number 6 using dummy_hcd 13:35:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="3e3ef30f01ba6400000017f30f09c4e1381532c4c20147ad02000000b9000b000000f3663e0f08660f74c966ba210066ed66ba410066edb80100000066ba4200b80d000000eff30fc7b130000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 303.849068][ T3406] usb 3-1: USB disconnect, device number 4 [ 303.855322][ T9268] usb 4-1: new high-speed USB device number 2 using dummy_hcd 13:35:17 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) [ 303.981722][ T17] usb 5-1: Using ep0 maxpacket: 8 13:35:17 executing program 0: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) r0 = socket$inet(0x10, 0x8000a, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000380)={'ip6gre0\x00', @ifru_addrs=@l2={0x1f, 0xe95, @fixed={[], 0x12}, 0x8, 0x2}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000240)=0xc) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x43}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000500)={'veth1_vlan\x00', @broadcast}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) fsetxattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xe, 0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000340)) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) finit_module(r6, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x1) [ 304.106224][ T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 304.114409][ T9268] usb 4-1: Using ep0 maxpacket: 8 [ 304.129556][ T17] usb 5-1: config 0 has no interface number 0 [ 304.146399][ T9410] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 304.160139][ T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 304.199409][ T9410] team0: Device ipvlan1 failed to register rx_handler [ 304.206394][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 304.234251][ T9268] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 304.248127][ T9268] usb 4-1: config 0 has no interface number 0 [ 304.269235][ T9268] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 304.281794][ T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 304.317148][ T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 304.328822][ T9268] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 13:35:18 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) [ 304.357795][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.371854][ T9268] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 304.390750][ T9268] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 304.406461][ T17] usb 5-1: config 0 descriptor?? [ 304.417590][ T9268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.445838][ T9414] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 304.448381][ T9360] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 304.463143][ T9268] usb 4-1: config 0 descriptor?? [ 304.486650][ T9360] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 304.521093][ T9410] syz-executor.0 (9410) used greatest stack depth: 22368 bytes left [ 304.526270][ T9414] team0: Device ipvlan1 failed to register rx_handler [ 304.538935][ T9364] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 304.559806][ T9364] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 304.621783][ T2486] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 304.821709][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 304.981901][ T2486] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.128770][ T9268] usb 5-1: USB disconnect, device number 6 [ 305.135052][ T2486] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 305.151313][ T2486] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 305.190024][ T2486] usb 2-1: Product: syz [ 305.217833][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.249344][ T2486] usb 2-1: Manufacturer: syz [ 305.263667][ T3406] usb 4-1: USB disconnect, device number 2 [ 305.322160][ T2486] usb 2-1: config 0 descriptor?? [ 305.372212][ T23] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be 13:35:19 executing program 0: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) r0 = socket$inet(0x10, 0x8000a, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000380)={'ip6gre0\x00', @ifru_addrs=@l2={0x1f, 0xe95, @fixed={[], 0x12}, 0x8, 0x2}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000240)=0xc) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x43}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000500)={'veth1_vlan\x00', @broadcast}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) fsetxattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xe, 0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000340)) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) finit_module(r6, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x1) [ 305.415166][ T23] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 305.431328][ T2486] usb 2-1: bad CDC descriptors [ 305.516804][ T2486] usb 2-1: bad CDC descriptors [ 305.568470][ T9483] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 305.575128][ T23] usb 3-1: Product: syz [ 305.581078][ T23] usb 3-1: Manufacturer: syz [ 305.605873][ T2486] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 305.669814][ T23] usb 3-1: config 0 descriptor?? [ 305.680652][ T2486] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 305.725634][ T2486] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 305.728892][ T9483] team0: Device ipvlan1 failed to register rx_handler [ 305.751345][ T2486] usb 2-1: USB disconnect, device number 14 [ 305.813110][ T23] usb 3-1: bad CDC descriptors [ 305.822282][ T23] usb 3-1: bad CDC descriptors [ 305.865331][ T23] cdc_acm 3-1:0.0: Control and data interfaces are not separated! 13:35:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 305.926198][ T23] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 306.018983][ T23] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 306.050803][ T23] usb 3-1: USB disconnect, device number 5 [ 306.407688][ T9268] usb 4-1: new high-speed USB device number 3 using dummy_hcd 13:35:20 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) 13:35:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000300)={0x4, @win={{0x77, 0x0, 0xfff, 0x900000}, 0x1, 0x3, &(0x7f0000000200)={{0x11b7, 0x80000000, 0x101, 0x3}, &(0x7f00000001c0)={{0x8d, 0x4, 0x2, 0x80000001}, &(0x7f00000000c0)={{0x6, 0x0, 0x7, 0x6}}}}, 0xffffffff, &(0x7f0000000240)="cd01a83fe0808c7f0f5ee4117d093299b4b1b09c354cf0ca1d07f345064a544e72338abfd134b914b66b6d881fe35aa8c66d9c563c885efd59083dd17436acec5b9ce934fa4b50df67f73dcbea4c9373bb24dc91f5998bea3c8277df8cf96875918619e0ea46416285e11729025c44a75c12a4d0209893f597384f0b4c3398beaf438e7239632495f2647dc35047ed9a59b9eb0ece1c3d5e6fb3e3", 0x81}}) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x7ff, 0x0) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 13:35:20 executing program 0: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) r0 = socket$inet(0x10, 0x8000a, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000380)={'ip6gre0\x00', @ifru_addrs=@l2={0x1f, 0xe95, @fixed={[], 0x12}, 0x8, 0x2}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000240)=0xc) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x43}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000500)={'veth1_vlan\x00', @broadcast}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) fsetxattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xe, 0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000340)) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) finit_module(r6, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x1) 13:35:20 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) socket(0x10, 0x2, 0x0) 13:35:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@largeio='largeio'}, {@inode64='inode64'}]}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x101001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000580)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$ax25(r5, &(0x7f00000001c0)={{}, [@bcast, @remote, @remote, @default, @null]}, &(0x7f0000000240)=0x48) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0x400, 0x2, 0xfffffffd, 0xa6c}, 0x10) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 306.651950][ T9268] usb 4-1: Using ep0 maxpacket: 8 [ 306.725717][ T9510] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 306.774553][ T9268] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 306.794533][ T9268] usb 4-1: config 0 has no interface number 0 [ 306.806909][ T9518] XFS (loop5): Invalid superblock magic number [ 306.819549][ T9268] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 306.836449][ T9510] team0: Device ipvlan1 failed to register rx_handler [ 306.878631][ T9268] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 306.911760][ T3407] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 306.924065][ T3405] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 306.936920][ T9268] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 306.983017][ T9268] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 307.009361][ T9268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.029730][ T9268] usb 4-1: config 0 descriptor?? [ 307.057170][ T9497] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 307.075456][ T9497] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 307.180536][ T29] audit: type=1800 audit(1593869721.023:16): pid=9531 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15931 res=0 13:35:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000300)={0x4, @win={{0x77, 0x0, 0xfff, 0x900000}, 0x1, 0x3, &(0x7f0000000200)={{0x11b7, 0x80000000, 0x101, 0x3}, &(0x7f00000001c0)={{0x8d, 0x4, 0x2, 0x80000001}, &(0x7f00000000c0)={{0x6, 0x0, 0x7, 0x6}}}}, 0xffffffff, &(0x7f0000000240)="cd01a83fe0808c7f0f5ee4117d093299b4b1b09c354cf0ca1d07f345064a544e72338abfd134b914b66b6d881fe35aa8c66d9c563c885efd59083dd17436acec5b9ce934fa4b50df67f73dcbea4c9373bb24dc91f5998bea3c8277df8cf96875918619e0ea46416285e11729025c44a75c12a4d0209893f597384f0b4c3398beaf438e7239632495f2647dc35047ed9a59b9eb0ece1c3d5e6fb3e3", 0x81}}) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x7ff, 0x0) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 13:35:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000300)={0x4, @win={{0x77, 0x0, 0xfff, 0x900000}, 0x1, 0x3, &(0x7f0000000200)={{0x11b7, 0x80000000, 0x101, 0x3}, &(0x7f00000001c0)={{0x8d, 0x4, 0x2, 0x80000001}, &(0x7f00000000c0)={{0x6, 0x0, 0x7, 0x6}}}}, 0xffffffff, &(0x7f0000000240)="cd01a83fe0808c7f0f5ee4117d093299b4b1b09c354cf0ca1d07f345064a544e72338abfd134b914b66b6d881fe35aa8c66d9c563c885efd59083dd17436acec5b9ce934fa4b50df67f73dcbea4c9373bb24dc91f5998bea3c8277df8cf96875918619e0ea46416285e11729025c44a75c12a4d0209893f597384f0b4c3398beaf438e7239632495f2647dc35047ed9a59b9eb0ece1c3d5e6fb3e3", 0x81}}) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x7ff, 0x0) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 307.331939][ T3405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.342609][ T3407] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.364745][ T9518] XFS (loop5): Invalid superblock magic number [ 307.502080][ T3407] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 307.511658][ T3405] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 307.522856][ T3407] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 307.543192][ T3405] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 307.599652][ T3407] usb 3-1: Product: syz [ 307.622953][ T3407] usb 3-1: Manufacturer: syz [ 307.628470][ T2474] usb 4-1: USB disconnect, device number 3 [ 307.649484][ T3405] usb 2-1: Product: syz [ 307.666093][ T3405] usb 2-1: Manufacturer: syz [ 307.671356][ T3407] usb 3-1: config 0 descriptor?? [ 307.689346][ T3405] usb 2-1: config 0 descriptor?? [ 307.761330][ T3407] usb 3-1: bad CDC descriptors [ 307.768607][ T3407] usb 3-1: bad CDC descriptors [ 307.793417][ T3405] usb 2-1: bad CDC descriptors [ 307.806654][ T3405] usb 2-1: bad CDC descriptors 13:35:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000300)={0x4, @win={{0x77, 0x0, 0xfff, 0x900000}, 0x1, 0x3, &(0x7f0000000200)={{0x11b7, 0x80000000, 0x101, 0x3}, &(0x7f00000001c0)={{0x8d, 0x4, 0x2, 0x80000001}, &(0x7f00000000c0)={{0x6, 0x0, 0x7, 0x6}}}}, 0xffffffff, &(0x7f0000000240)="cd01a83fe0808c7f0f5ee4117d093299b4b1b09c354cf0ca1d07f345064a544e72338abfd134b914b66b6d881fe35aa8c66d9c563c885efd59083dd17436acec5b9ce934fa4b50df67f73dcbea4c9373bb24dc91f5998bea3c8277df8cf96875918619e0ea46416285e11729025c44a75c12a4d0209893f597384f0b4c3398beaf438e7239632495f2647dc35047ed9a59b9eb0ece1c3d5e6fb3e3", 0x81}}) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x7ff, 0x0) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 307.812034][ T3407] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 307.849062][ T3405] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 307.859407][ T3407] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 307.898221][ T3405] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 307.915081][ T3407] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 307.951224][ T3405] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 307.969253][ T3407] usb 3-1: USB disconnect, device number 6 [ 308.011011][ T3405] usb 2-1: USB disconnect, device number 15 13:35:22 executing program 0: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$nbd(r0, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef07749fa55f62d3adff7f9d5e82099cba335a2fd5ede515d5978b97fffeffff63af872a0a18ecf6449fe66884b33c61b3927917b2d8ef665ad9b19f55dd7d020a724232a8b58e9eb39b463929bef2c468429967c5e7be"}, 0x68) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000080)={0x56, &(0x7f00000001c0)="c82740f58d1a26f9d10d802cad3a5bf41868ac139b033e6ad4c141b7c7b1959305e6fbeec5639444f5ca3e45d49b79c73cf149e4e6a2b8576723f7b704c96b92aad19ff084043eeb7fe09c78a930e9b5728dedc9e8de"}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0x2, 0x5, 0x6, 0x80, 0x80, 0x0, 0x7}, 0xc) 13:35:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000300)={0x4, @win={{0x77, 0x0, 0xfff, 0x900000}, 0x1, 0x3, &(0x7f0000000200)={{0x11b7, 0x80000000, 0x101, 0x3}, &(0x7f00000001c0)={{0x8d, 0x4, 0x2, 0x80000001}, &(0x7f00000000c0)={{0x6, 0x0, 0x7, 0x6}}}}, 0xffffffff, &(0x7f0000000240)="cd01a83fe0808c7f0f5ee4117d093299b4b1b09c354cf0ca1d07f345064a544e72338abfd134b914b66b6d881fe35aa8c66d9c563c885efd59083dd17436acec5b9ce934fa4b50df67f73dcbea4c9373bb24dc91f5998bea3c8277df8cf96875918619e0ea46416285e11729025c44a75c12a4d0209893f597384f0b4c3398beaf438e7239632495f2647dc35047ed9a59b9eb0ece1c3d5e6fb3e3", 0x81}}) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x7ff, 0x0) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 13:35:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 308.335688][ T9597] dlm: Unknown command passed to DLM device : 0 [ 308.335688][ T9597] 13:35:22 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) 13:35:22 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) 13:35:22 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) socket(0x10, 0x2, 0x0) [ 308.791609][ T3407] usb 4-1: new high-speed USB device number 4 using dummy_hcd 13:35:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x140) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)) close(r0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rt_sigaction(0x1a, &(0x7f0000000140)={&(0x7f00000001c0)="d89800000081f26667f00fc74e00640ffd781cf042ff07c4a1ecc6e004c442f18c5e35f2430f703c7d1300000050470f9d366764f30f16ebc4e26daa8d5a000000", 0x0, &(0x7f00000002c0)="83844599ade09b00c44290f57682c4e37916ab9f53000000c401e1d125928f0000c48194153bc4a32d493ffac402c2f7e4c4217c5a9720be0000c481f95ee48f69189127", {[0x3f]}}, &(0x7f0000000380)={&(0x7f0000000240)="c40169fb353223333366450f541c009bc4628d8c888eaf88bf67642e3e67660f3838d240d2b7ffefffffc4c3f10bb3c481d0f9c4430f7553000f18e565f247f8", 0x0, &(0x7f0000000340)="c4027d19ca2666400f383b630844f7430007000000c4a14571f400c4c2791ee3410f470ff20f2b5a57f344aec4623d2d8c0c4be636c1c4011174c0"}, 0x8, &(0x7f00000003c0)) [ 308.911618][ T3405] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 308.925517][ T5] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 309.051611][ T3407] usb 4-1: Using ep0 maxpacket: 8 [ 309.101796][ T9268] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 309.141609][ T9603] dlm: Unknown command passed to DLM device : 0 [ 309.141609][ T9603] 13:35:23 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000000c0)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x7, &(0x7f0000000500)=[{&(0x7f00000001c0)="2221023400eeca879a33d3616da22e112f6e5a31c830f19f9ab72b725e9e884ae2b9021811ec98f77b75d23303fe054f14ae371ce1d3d2e00150f7852f07bb642afdaaf80cdc4d3f380700c33ee61469d67a2474cfe4", 0x56, 0x9}, {&(0x7f0000000240)="9a53cf9382166b7cce1505628f3a7ab3967cfdff984622b3c6c9e80b845ea2757758061b9440aa4883334494068bc2e81eff6646826f88a5494a5779ad619f5013199a6f311cce00ddc3e982c0c7825e9acfd6e92ad5edc1f1095d57ca78921999b6fadc64a714", 0x67, 0x7}, {&(0x7f0000000340)="c312180637acd3a72d05b741acf29e509151cdddd0879c332e433817980588c258e06f59b2327fc810eb921f0ed0bf943f7f2afc0a603cd8be97d78ce3c7f1411586f03516fd94e32b44115acb37683d6f23a5bd99faa3", 0x57, 0x6b}, {&(0x7f0000000640)="306273e2cf7e451b0add04000ceba2e7fa8ed91f9b848e1d8135b9804aa8e6c22a63be83a2893b8cf14b4baaff168b844b314ed9b6c666c1aa011c5421fc77368e23e4cbc12dab729d7084420769f724e0d619f0eb2e5354fd9fd3999ebc4f15401694527aa2ce4a945dd367a65eec11694b514321e749e41d4c858d1e9cbd9e68ce4ef7e5ba77cd1fdbad60748c6190215d28e6a40e9f5c54daca63cb13b356e331c52ebfe1dd73fa5e1465ecaf19d2f9f9cfa36288a07d774bbc5ff38647da6592379aaf4fe8", 0xc7, 0x5}, {&(0x7f0000000140)="b87f2a2956ed0c5e814b521954d2c5b4", 0x10, 0xf3}, {&(0x7f0000000400)="f0ef77fd1e4fd2e8c9ff724210f9e12b5b7b17407c86a33ffa7ae7c93da3acf64b533a60ed8534e6d5f1cb46b0f2effc6fc986f63813d6ca6afbfecf832d1c84b9aaa399ef10209d2458", 0x4a, 0x100000001}, {&(0x7f0000000740)="6535086e71cc507614a5b2607998d092f1ac6465cc30e65b8b7ce367682f115a0e004b5240e8b62af8f2e07886e0b5f4ed697a9eb7eeef30ede20a85d42e0dfe21901d9c1d0478d0469152f71ebe6e7be492b1d22646e986e661d87c72972b25d4dcd2d90186e0f955f524ddf1f07e1bf05c352b6c48464b931fbe874abd3a06b2087b758fcb36578dd253a600ddf7eaa947f8f660f7d0cae66530e18088b2c530bb58", 0xa3, 0x2}], 0x8000, &(0x7f00000005c0)=ANY=[@ANYBLOB="757365725f78617474722c61636c2c6e6f61636c2c6e6f757365725f78617474722c61636c2c34b9facfc7ffd05d427ab7b46e6f61646c2c61636c2c61636c2ea0481e633d46494c455f4d4d41502c7365636c6162656c2c66756e633d43"]) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x3f, &(0x7f0000000040)=0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r1, 0x1a}, 0x10) [ 309.175279][ T3407] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 309.212558][ T3407] usb 4-1: config 0 has no interface number 0 [ 309.261820][ T3407] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 13:35:23 executing program 4: r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, r0, 0x388, 0x8) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x8e, &(0x7f0000000080)=@string={0x8e, 0x3, "23550cb98a4c3f7e75f52dd0ff0756fbf0b061fe44961afcbc02f7f0b12e09adec1bfb5a36e8d1668db333c0d8010441b1dbc88f4cb3cc5c05d8ee46bbe48f1e2cbbf68282f2d0c221151b4efbe820d81cce6e80da2ee0aaf9406f346b758dd99992cc6fd09f25a908a1ca7bafaf7bbf7efe08bd905c419401cefc9b0ff0d6fa261e87d5afba8ebe340a66cb"}}]}) [ 309.311669][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.322019][ T3405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.341196][ T3407] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 309.364161][ T3407] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 309.375456][ T3407] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 309.386380][ T3407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.398412][ T3407] usb 4-1: config 0 descriptor?? [ 309.415068][ T9626] erofs: Unknown parameter '4¹úÏÇÿÐ]Bz·´noadl' [ 309.436264][ T9601] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 309.446603][ T9601] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 309.496082][ T3405] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 309.501865][ T9268] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.505445][ T5] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 309.525250][ T3405] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 309.525982][ T9633] erofs: Unknown parameter '4¹úÏÇÿÐ]Bz·´noadl' [ 309.536231][ T3405] usb 2-1: Product: syz [ 309.552986][ T5] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 309.567340][ T3405] usb 2-1: Manufacturer: syz [ 309.573089][ T5] usb 3-1: Product: syz [ 309.578509][ T5] usb 3-1: Manufacturer: syz [ 309.583582][ T3405] usb 2-1: config 0 descriptor?? [ 309.594419][ T5] usb 3-1: config 0 descriptor?? 13:35:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x329280, 0x0) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x1, 0x20, 0x40, "6f95cf0480edf7aebb50e6bb0b4aad6f4c38ea5609bcf850d3730287488d023a4da95c20e916264df52f21d17e7aa76d05468033a93c5b69d973ed41591e09", 0x26}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000300)=""/250) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000100)={0x2, 0x107b, 0x5, 0x80000001, 0x9, 0x3f, 0x1, 0x77e7, 0x20}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014008103b10de313ff020000000000000000000000000001962108000a0000000000060002000100000014001f0000000000000000bfef00ffff"], 0x5c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) [ 309.631007][ T3405] usb 2-1: bad CDC descriptors [ 309.654954][ T3405] usb 2-1: bad CDC descriptors [ 309.666968][ T3405] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 309.675206][ T5] usb 3-1: bad CDC descriptors [ 309.682147][ T5] usb 3-1: bad CDC descriptors [ 309.691898][ T9268] usb 6-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 309.694846][ T5] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 309.700946][ T9268] usb 6-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 309.700962][ T9268] usb 6-1: Product: syz [ 309.700980][ T9268] usb 6-1: Manufacturer: syz [ 309.726199][ T3405] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 309.732802][ T5] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 309.739350][ T3405] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 309.748625][ T5] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 309.748782][ T9268] usb 6-1: config 0 descriptor?? [ 309.769361][ T9655] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.791130][ T9655] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.826817][ T3407] usb 2-1: USB disconnect, device number 16 [ 309.851072][ T9268] usb 6-1: bad CDC descriptors [ 309.860902][ T9268] usb 6-1: bad CDC descriptors [ 309.862172][ T3405] usb 3-1: USB disconnect, device number 7 [ 309.878887][ T9268] cdc_acm 6-1:0.0: Control and data interfaces are not separated! 13:35:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = accept$alg(r4, 0x0, 0x0) signalfd4(r5, &(0x7f0000000280)={[0x1]}, 0x8, 0x80800) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x40, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x40}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) [ 309.957523][ T9268] cdc_acm 6-1:0.0: This needs exactly 3 endpoints 13:35:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xed, 0x49, 0x71, 0x20, 0x582, 0x1b, 0x3342, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x8, 0x6, 0x14c, &(0x7f0000000180)}) [ 310.012975][ T9268] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 310.046403][ T5] usb 4-1: USB disconnect, device number 4 [ 310.103967][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.181287][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.194874][ T3405] usb 6-1: USB disconnect, device number 2 13:35:24 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@acquire={0x128, 0x17, 0x7, 0x0, 0x0, {{@in6=@private2}, @in6=@ipv4={[], [], @loopback}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback}, {{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}}, 0x81}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x620000, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x66, &(0x7f0000000040)="8653e286215aaf65168a2de5eab74ca456853514d9c52a2187763df90bcb00b021e56d19224981e7a915e4370fb2f2f1315c5a7da5a509be3fc608b1cfa3a2ee9ccfd1b4c6aca733685f79c75390dde58c447e176cc71091452722eb65fd98cec7044df79b38"}) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:35:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008001b0000000000688788613f55f21a7bb9dda209373455e33f53b406642717d2d990ec1b4ceb653d671c8f514d3c2555533a4e02f29f8e5a731faed2bbc6dda22f163a4136d44a66fed8604977487128c5f24865d9d415cdc2a7c659c87c2ae9112168c9bb1f6d258f5a996125ba1e4f0aeb5584feb12b7e2124025fa392159f659ded59cbe20717667a221b864c277bab3cbc6d737579a0b081eabb"], 0x44}}, 0x0) [ 310.409078][ T9709] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 310.481812][ T9744] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 310.511706][ T3407] usb 5-1: new high-speed USB device number 7 using dummy_hcd 13:35:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:24 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) 13:35:24 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) 13:35:24 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) socket(0x10, 0x2, 0x0) 13:35:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x15, 0x8000e, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="649269c390c27cb569892d65c5bba7157c7f3bb84e46eb806f82aeb465de4fb9b67ce79f9aef99becd6f521c93e3d2543929a122fda9937cc853cf7c526d153604f3ed5cc9ca26e2fe95773a4e67c93f0613", 0x52}, {&(0x7f0000000380)="43d271950f5f3ff7b65b6248ab0695d9a53f6c16ba0c456179ae53a8874cb6674496f45143a13fe79da7619c3dd1201010727b6c1007f718ade547468d7bd855cfe8ac6c25d36e7cde2a149e5717429d8a4364bcd6a8a9e8ad2a3cdea3bccfaa20762a246ff14da586c3206b885059a844cbde803a2ec37a0076352ba99e84572ec7621db6589df0e49f9ede9eff918a4ad5eb0a26f00fd04d9e25749bdaa614e8d1d76e6d60b46d23c44007699b3e7c03e8bfb41a624c09ebc0f7d269561316058c5d77c0b942926a13ee68eb5528ac38cce3db", 0xd4}, {&(0x7f0000000080)="d8a81e22e2993e4882b0b58abe0c7d3b2dd831", 0x13}, {&(0x7f0000000180)="63c853dd762252ca4aedd932d796258017e4d2f59caf045e43b35718b60ede35a92645e84df88e97417419baccba48f5a5fe42fe77dc3f18b2b3c488f3b222422fc1490ebfd444310751dd3a003cdc04588c12350f5a5b77", 0x58}], 0x4, 0x3f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x74}}, 0x0) [ 310.771591][ T3407] usb 5-1: Using ep0 maxpacket: 32 13:35:24 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80000, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010600090002206d041cc304000000950109022400011000a000090400000103010100092100000001220500090481"], 0x0) [ 311.005438][ T9804] Unknown ioctl 8822 [ 311.021868][ T3405] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 311.029422][ T3406] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 311.052191][ T5] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 311.071620][ T9268] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 311.085007][ T3407] usb 5-1: New USB device found, idVendor=0582, idProduct=001b, bcdDevice=33.42 [ 311.118586][ T3407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.127561][ T3407] usb 5-1: Product: syz [ 311.132521][ T3407] usb 5-1: Manufacturer: syz [ 311.137242][ T3407] usb 5-1: SerialNumber: syz [ 311.145032][ T3407] usb 5-1: config 0 descriptor?? [ 311.183653][ T3407] usb 5-1: bad CDC descriptors [ 311.189184][ T3407] usb 5-1: bad CDC descriptors [ 311.271688][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 311.341623][ T9268] usb 4-1: Using ep0 maxpacket: 8 [ 311.386772][ T2486] usb 5-1: USB disconnect, device number 7 [ 311.461667][ T9268] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 311.469812][ T9268] usb 4-1: config 0 has no interface number 0 [ 311.477844][ T9268] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 311.481720][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.490132][ T9268] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 311.499248][ T3406] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.511592][ T9268] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 311.520315][ T3405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.531912][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 311.545983][ T9268] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 311.556008][ T9268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.570357][ T9268] usb 4-1: config 0 descriptor?? [ 311.595876][ T9791] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 311.603851][ T9791] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 311.681589][ T23] usb 1-1: config 16 has an invalid interface number: 129 but max is 0 [ 311.688213][ T5] usb 6-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 311.690313][ T23] usb 1-1: config 16 has 2 interfaces, different from the descriptor's value: 1 [ 311.698999][ T3405] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 311.699017][ T3405] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 311.699030][ T3405] usb 3-1: Product: syz [ 311.699042][ T3405] usb 3-1: Manufacturer: syz [ 311.700349][ T3406] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 311.726436][ T23] usb 1-1: config 16 has no interface number 1 [ 311.730473][ T3405] usb 3-1: config 0 descriptor?? [ 311.760144][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.768389][ T5] usb 6-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 311.809401][ T5] usb 6-1: Product: syz [ 311.820572][ T3406] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 311.837960][ T5] usb 6-1: Manufacturer: syz [ 311.852678][ T3406] usb 2-1: Product: syz [ 311.857449][ T5] usb 6-1: config 0 descriptor?? [ 311.890809][ T3405] usb 3-1: bad CDC descriptors [ 311.902921][ T3405] usb 3-1: bad CDC descriptors [ 311.911130][ T3406] usb 2-1: Manufacturer: syz [ 311.925882][ T9268] usb 4-1: USB disconnect, device number 5 [ 311.937750][ T3405] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 311.950638][ T3406] usb 2-1: config 0 descriptor?? [ 311.983354][ T5] usb 6-1: bad CDC descriptors [ 311.991909][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 311.995541][ T5] usb 6-1: bad CDC descriptors [ 312.000961][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=149 [ 312.000974][ T23] usb 1-1: SerialNumber: syz [ 312.040024][ T3405] cdc_acm 3-1:0.0: This needs exactly 3 endpoints 13:35:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) getpid() r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getpeername(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000000c0)=0x80) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000280)=0x4) [ 312.083239][ T3405] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 312.093071][ T23] hub 1-1:16.0: bad descriptor, ignoring hub [ 312.119791][ T3406] usb 2-1: bad CDC descriptors [ 312.128574][ T23] hub: probe of 1-1:16.0 failed with error -5 [ 312.129537][ T3406] usb 2-1: bad CDC descriptors [ 312.147845][ T5] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 312.158476][ T3405] usb 3-1: USB disconnect, device number 8 [ 312.175939][ T23] usbhid 1-1:16.0: couldn't find an input interrupt endpoint [ 312.176179][ T3406] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 312.214207][ T5] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 312.221321][ T23] hub 1-1:16.129: bad descriptor, ignoring hub [ 312.240077][ T5] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 312.243713][ T23] hub: probe of 1-1:16.129 failed with error -5 [ 312.250027][ T3406] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 312.276795][ T3406] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 312.302614][ T23] usb 1-1: USB disconnect, device number 5 [ 312.305943][ T5] usb 6-1: USB disconnect, device number 3 [ 312.341524][ T3406] usb 2-1: USB disconnect, device number 17 13:35:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) getpid() r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getpeername(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000000c0)=0x80) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000280)=0x4) 13:35:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:26 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) 13:35:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) getpid() r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getpeername(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000000c0)=0x80) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000280)=0x4) 13:35:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:26 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) [ 312.799237][ T9804] Unknown ioctl 8822 13:35:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) getpid() r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getpeername(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000000c0)=0x80) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000280)=0x4) [ 312.861467][ T5] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 312.943033][ T3407] usb 3-1: new high-speed USB device number 9 using dummy_hcd 13:35:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) getpid() r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getpeername(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000000c0)=0x80) [ 313.081648][ T9164] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 313.111536][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 313.131548][ T3406] usb 2-1: new high-speed USB device number 18 using dummy_hcd 13:35:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) getpid() r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 313.233749][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 313.242431][ T3404] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 313.250612][ T5] usb 4-1: config 0 has no interface number 0 [ 313.260628][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 313.284755][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 313.331875][ T3407] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.341910][ T9164] usb 1-1: Using ep0 maxpacket: 32 [ 313.344490][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 313.363637][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 313.373873][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.385803][ T5] usb 4-1: config 0 descriptor?? [ 313.432928][ T9910] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.441039][ T9910] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.461808][ T9164] usb 1-1: config 16 has an invalid interface number: 129 but max is 0 [ 313.470325][ T9164] usb 1-1: config 16 has 2 interfaces, different from the descriptor's value: 1 13:35:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) getpid() socket$inet(0x10, 0x3, 0x0) [ 313.508223][ T9164] usb 1-1: config 16 has no interface number 1 [ 313.514045][ T3407] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 313.515961][ T9164] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.526572][ T3404] usb 6-1: Using ep0 maxpacket: 8 [ 313.541736][ T3406] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.578926][ T3407] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 313.594363][ T3407] usb 3-1: Product: syz [ 313.598733][ T3407] usb 3-1: Manufacturer: syz [ 313.605166][ T3407] usb 3-1: config 0 descriptor?? [ 313.621755][ T9164] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 313.630979][ T9164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=149 [ 313.652023][ T3407] usb 3-1: bad CDC descriptors [ 313.659412][ T3407] usb 3-1: bad CDC descriptors [ 313.672330][ T3407] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 313.680421][ T3407] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 313.703753][ T9164] usb 1-1: SerialNumber: syz [ 313.704161][ T3406] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 313.732030][ T3404] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 313.740054][ T3404] usb 6-1: config 0 has no interface number 0 [ 313.748295][ T3407] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 313.756750][ T3406] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 313.767182][ T3404] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 313.782537][ T9164] hub 1-1:16.0: bad descriptor, ignoring hub [ 313.786651][ T3406] usb 2-1: Product: syz [ 313.788600][ T9164] hub: probe of 1-1:16.0 failed with error -5 [ 313.801762][ T3404] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 313.823044][ T3406] usb 2-1: Manufacturer: syz [ 313.828992][ T9164] usbhid 1-1:16.0: couldn't find an input interrupt endpoint [ 313.839165][ T3406] usb 2-1: config 0 descriptor?? [ 313.853276][ T3404] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 313.856692][ T23] usb 4-1: USB disconnect, device number 6 [ 313.877742][ T3404] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 313.885120][ T9164] hub 1-1:16.129: bad descriptor, ignoring hub [ 313.899345][ T3404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.912251][ T9164] hub: probe of 1-1:16.129 failed with error -5 [ 313.913262][ T3406] usb 2-1: bad CDC descriptors [ 313.930882][ T3406] usb 2-1: bad CDC descriptors [ 313.942380][ T3404] usb 6-1: config 0 descriptor?? [ 313.948005][ T3406] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 313.964643][ T3406] cdc_acm 2-1:0.0: This needs exactly 3 endpoints 13:35:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) getpid() 13:35:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1806000200850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)) [ 313.986246][ T3406] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 314.013181][ T5] usb 3-1: USB disconnect, device number 9 [ 314.022005][ T9927] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 314.074221][ T9927] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 314.111668][ T9164] usb 1-1: USB disconnect, device number 6 [ 314.114850][ T12] usb 2-1: USB disconnect, device number 18 13:35:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1806000200850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000580)) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)) 13:35:28 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) [ 314.706682][ T9164] usb 6-1: USB disconnect, device number 4 [ 314.761567][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 314.901578][ T9268] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 315.132054][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.148584][ T9268] usb 4-1: Using ep0 maxpacket: 8 13:35:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:29 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) [ 315.271522][ T9268] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 315.279553][ T9268] usb 4-1: config 0 has no interface number 0 [ 315.301838][ T23] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 315.310921][ T23] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 315.352287][ T9268] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 315.394505][ T23] usb 3-1: Product: syz [ 315.398714][ T23] usb 3-1: Manufacturer: syz [ 315.426992][ T9268] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 315.475998][ T23] usb 3-1: config 0 descriptor?? [ 315.501426][ T9268] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 315.511203][ T9268] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 13:35:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 315.551572][ T23] usb 3-1: bad CDC descriptors [ 315.565381][ T23] usb 3-1: bad CDC descriptors [ 315.570603][ T23] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 315.606231][ T9268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.621372][ T23] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 315.621410][ T3404] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 315.627903][ T23] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 315.635520][ T12] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 315.657780][ T9268] usb 4-1: config 0 descriptor?? 13:35:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 315.716676][T10030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 315.733405][ T23] usb 3-1: USB disconnect, device number 10 [ 315.738560][T10030] raw-gadget gadget: fail, usb_ep_enable returned -22 13:35:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 315.931566][ T3404] usb 6-1: Using ep0 maxpacket: 8 [ 316.021762][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.031566][ T2474] usb 1-1: new high-speed USB device number 7 using dummy_hcd 13:35:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 316.074663][ T3404] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 316.091857][ T23] usb 4-1: USB disconnect, device number 7 [ 316.100046][ T3404] usb 6-1: config 0 has no interface number 0 [ 316.125229][ T3404] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 316.178193][ T3404] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 316.190511][ T12] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 316.209758][ T12] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 316.256919][ T3404] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 316.277642][ T12] usb 2-1: Product: syz [ 316.281846][ T2474] usb 1-1: Using ep0 maxpacket: 8 [ 316.319190][ T12] usb 2-1: Manufacturer: syz [ 316.354148][ T3404] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 316.367138][ T3404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.367765][ T12] usb 2-1: config 0 descriptor?? [ 316.387211][ T3404] usb 6-1: config 0 descriptor?? [ 316.402296][ T2474] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 316.410289][ T2474] usb 1-1: config 0 has no interface number 0 [ 316.422691][ T2474] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 316.425032][T10058] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 316.437302][ T2474] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 316.443329][T10058] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 316.464990][ T12] usb 2-1: bad CDC descriptors [ 316.470857][ T12] usb 2-1: bad CDC descriptors [ 316.478136][ T2474] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 316.481721][ T12] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 316.502928][ T12] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 316.505614][ T2474] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 316.509559][ T12] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 316.570044][ T2474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.585020][ T2474] usb 1-1: config 0 descriptor?? [ 316.616042][T10074] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 316.633594][T10074] raw-gadget gadget: fail, usb_ep_enable returned -22 13:35:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 316.675705][ T3404] usb 2-1: USB disconnect, device number 19 13:35:30 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) 13:35:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 317.066367][ T2474] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 317.102504][ T3404] usb 6-1: USB disconnect, device number 5 13:35:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 317.131970][ T9268] usb 1-1: USB disconnect, device number 7 [ 317.144334][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd 13:35:31 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) [ 317.391604][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 317.431439][ T2474] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.521508][ T23] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 317.529534][ T23] usb 4-1: config 0 has no interface number 0 [ 317.571769][ T2474] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 317.580844][ T2474] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 317.618778][ T23] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 317.621470][ T12] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 317.663292][ T2474] usb 3-1: Product: syz [ 317.667494][ T2474] usb 3-1: Manufacturer: syz 13:35:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 317.710831][ T23] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 317.740517][ T2474] usb 3-1: config 0 descriptor?? [ 317.781676][ T23] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 317.826571][ T2474] usb 3-1: bad CDC descriptors [ 317.832636][ T2474] usb 3-1: bad CDC descriptors [ 317.859444][ T23] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 13:35:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 317.876554][ T2474] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 317.895952][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.907581][ T2474] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 317.920080][ T2474] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 317.940875][ T23] usb 4-1: config 0 descriptor?? 13:35:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 317.990955][T10159] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 318.010494][T10159] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 318.018973][ T2474] usb 3-1: USB disconnect, device number 11 13:35:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 318.111657][ T3404] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 318.121480][ T3407] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 318.131550][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.284269][ T12] usb 2-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 318.297883][ T12] usb 2-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 318.310205][ T12] usb 2-1: Product: syz [ 318.316918][ T12] usb 2-1: Manufacturer: syz [ 318.324399][ T12] usb 2-1: config 0 descriptor?? [ 318.369936][ T12] usb 2-1: bad CDC descriptors [ 318.375352][ T2474] usb 4-1: USB disconnect, device number 8 [ 318.376762][ T12] usb 2-1: bad CDC descriptors [ 318.407755][ T12] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 318.426008][ T3404] usb 1-1: Using ep0 maxpacket: 8 [ 318.431181][ T3407] usb 6-1: Using ep0 maxpacket: 8 [ 318.437635][ T12] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 318.458115][ T12] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 318.584660][ T3407] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 318.592932][ T3404] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 318.611852][ T3404] usb 1-1: config 0 has no interface number 0 [ 318.622806][ T3407] usb 6-1: config 0 has no interface number 0 [ 318.633640][ T3404] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 318.645014][ T3407] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 318.656362][ T3404] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 318.666845][ T3407] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 318.678273][ T3404] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 318.695974][ T3407] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 318.706794][ T3404] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 318.716796][ T3407] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 318.731026][ T3404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.757147][ T3407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.773171][ T3404] usb 1-1: config 0 descriptor?? [ 318.778445][ T5] usb 2-1: USB disconnect, device number 20 [ 318.807435][T10209] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 318.815487][ T3407] usb 6-1: config 0 descriptor?? [ 318.827952][T10209] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 318.868328][T10210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 318.887363][T10210] raw-gadget gadget: fail, usb_ep_enable returned -22 13:35:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:32 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x145040, 0x1, 0x12}, 0x18) 13:35:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:33 executing program 1: 13:35:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 319.281453][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd 13:35:33 executing program 1: [ 319.380508][ T5] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 319.512027][ T12] usb 1-1: USB disconnect, device number 8 [ 319.576582][ T9268] usb 6-1: USB disconnect, device number 6 [ 319.661648][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.671256][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 319.794545][ T23] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 319.807698][ T23] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 319.812848][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 319.825037][ T23] usb 3-1: Product: syz [ 319.830581][ T23] usb 3-1: Manufacturer: syz [ 319.831245][ T5] usb 4-1: config 0 has no interface number 0 [ 319.840214][ T23] usb 3-1: config 0 descriptor?? [ 319.868926][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 319.904104][ T23] usb 3-1: bad CDC descriptors [ 319.910161][ T23] usb 3-1: bad CDC descriptors [ 319.939544][ T23] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 319.946007][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 319.979829][ T23] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 320.008064][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 320.024639][ T23] cdc_acm: probe of 3-1:0.0 failed with error -22 13:35:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 320.076677][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 320.096363][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.098366][ T9268] usb 3-1: USB disconnect, device number 12 13:35:34 executing program 1: 13:35:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 320.169722][ T5] usb 4-1: config 0 descriptor?? 13:35:34 executing program 1: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 320.218243][T10298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 320.244643][T10298] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 320.531594][ T2474] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 320.575503][ T5] usb 4-1: USB disconnect, device number 9 [ 320.791258][ T2474] usb 1-1: Using ep0 maxpacket: 8 [ 320.911301][ T2474] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.919328][ T2474] usb 1-1: config 0 has no interface number 0 [ 320.935981][ T2474] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 320.971501][ T2474] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 320.983724][ T2474] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 320.994352][ T2474] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 321.004310][ T2474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.014401][ T2474] usb 1-1: config 0 descriptor?? [ 321.043569][T10359] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 321.063360][T10359] raw-gadget gadget: fail, usb_ep_enable returned -22 13:35:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:35 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @null, @null, @rose, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) 13:35:35 executing program 1: syz_usb_connect(0x0, 0x58, 0x0, 0x0) 13:35:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 321.501439][ T5] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 321.571335][ T12] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 321.580259][ T2474] usb 1-1: USB disconnect, device number 9 [ 321.791449][ T3404] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 321.831341][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 321.908742][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.967557][ T12] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 321.985331][ T12] usb 4-1: config 0 has no interface number 0 [ 321.995220][ T12] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 322.025929][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 322.036562][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 322.046872][ T12] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 322.056691][ T3404] usb 6-1: Using ep0 maxpacket: 8 [ 322.062096][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.076670][ T12] usb 4-1: config 0 descriptor?? [ 322.082202][ T5] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 322.094523][ T5] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 322.109823][ T5] usb 3-1: Product: syz [ 322.119633][T10426] raw-gadget gadget: fail, usb_ep_enable returned -22 13:35:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:36 executing program 1: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 322.133427][ T5] usb 3-1: Manufacturer: syz [ 322.135736][T10426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 322.146757][ T5] usb 3-1: config 0 descriptor?? [ 322.194639][ T3404] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 322.232263][ T5] usb 3-1: bad CDC descriptors [ 322.246575][ T5] usb 3-1: bad CDC descriptors [ 322.260813][ T3404] usb 6-1: config 0 has no interface number 0 13:35:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 322.291811][ T5] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 322.299656][ T5] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 322.311255][ T3404] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 322.340290][ T3404] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 322.357334][ T5] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 322.442577][ T5] usb 3-1: USB disconnect, device number 13 [ 322.449529][ T3404] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 322.500732][ T3404] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 13:35:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 322.561932][ T3404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.571223][ T2474] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 322.591963][ T3404] usb 6-1: config 0 descriptor?? [ 322.610966][ T3406] usb 4-1: USB disconnect, device number 10 [ 322.624369][T10435] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 322.651065][T10435] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 322.821233][ T2474] usb 1-1: Using ep0 maxpacket: 8 [ 322.953319][ T2474] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 322.970561][ T2474] usb 1-1: config 0 has no interface number 0 [ 322.980900][ T2474] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 322.998153][ T2474] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 323.008571][ T2474] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 323.025266][ T2474] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 323.036905][ T2474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.042869][ T3406] usb 6-1: USB disconnect, device number 7 [ 323.055833][ T2474] usb 1-1: config 0 descriptor?? [ 323.094417][T10483] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 323.127471][T10483] raw-gadget gadget: fail, usb_ep_enable returned -22 13:35:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:37 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[], 0x0) 13:35:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:37 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240002, 0x0) 13:35:37 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 323.559742][ T2474] usb 1-1: USB disconnect, device number 10 [ 323.611211][ T9268] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 323.613905][ T3404] usb 3-1: new high-speed USB device number 14 using dummy_hcd 13:35:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 323.691578][ T5] usb 4-1: new high-speed USB device number 11 using dummy_hcd 13:35:37 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 323.881336][ T9268] usb 2-1: device descriptor read/64, error 18 [ 323.931542][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 324.063285][ T3404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.073429][ T12] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 324.091329][ T5] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.099507][ T5] usb 4-1: config 0 has no interface number 0 [ 324.107678][ T5] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 324.120543][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 324.131379][ T5] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 324.142649][ T5] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 324.152518][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:35:38 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 324.164409][ T5] usb 4-1: config 0 descriptor?? [ 324.201535][ T3404] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 324.204042][T10566] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 324.215301][ T3404] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 324.245767][ T3404] usb 3-1: Product: syz [ 324.250365][ T3404] usb 3-1: Manufacturer: syz [ 324.258424][ T3404] usb 3-1: config 0 descriptor?? [ 324.260841][T10566] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 324.281201][ T9268] usb 2-1: device descriptor read/64, error 18 13:35:38 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 324.306612][ T3404] usb 3-1: bad CDC descriptors [ 324.318219][ T3404] usb 3-1: bad CDC descriptors [ 324.331240][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 324.345662][ T3404] cdc_acm 3-1:0.0: Control and data interfaces are not separated! 13:35:38 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 324.386079][ T3404] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 324.405291][ T3404] cdc_acm: probe of 3-1:0.0 failed with error -22 13:35:38 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 324.457365][ T12] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 324.474926][ T12] usb 6-1: config 0 has no interface number 0 [ 324.487173][ T12] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 324.507415][ T12] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 324.551219][ T12] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 324.551609][ T9268] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 324.591575][ T5] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 324.607108][ T12] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 324.633309][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.651756][ T3404] usb 3-1: USB disconnect, device number 14 [ 324.671842][ T3405] usb 4-1: USB disconnect, device number 11 [ 324.690402][ T12] usb 6-1: config 0 descriptor?? [ 324.737050][T10587] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 324.766213][T10587] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 324.871296][ T9268] usb 2-1: device descriptor read/64, error 18 [ 324.891341][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 325.023113][ T5] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 325.046305][ T5] usb 1-1: config 0 has no interface number 0 [ 325.059818][ T5] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 325.088667][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 325.116607][ T5] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 325.150324][ T5] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 325.178777][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.202558][ T5] usb 1-1: config 0 descriptor?? [ 325.215283][ T2474] usb 6-1: USB disconnect, device number 8 [ 325.249358][T10597] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 325.281151][ T9268] usb 2-1: device descriptor read/64, error 18 13:35:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 325.322869][T10597] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 325.401501][ T9268] usb usb2-port1: attempt power cycle [ 325.654806][ T17] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 325.663165][ T2474] usb 1-1: USB disconnect, device number 11 [ 325.901292][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 326.021213][ T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.029405][ T17] usb 4-1: config 0 has no interface number 0 [ 326.037180][ T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 326.048805][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 326.059868][ T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 326.070260][ T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 326.079951][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.095815][ T17] usb 4-1: config 0 descriptor?? [ 326.113566][T10678] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 326.121765][ T9268] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 326.127328][T10678] raw-gadget gadget: fail, usb_ep_enable returned -22 13:35:40 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[], 0x0) 13:35:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:40 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009bc2a64021040e00be2735e2000109024600010000000009040000000202ff0005240600000000000000000006241a000000052406000005240000000d240f0100"/88], 0x0) 13:35:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 326.300031][ T9268] usb 2-1: device descriptor read/8, error -71 13:35:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 326.516769][ T2474] usb 4-1: USB disconnect, device number 12 [ 326.534624][ T9268] usb 2-1: device descriptor read/8, error -71 13:35:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 326.611300][ T17] usb 3-1: new high-speed USB device number 15 using dummy_hcd 13:35:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 326.691821][ T3405] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 326.701159][ T2486] usb 6-1: new high-speed USB device number 9 using dummy_hcd 13:35:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) [ 326.947325][ T2486] usb 6-1: Using ep0 maxpacket: 8 [ 326.951148][ T3405] usb 1-1: Using ep0 maxpacket: 8 [ 326.991474][ T17] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.025063][ T9268] usb 2-1: new high-speed USB device number 24 using dummy_hcd 13:35:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) [ 327.083770][ T3405] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 327.086315][ T2486] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 327.097586][ T3405] usb 1-1: config 0 has no interface number 0 [ 327.103491][ T2486] usb 6-1: config 0 has no interface number 0 [ 327.131539][ T17] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=27.be [ 327.139912][ T3405] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 327.146320][ T2486] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 327.174909][ T17] usb 3-1: New USB device strings: Mfr=53, Product=226, SerialNumber=0 [ 327.180059][ T3405] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 327.194977][ T17] usb 3-1: Product: syz [ 327.199266][ T17] usb 3-1: Manufacturer: syz [ 327.209876][ T2486] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 327.225371][ T3405] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 327.232507][ T9268] usb 2-1: device descriptor read/8, error -61 [ 327.243523][ T17] usb 3-1: config 0 descriptor?? [ 327.249404][ T2486] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 327.260017][ T2486] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 327.270065][ T2486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.287331][ T17] usb 3-1: bad CDC descriptors [ 327.291692][ T3405] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 327.292918][ T2486] usb 6-1: config 0 descriptor?? [ 327.322829][ T17] usb 3-1: bad CDC descriptors [ 327.325341][ T3405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.342618][ T17] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 327.351845][ T3405] usb 1-1: config 0 descriptor?? [ 327.366497][ T17] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 327.380523][T10740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 327.386637][T10741] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 327.395915][T10740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 327.407794][ T17] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 327.415210][T10741] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 327.488343][ T3404] usb 3-1: USB disconnect, device number 15 [ 327.512704][ T9268] usb 2-1: device descriptor read/8, error -61 [ 327.635429][ T9268] usb usb2-port1: unable to enumerate USB device [ 327.874537][ T9268] usb 1-1: USB disconnect, device number 12 [ 327.964395][ T17] usb 6-1: USB disconnect, device number 9 13:35:43 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[], 0x0) 13:35:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:43 executing program 2: 13:35:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:43 executing program 2: 13:35:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="110000000000000004f402000100000000000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000044100900000000000000000000007e000000000011000000000000000000001f0000000000e3ba00000000000000"], 0x98}, 0x0) 13:35:43 executing program 2: 13:35:43 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 13:35:43 executing program 2: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 329.731863][ T3405] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 329.771315][ T2486] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 329.793499][ T3404] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 329.978086][ T3405] usb 1-1: Using ep0 maxpacket: 8 [ 330.011189][ T2486] usb 6-1: Using ep0 maxpacket: 8 [ 330.037258][ T12] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 330.081508][ T3404] usb 2-1: device descriptor read/64, error 18 [ 330.128676][ T3405] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 330.133037][ T2486] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 330.151389][ T2486] usb 6-1: config 0 has no interface number 0 [ 330.157954][ T2486] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 330.164594][ T3405] usb 1-1: config 0 has no interface number 0 [ 330.173463][ T2486] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 330.177666][ T3405] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 330.192445][ T2486] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 330.197904][ T3405] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 330.209663][ T2486] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 330.217647][ T3405] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 330.217677][ T3405] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 330.217693][ T3405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.219421][ T3405] usb 1-1: config 0 descriptor?? [ 330.257419][ T2486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.295749][ T2486] usb 6-1: config 0 descriptor?? [ 330.298976][T10868] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 330.311319][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 330.314119][T10867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 330.334110][T10867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 330.363675][T10868] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 330.436241][ T12] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 330.449078][ T12] usb 4-1: config 0 has no interface number 0 [ 330.466735][ T12] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 330.480235][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 330.520097][ T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 330.541181][ T3404] usb 2-1: device descriptor read/64, error 18 [ 330.562169][ T12] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 330.639213][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.726330][ T12] usb 4-1: config 0 descriptor?? [ 330.801713][T10888] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 330.813344][T10888] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 330.836461][ T5] usb 6-1: USB disconnect, device number 10 [ 330.850988][ T3404] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 331.141024][ T3404] usb 2-1: device descriptor read/64, error 18 [ 331.174884][T10868] ------------[ cut here ]------------ [ 331.181003][ C0] list_del corruption. next->prev should be ffff8880a18ff618, but was ffff8880a913ab18 [ 331.191336][ C0] ------------[ cut here ]------------ [ 331.196812][ C0] kernel BUG at lib/list_debug.c:54! [ 331.202186][ C0] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 331.208259][ C0] CPU: 0 PID: 7197 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 331.216840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.227230][ C0] RIP: 0010:__list_del_entry_valid.cold+0x48/0x55 [ 331.233718][ C0] Code: e8 e1 2a c2 fd 0f 0b 4c 89 e2 48 89 ee 48 c7 c7 60 93 93 88 e8 cd 2a c2 fd 0f 0b 48 89 ee 48 c7 c7 20 94 93 88 e8 bc 2a c2 fd <0f> 0b cc cc cc cc cc cc cc cc cc cc cc 41 57 41 56 41 55 41 54 55 [ 331.253302][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00010082 [ 331.259348][ C0] RAX: 0000000000000054 RBX: ffff8880a18ff600 RCX: 0000000000000000 [ 331.267302][ C0] RDX: ffff8880575644c0 RSI: ffffffff815d4f87 RDI: fffff52000000f4b [ 331.275250][ C0] RBP: ffff8880a18ff618 R08: 0000000000000054 R09: ffff8880ae6318e7 [ 331.283219][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809a5d6c68 [ 331.291170][ C0] R13: ffff88809fa5d618 R14: dffffc0000000000 R15: ffff8880a18ff600 [ 331.299123][ C0] FS: 00000000026e0940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 331.308029][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.314589][ C0] CR2: 0000001b3332a000 CR3: 0000000057526000 CR4: 00000000001406f0 [ 331.322556][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.330517][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.338490][ C0] Call Trace: [ 331.341822][ C0] [ 331.344742][ C0] usb_hcd_unlink_urb_from_ep+0x2c/0x160 [ 331.350442][ C0] dummy_timer+0x11cb/0x2f9f [ 331.355081][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 331.361040][ C0] ? lock_acquire+0x1f1/0xad0 [ 331.365695][ C0] ? lock_downgrade+0x820/0x820 [ 331.370542][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 331.375387][ C0] ? lock_is_held_type+0xb0/0xe0 [ 331.380359][ C0] call_timer_fn+0x1ac/0x760 [ 331.384934][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 331.389674][ C0] ? add_timer_on+0x490/0x490 [ 331.394376][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 331.399571][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 331.405617][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 331.410619][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 331.415362][ C0] __run_timers.part.0+0x54c/0xa20 [ 331.420473][ C0] ? call_timer_fn+0x760/0x760 [ 331.425273][ C0] ? clockevents_program_event+0x12b/0x350 [ 331.431059][ C0] ? mark_held_locks+0x9f/0xe0 [ 331.435874][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 331.440732][ C0] run_timer_softirq+0xae/0x1a0 [ 331.445598][ C0] __do_softirq+0x34c/0xa60 [ 331.450085][ C0] asm_call_on_stack+0xf/0x20 [ 331.454755][ C0] [ 331.457756][ C0] do_softirq_own_stack+0x111/0x170 [ 331.462981][ C0] irq_exit_rcu+0x229/0x270 [ 331.467470][ C0] sysvec_apic_timer_interrupt+0x54/0x120 [ 331.473202][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 331.479231][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x60 [ 331.485282][ C0] Code: 5d be 03 00 00 00 e9 26 b3 23 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 48 8b 14 25 00 ff 01 00 <65> 8b 05 50 47 8e 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 [ 331.504874][ C0] RSP: 0018:ffffc90006f9fb10 EFLAGS: 00000246 [ 331.510919][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8145da20 [ 331.518897][ C0] RDX: ffff8880575644c0 RSI: ffff8880575644c0 RDI: 0000000000000005 [ 331.526856][ C0] RBP: ffffc90006f9fd1c R08: 0000000000000001 R09: ffffffff89a09083 [ 331.534806][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 331.542756][ C0] R13: 0000000000000000 R14: ffff88804b9ce0c0 R15: ffff88804b9ce534 [ 331.550720][ C0] ? wait_consider_task+0xdb0/0x3b20 [ 331.556076][ C0] wait_consider_task+0x1bb/0x3b20 [ 331.561265][ C0] ? lock_release+0x8d0/0x8d0 [ 331.565921][ C0] ? lock_downgrade+0x820/0x820 [ 331.570750][ C0] ? release_task+0x14c0/0x14c0 [ 331.575597][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 331.581399][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 331.587357][ C0] do_wait+0x36a/0x9e0 [ 331.591408][ C0] ? wait_consider_task+0x3b20/0x3b20 [ 331.596756][ C0] ? lock_acquire+0x1f1/0xad0 [ 331.601478][ C0] ? __might_fault+0xef/0x1d0 [ 331.606134][ C0] kernel_wait4+0x14c/0x260 [ 331.610614][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 331.615704][ C0] ? kill_orphaned_pgrp+0x320/0x320 [ 331.620885][ C0] __do_sys_wait4+0x13f/0x150 [ 331.625541][ C0] ? kernel_wait4+0x260/0x260 [ 331.630415][ C0] ? put_timespec64+0xcb/0x120 [ 331.635254][ C0] ? ns_to_timespec64+0xc0/0xc0 [ 331.640085][ C0] ? lock_is_held_type+0xb0/0xe0 [ 331.645001][ C0] ? __x64_sys_clock_gettime+0x165/0x240 [ 331.650614][ C0] ? lock_is_held_type+0xb0/0xe0 [ 331.655534][ C0] ? do_syscall_64+0x1c/0xe0 [ 331.660112][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 331.666072][ C0] do_syscall_64+0x60/0xe0 [ 331.670470][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.676338][ C0] RIP: 0033:0x4169ca [ 331.680209][ C0] Code: Bad RIP value. [ 331.684251][ C0] RSP: 002b:00007ffca7262ab8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 331.692755][ C0] RAX: ffffffffffffffda RBX: 0000000000050d6b RCX: 00000000004169ca [ 331.700705][ C0] RDX: 0000000040000001 RSI: 00007ffca7262af0 RDI: ffffffffffffffff [ 331.708669][ C0] RBP: 000000000000007b R08: 0000000000000001 R09: 00000000026e0940 [ 331.716632][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 331.724677][ C0] R13: 00007ffca7262af0 R14: 000000000005080b R15: 00007ffca7262b00 [ 331.732632][ C0] Modules linked in: [ 331.736515][ C0] ---[ end trace 9b6b1b67c9b6a6f7 ]--- [ 331.741958][ C0] RIP: 0010:__list_del_entry_valid.cold+0x48/0x55 [ 331.748368][ C0] Code: e8 e1 2a c2 fd 0f 0b 4c 89 e2 48 89 ee 48 c7 c7 60 93 93 88 e8 cd 2a c2 fd 0f 0b 48 89 ee 48 c7 c7 20 94 93 88 e8 bc 2a c2 fd <0f> 0b cc cc cc cc cc cc cc cc cc cc cc 41 57 41 56 41 55 41 54 55 [ 331.767952][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00010082 [ 331.773995][ C0] RAX: 0000000000000054 RBX: ffff8880a18ff600 RCX: 0000000000000000 [ 331.781943][ C0] RDX: ffff8880575644c0 RSI: ffffffff815d4f87 RDI: fffff52000000f4b [ 331.789920][ C0] RBP: ffff8880a18ff618 R08: 0000000000000054 R09: ffff8880ae6318e7 [ 331.798997][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809a5d6c68 [ 331.806962][ C0] R13: ffff88809fa5d618 R14: dffffc0000000000 R15: ffff8880a18ff600 [ 331.814915][ C0] FS: 00000000026e0940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 331.823819][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.830383][ C0] CR2: 0000001b3332a000 CR3: 0000000057526000 CR4: 00000000001406f0 [ 331.838333][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.846464][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.854412][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 332.941810][ C0] Shutting down cpus with NMI [ 332.947947][ C0] Kernel Offset: disabled [ 332.952267][ C0] Rebooting in 86400 seconds..