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", 0x250, 0x40010, 0x0, 0x0) 21:31:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:31:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @window, @mss, @timestamp, @mss, @window, @sack_perm], 0x8) open(0x0, 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000040)) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x5f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:31:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 476.921179][ T9902] usb 6-1: Using ep0 maxpacket: 32 [ 476.961217][ T9902] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 476.981874][T19955] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 476.992745][ T48] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 477.101212][ T9902] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 477.110565][ T9902] usb 6-1: can't read configurations, error -61 [ 477.117028][ T9902] usb usb6-port1: attempt power cycle [ 477.273780][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 477.279154][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 477.321540][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 477.329387][ T48] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 477.421565][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.431814][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.443051][T19955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.456672][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.551370][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.562443][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.572712][T19955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.586708][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.681117][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.692173][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.702374][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.713016][T19955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.821142][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.832231][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.842410][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.853247][T19955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.866886][ T9902] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 477.981841][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.993099][ T9902] usb 6-1: Using ep0 maxpacket: 32 [ 477.998305][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.009108][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.019582][T19955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.032911][ T9902] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 478.121119][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.132367][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.142722][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.153381][T19955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.181080][ T9902] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 478.189327][ T9902] usb 6-1: can't read configurations, error -61 [ 478.261039][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.271194][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.282728][T19955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.296965][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.351024][ T9902] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 478.391562][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.402662][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.412738][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.422712][T19955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.461416][ T9902] usb 6-1: Using ep0 maxpacket: 32 [ 478.521337][ T9902] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 478.631037][T19955] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 478.640400][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 478.649441][ T48] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 478.658623][ T9902] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 478.666203][T19955] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 478.674983][ T9902] usb 6-1: can't read configurations, error -61 [ 478.681520][ T48] usb 5-1: Product: syz [ 478.685660][ T48] usb 5-1: Manufacturer: syz [ 478.690221][ T48] usb 5-1: SerialNumber: syz [ 478.695924][T19955] usb 2-1: Product: syz [ 478.700106][T19955] usb 2-1: Manufacturer: syz [ 478.705344][ T9902] usb usb6-port1: unable to enumerate USB device [ 478.712262][T19955] usb 2-1: SerialNumber: syz [ 478.718086][T19955] usb 2-1: config 0 descriptor?? [ 478.728094][ T48] usb 5-1: config 0 descriptor?? 21:31:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b"], 0x0) 21:31:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @window, @mss, @timestamp, @mss, @window, @sack_perm], 0x8) open(0x0, 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000040)) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x5f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 478.771177][ T48] hub 5-1:0.0: USB hub found [ 478.776158][T19955] hub 2-1:0.0: bad descriptor, ignoring hub [ 478.791020][T19955] hub: probe of 2-1:0.0 failed with error -5 [ 478.818707][T19955] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 478.990935][ T48] hub 5-1:0.0: 2 ports detected [ 479.100985][ T12] usb 2-1: USB disconnect, device number 29 [ 479.300939][ T9902] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 479.451880][ T48] usb 5-1: USB disconnect, device number 25 [ 479.560826][ T9902] usb 6-1: Using ep0 maxpacket: 32 [ 479.611512][ T9902] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 479.751349][ T9902] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 479.758954][ T9902] usb 6-1: can't read configurations, error -61 21:31:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:31:49 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1, 0x0) 21:31:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @window, @mss, @timestamp, @mss, @window, @sack_perm], 0x8) open(0x0, 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000040)) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x5f, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x9}, 0xf) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:31:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009"], 0x0) [ 479.910813][ T9902] usb 6-1: new high-speed USB device number 78 using dummy_hcd 21:31:49 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:31:49 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1, 0x0) [ 480.004065][T20123] hfsplus: unable to parse mount options 21:31:49 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 480.110223][T20135] hfsplus: unable to parse mount options [ 480.151132][ T9902] usb 6-1: Using ep0 maxpacket: 32 [ 480.192244][ T9902] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 480.230731][ T8289] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 480.232658][ T12] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 480.321038][ T9902] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 480.329034][ T9902] usb 6-1: can't read configurations, error -61 [ 480.335528][ T9902] usb usb6-port1: attempt power cycle [ 480.470738][ T8289] usb 5-1: Using ep0 maxpacket: 32 [ 480.500738][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 480.511475][ T8289] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 480.551236][ T12] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 480.601094][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.613233][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.631406][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.641518][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.701048][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.713024][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.750710][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.760951][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.800906][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.812980][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.861066][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.871408][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.900957][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.913085][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.990658][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.000915][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.000946][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.024736][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.050945][ T9902] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 481.110652][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.111276][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.120885][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.134810][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.154480][ T9902] usb 6-1: Using ep0 maxpacket: 32 [ 481.190674][ T9902] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 481.231024][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.240953][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.242085][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.254037][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.320635][ T9902] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 481.328228][ T9902] usb 6-1: can't read configurations, error -61 [ 481.340650][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.351559][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.372071][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.382274][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.471966][ T12] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.480603][ T9902] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 481.482065][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.521017][ T8289] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 481.530103][ T8289] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 481.538510][ T8289] usb 5-1: Product: syz [ 481.542705][ T8289] usb 5-1: Manufacturer: syz [ 481.547363][ T8289] usb 5-1: SerialNumber: syz [ 481.554429][ T8289] usb 5-1: config 0 descriptor?? [ 481.571848][ T9902] usb 6-1: Using ep0 maxpacket: 32 [ 481.592466][ T8289] hub 5-1:0.0: USB hub found [ 481.610840][ T9902] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 481.680591][ T12] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 481.689914][ T12] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 481.698693][ T12] usb 2-1: Product: syz [ 481.703159][ T12] usb 2-1: Manufacturer: syz [ 481.707738][ T12] usb 2-1: SerialNumber: syz [ 481.714788][ T12] usb 2-1: config 0 descriptor?? [ 481.732627][ T9902] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 481.740347][ T9902] usb 6-1: can't read configurations, error -61 [ 481.747869][ T9902] usb usb6-port1: unable to enumerate USB device [ 481.762210][ T12] hub 2-1:0.0: bad descriptor, ignoring hub [ 481.768136][ T12] hub: probe of 2-1:0.0 failed with error -5 [ 481.776190][ T12] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 21:31:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b"], 0x0) 21:31:51 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1, 0x0) [ 481.810578][ T8289] hub 5-1:0.0: 2 ports detected [ 482.080705][ T9047] usb 2-1: USB disconnect, device number 30 [ 482.271981][ T8289] usb 5-1: USB disconnect, device number 26 [ 482.310485][ T9936] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 482.560451][ T9936] usb 6-1: Using ep0 maxpacket: 32 [ 482.600828][ T9936] usb 6-1: too many configurations: 27, using maximum allowed: 8 21:31:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:31:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:31:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:31:52 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1, 0x0) 21:31:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009"], 0x0) [ 482.752079][ T9936] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 482.759657][ T9936] usb 6-1: can't read configurations, error -61 21:31:52 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1, 0x0) 21:31:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 482.827526][T20184] hfsplus: unable to parse mount options 21:31:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:31:52 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1, 0x0) [ 482.920377][ T9936] usb 6-1: new high-speed USB device number 82 using dummy_hcd 21:31:52 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, 0x0, 0x0, 0x0) [ 483.002354][T20203] hfsplus: unable to parse mount options [ 483.097352][ T9937] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 483.190335][ T9936] usb 6-1: Using ep0 maxpacket: 32 [ 483.230725][ T9936] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 483.370366][ T9936] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 483.378201][ T9936] usb 6-1: can't read configurations, error -61 [ 483.385402][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 483.390625][ T9936] usb usb6-port1: attempt power cycle [ 483.440407][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 483.520759][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.531055][ T9937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.620558][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.631939][ T9937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.720661][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.731321][ T9937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.820632][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.831932][ T9937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.920296][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.930448][ T9937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.020363][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.030775][ T9937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.100260][ T9936] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 484.121667][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.132103][ T9937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.200248][ T9936] usb 6-1: Using ep0 maxpacket: 32 [ 484.220561][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.230724][ T9937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.243788][ T9936] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 484.370635][ T9936] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 484.378453][ T9936] usb 6-1: can't read configurations, error -61 [ 484.410603][ T9937] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 484.419654][ T9937] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 484.428381][ T9937] usb 2-1: Product: syz [ 484.432655][ T9937] usb 2-1: Manufacturer: syz [ 484.437231][ T9937] usb 2-1: SerialNumber: syz [ 484.444417][ T9937] usb 2-1: config 0 descriptor?? [ 484.480506][ T9937] hub 2-1:0.0: bad descriptor, ignoring hub [ 484.486435][ T9937] hub: probe of 2-1:0.0 failed with error -5 [ 484.495064][ T9937] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 484.530729][ T9936] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 484.620847][ T9936] usb 6-1: Using ep0 maxpacket: 32 [ 484.660495][ T9936] usb 6-1: too many configurations: 27, using maximum allowed: 8 21:31:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:31:54 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, 0x0, 0x0, 0x0) 21:31:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:31:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:31:54 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, 0x0, 0x0, 0x0) [ 484.780559][ T9936] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 484.788212][ T9936] usb 6-1: can't read configurations, error -61 [ 484.795085][ T9936] usb usb6-port1: unable to enumerate USB device [ 484.810331][ T8289] usb 2-1: USB disconnect, device number 31 [ 484.913013][T20239] hfsplus: unable to parse mount options 21:31:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 21:31:54 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 21:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:31:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:31:54 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 21:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 485.232160][T20260] hfsplus: unable to parse mount options [ 485.330135][ T8289] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 485.590071][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 485.650103][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 485.780331][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 485.787931][ T8289] usb 6-1: can't read configurations, error -61 [ 485.950033][ T8289] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 486.230001][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 486.270272][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 486.420344][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 486.427945][ T8289] usb 6-1: can't read configurations, error -61 [ 486.434829][ T8289] usb usb6-port1: attempt power cycle [ 487.159876][ T8289] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 487.259872][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 487.310162][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 487.450129][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 487.457893][ T8289] usb 6-1: can't read configurations, error -61 [ 487.609791][ T8289] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 487.700157][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 487.740157][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 21:31:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:31:57 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:31:57 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 21:31:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:31:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:31:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 487.860069][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 487.867653][ T8289] usb 6-1: can't read configurations, error -61 [ 487.875606][ T8289] usb usb6-port1: unable to enumerate USB device 21:31:57 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 21:31:57 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 21:31:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:31:57 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 21:31:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 487.957091][T20289] hfsplus: unable to parse mount options 21:31:57 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) [ 488.092522][T20314] hfsplus: unable to parse mount options [ 488.349715][ T8289] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 488.589694][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 488.639992][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 488.780035][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 488.787602][ T8289] usb 6-1: can't read configurations, error -61 [ 488.949618][ T8289] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 489.189629][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 489.239952][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 489.389557][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 489.397259][ T8289] usb 6-1: can't read configurations, error -61 [ 489.403552][ T8289] usb usb6-port1: attempt power cycle [ 490.109517][ T8289] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 490.230195][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 490.289823][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 490.419425][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 490.427060][ T8289] usb 6-1: can't read configurations, error -61 [ 490.599393][ T8289] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 490.699455][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 490.749868][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 21:32:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:32:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:00 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 490.889381][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 490.897050][ T8289] usb 6-1: can't read configurations, error -61 [ 490.904038][ T8289] usb usb6-port1: unable to enumerate USB device 21:32:00 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:00 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 490.973306][T20335] hfsplus: unable to parse mount options 21:32:00 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:00 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 491.095397][T20350] hfsplus: unable to parse mount options [ 491.229369][ T9937] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 491.399332][ T8289] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 491.479261][ T9936] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 491.499733][ T9937] usb 5-1: device descriptor read/64, error 18 [ 491.659305][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 491.719648][ T9936] usb 3-1: Using ep0 maxpacket: 32 [ 491.719913][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 491.759325][ T9936] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 491.839285][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.839301][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.879588][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 491.887346][ T8289] usb 6-1: can't read configurations, error -61 [ 491.889254][ T9937] usb 5-1: device descriptor read/64, error 18 [ 491.919695][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.930850][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.019687][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.031864][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.049335][ T8289] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 492.119609][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.130602][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.169202][ T9937] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 492.219225][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.230171][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.309341][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 492.319730][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.330707][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.349582][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 492.439539][ T9937] usb 5-1: device descriptor read/64, error 18 [ 492.445802][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.459487][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.469696][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 492.477638][ T8289] usb 6-1: can't read configurations, error -61 [ 492.484953][ T8289] usb usb6-port1: attempt power cycle [ 492.569511][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.580717][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.769534][ T9936] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 492.778677][ T9936] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 492.787585][ T9936] usb 3-1: Product: syz [ 492.792023][ T9936] usb 3-1: Manufacturer: syz [ 492.796591][ T9936] usb 3-1: SerialNumber: syz [ 492.802274][ T9936] usb 3-1: config 0 descriptor?? [ 492.849139][ T9937] usb 5-1: device descriptor read/64, error 18 [ 492.856682][ T9936] hub 3-1:0.0: USB hub found [ 492.979129][ T9937] usb usb5-port1: attempt power cycle [ 493.059122][ T9936] hub 3-1:0.0: 2 ports detected [ 493.199069][ T8289] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 493.289434][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 493.329447][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 493.449102][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 493.456723][ T8289] usb 6-1: can't read configurations, error -61 [ 493.520082][ T9936] usb 3-1: USB disconnect, device number 96 [ 493.609264][ T8289] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 493.699007][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 493.709021][ T9937] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 493.739078][ T8289] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 493.859311][ T8289] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 493.867015][ T8289] usb 6-1: can't read configurations, error -61 [ 493.874079][ T8289] usb usb6-port1: unable to enumerate USB device 21:32:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:03 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) [ 493.908993][ T9937] usb 5-1: device descriptor read/8, error -61 21:32:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 494.000614][T20385] hfsplus: unable to parse mount options 21:32:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0xfffffffd}, 0x18) 21:32:03 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 494.110135][T20402] input: syz1 as /devices/virtual/input/input130 [ 494.119879][T20408] hfsplus: unable to parse mount options [ 494.128709][ T9937] usb 5-1: device descriptor read/8, error -71 21:32:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 494.191397][T20418] hfsplus: unable to parse mount options [ 494.278917][ T8289] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 494.388913][ T9936] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 494.548894][ T8289] usb 2-1: device descriptor read/64, error 18 [ 494.628928][ T9937] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 494.658910][ T9936] usb 3-1: Using ep0 maxpacket: 32 [ 494.700786][ T9936] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 494.810695][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.821571][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.832047][ T9937] usb 5-1: device descriptor read/8, error -61 [ 494.920065][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.930941][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.938859][ T8289] usb 2-1: device descriptor read/64, error 18 [ 495.019260][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.030165][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.099247][ T9937] usb 5-1: device descriptor read/8, error -61 [ 495.119259][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.130166][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.218863][ T8289] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 495.219329][ T9937] usb usb5-port1: unable to enumerate USB device [ 495.232867][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.244006][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.349002][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.360097][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.469081][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.480292][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.488767][ T8289] usb 2-1: device descriptor read/64, error 18 [ 495.569181][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.583816][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.758790][ T9936] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 495.767881][ T9936] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 495.776399][ T9936] usb 3-1: Product: syz [ 495.780659][ T9936] usb 3-1: Manufacturer: syz [ 495.785229][ T9936] usb 3-1: SerialNumber: syz [ 495.791873][ T9936] usb 3-1: config 0 descriptor?? [ 495.842138][ T9936] hub 3-1:0.0: USB hub found [ 495.878751][ T8289] usb 2-1: device descriptor read/64, error 18 [ 495.998746][ T8289] usb usb2-port1: attempt power cycle [ 496.060227][ T9936] hub 3-1:0.0: 2 ports detected [ 496.509675][ T9936] usb 3-1: USB disconnect, device number 97 [ 496.728623][ T8289] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 496.918650][ T8289] usb 2-1: device descriptor read/8, error -61 21:32:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x0, 0x0, 0xfffffffd}, 0x18) 21:32:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) 21:32:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 497.054940][T20458] input: syz1 as /devices/virtual/input/input131 [ 497.061078][T20456] hfsplus: unable to parse mount options 21:32:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:06 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="63726561746f723d01"]) 21:32:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 497.128667][ T8289] usb 2-1: device descriptor read/8, error -71 [ 497.192702][T20477] hfsplus: unable to parse mount options [ 497.238942][T20480] hfsplus: creator requires a 4 character value [ 497.246971][T20480] hfsplus: unable to parse mount options [ 497.328720][ T48] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 497.488548][T19955] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 497.578667][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 497.629116][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 497.637016][ T8289] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 497.718931][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.730022][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.798485][T19955] usb 5-1: device descriptor read/64, error 18 [ 497.838580][ T8289] usb 2-1: device descriptor read/8, error -61 [ 497.844919][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.856427][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.948838][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.959791][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.048851][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.060901][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.128947][ T8289] usb 2-1: device descriptor read/8, error -61 [ 498.168710][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.179647][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.198537][T19955] usb 5-1: device descriptor read/64, error 18 [ 498.248536][ T8289] usb usb2-port1: unable to enumerate USB device [ 498.278457][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.289444][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.398699][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.409745][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.478443][T19955] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 498.508530][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.519453][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.708941][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 498.717980][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 498.727882][ T48] usb 3-1: Product: syz [ 498.732119][ T48] usb 3-1: Manufacturer: syz [ 498.736696][ T48] usb 3-1: SerialNumber: syz [ 498.744595][ T48] usb 3-1: config 0 descriptor?? [ 498.778438][T19955] usb 5-1: device descriptor read/64, error 18 [ 498.788732][ T48] hub 3-1:0.0: USB hub found [ 499.008774][ T48] hub 3-1:0.0: 2 ports detected [ 499.188345][T19955] usb 5-1: device descriptor read/64, error 18 [ 499.318319][T19955] usb usb5-port1: attempt power cycle [ 499.459352][ T48] usb 3-1: USB disconnect, device number 98 21:32:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000002e04000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) 21:32:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) 21:32:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) [ 500.038345][T19955] usb 5-1: new high-speed USB device number 33 using dummy_hcd 21:32:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 500.085650][T20522] EXT4-fs (loop5): unsupported inode size: 12336 [ 500.094319][T20522] EXT4-fs (loop5): blocksize: 4096 [ 500.104751][T20525] hfsplus: unable to parse mount options 21:32:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0xfffffffd}, 0x18) 21:32:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:32:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 500.229356][T20544] input: syz1 as /devices/virtual/input/input132 [ 500.252325][T20550] hfsplus: unable to parse mount options [ 500.368261][ T9936] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 500.548358][T19955] usb 5-1: device not accepting address 33, error -71 [ 500.555341][ T9918] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 500.608170][ T9936] usb 3-1: Using ep0 maxpacket: 32 [ 500.648563][ T9936] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 500.728689][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.739682][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.828459][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.839350][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.868163][ T9918] usb 2-1: device descriptor read/64, error 18 [ 500.929524][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.940480][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.948101][T19955] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 501.028591][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.039590][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.128128][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.139810][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.149118][T19955] usb 5-1: device descriptor read/8, error -61 [ 501.228116][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.239408][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.288062][ T9918] usb 2-1: device descriptor read/64, error 18 [ 501.328564][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.340231][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.428083][T19955] usb 5-1: device descriptor read/8, error -61 [ 501.428391][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.446815][ T9936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.558053][T19955] usb usb5-port1: unable to enumerate USB device [ 501.568087][ T9918] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 501.608729][ T9936] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 501.617960][ T9936] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 501.628267][ T9936] usb 3-1: Product: syz [ 501.632413][ T9936] usb 3-1: Manufacturer: syz [ 501.637092][ T9936] usb 3-1: SerialNumber: syz [ 501.644204][ T9936] usb 3-1: config 0 descriptor?? [ 501.689718][ T9936] hub 3-1:0.0: USB hub found [ 501.867990][ T9918] usb 2-1: device descriptor read/64, error 18 [ 501.908059][ T9936] hub 3-1:0.0: 2 ports detected [ 502.127988][ T9936] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 502.134829][ T9936] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 502.210003][ T9936] usb 3-1: USB disconnect, device number 99 [ 502.287960][ T9918] usb 2-1: device descriptor read/64, error 18 [ 502.408265][ T9918] usb usb2-port1: attempt power cycle 21:32:12 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:12 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:12 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="63726561746f723d01"]) 21:32:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) 21:32:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) 21:32:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 503.099732][T20583] hfsplus: unable to parse mount options [ 503.126551][T20585] hfsplus: creator requires a 4 character value [ 503.135228][T20585] hfsplus: unable to parse mount options [ 503.137919][ T9918] usb 2-1: new high-speed USB device number 38 using dummy_hcd 21:32:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:12 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:32:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 503.276157][T20612] hfsplus: unable to parse mount options [ 503.437907][ T9937] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 503.567826][ T9936] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 503.637844][ T9918] usb 2-1: device not accepting address 38, error -71 [ 503.707827][ T9937] usb 3-1: Using ep0 maxpacket: 32 [ 503.748077][ T9937] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 503.857774][ T9936] usb 5-1: device descriptor read/64, error 18 [ 503.864214][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.875083][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.969024][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.980071][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.007751][ T9918] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 504.088186][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.099094][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.177726][ T9918] usb 2-1: device descriptor read/8, error -61 [ 504.208047][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.219157][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.287990][ T9936] usb 5-1: device descriptor read/64, error 18 [ 504.309114][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.320631][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.417859][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.429230][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.447704][ T9918] usb 2-1: device descriptor read/8, error -61 [ 504.519288][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.530261][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.567693][ T9936] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 504.567763][ T9918] usb usb2-port1: unable to enumerate USB device [ 504.618160][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.629935][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.797670][ T9937] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 504.806920][ T9937] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 504.815420][ T9937] usb 3-1: Product: syz [ 504.819686][ T9937] usb 3-1: Manufacturer: syz [ 504.824408][ T9937] usb 3-1: SerialNumber: syz [ 504.830022][ T9937] usb 3-1: config 0 descriptor?? [ 504.837696][ T9936] usb 5-1: device descriptor read/64, error 18 [ 504.869342][ T9937] hub 3-1:0.0: USB hub found [ 505.087634][ T9937] hub 3-1:0.0: 2 ports detected [ 505.227632][ T9936] usb 5-1: device descriptor read/64, error 18 [ 505.307607][ T9937] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 505.314062][ T9937] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 505.347614][ T9936] usb usb5-port1: attempt power cycle [ 505.399264][ T9937] usb 3-1: USB disconnect, device number 100 21:32:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) [ 506.057573][ T9936] usb 5-1: new high-speed USB device number 37 using dummy_hcd 21:32:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) 21:32:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) 21:32:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 506.129947][T20646] hfsplus: unable to parse mount options [ 506.167488][ T9936] usb 5-1: device descriptor read/8, error -71 21:32:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 506.303109][T20668] hfsplus: unable to parse mount options [ 506.377841][ T9936] usb 5-1: device descriptor read/8, error -71 [ 506.477439][ T9918] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 506.627460][ T9937] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 506.757405][ T9918] usb 3-1: Using ep0 maxpacket: 32 [ 506.797844][ T9918] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 506.867419][ T9936] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 506.878253][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.889209][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.897391][ T9937] usb 2-1: device descriptor read/64, error 18 [ 506.987981][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.998940][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.037399][ T9936] usb 5-1: device descriptor read/8, error -61 [ 507.107870][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.119287][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.207998][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.219253][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.287358][ T9937] usb 2-1: device descriptor read/64, error 18 [ 507.307378][ T9936] usb 5-1: device descriptor read/8, error -61 [ 507.307756][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.325571][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.419766][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.427357][ T9936] usb usb5-port1: unable to enumerate USB device [ 507.430724][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.527927][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.540514][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.557314][ T9937] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 507.647755][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.658885][ T9918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.827293][ T9937] usb 2-1: device descriptor read/64, error 18 [ 507.857737][ T9918] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 507.866815][ T9918] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 507.875164][ T9918] usb 3-1: Product: syz [ 507.879394][ T9918] usb 3-1: Manufacturer: syz [ 507.884115][ T9918] usb 3-1: SerialNumber: syz [ 507.891015][ T9918] usb 3-1: config 0 descriptor?? [ 507.949331][ T9918] hub 3-1:0.0: USB hub found [ 508.167433][ T9918] hub 3-1:0.0: 2 ports detected [ 508.217275][ T9937] usb 2-1: device descriptor read/64, error 18 [ 508.337263][ T9937] usb usb2-port1: attempt power cycle [ 508.387304][ T9918] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 508.393829][ T9918] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 508.479121][ T9918] usb 3-1: USB disconnect, device number 101 [ 509.047306][ T9937] usb 2-1: new high-speed USB device number 42 using dummy_hcd 21:32:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:32:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:18 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) [ 509.154069][T20702] hfsplus: unable to parse mount options 21:32:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) 21:32:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:18 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 509.226206][ T9937] usb 2-1: device descriptor read/8, error -71 21:32:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 509.314189][T20723] hfsplus: unable to parse mount options [ 509.437135][ T9937] usb 2-1: device descriptor read/8, error -71 [ 509.538795][T19955] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 509.627094][ T9902] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 509.797040][T19955] usb 3-1: Using ep0 maxpacket: 32 [ 509.847680][T19955] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 509.897261][ T9902] usb 5-1: Using ep0 maxpacket: 32 [ 509.927077][ T9937] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 509.947753][ T9902] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 509.955770][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.966720][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.047079][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.057648][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.068665][ T9902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.078012][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.097494][ T9937] usb 2-1: device descriptor read/8, error -61 [ 510.177427][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.187691][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.198640][ T9902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.207645][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.297382][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.307622][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.319380][ T9902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.329583][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.367458][ T9937] usb 2-1: device descriptor read/8, error -61 [ 510.437023][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.449238][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.459818][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.470565][ T9902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.487029][ T9937] usb usb2-port1: unable to enumerate USB device [ 510.557401][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.568380][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.578775][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.589267][ T9902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.707449][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.718887][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.729118][ T9902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.739043][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.827662][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.837821][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.849040][ T9902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.859013][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.956988][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.967304][ T9902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 511.046993][T19955] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 511.056164][T19955] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 511.064705][T19955] usb 3-1: Product: syz [ 511.069068][T19955] usb 3-1: Manufacturer: syz [ 511.073665][T19955] usb 3-1: SerialNumber: syz [ 511.080910][T19955] usb 3-1: config 0 descriptor?? [ 511.118691][T19955] hub 3-1:0.0: USB hub found [ 511.127291][ T9902] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 511.136387][ T9902] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 511.144896][ T9902] usb 5-1: Product: syz [ 511.149207][ T9902] usb 5-1: Manufacturer: syz [ 511.153871][ T9902] usb 5-1: SerialNumber: syz [ 511.159457][ T9902] usb 5-1: config 0 descriptor?? [ 511.376901][T19955] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 511.457495][T19955] usb 3-1: USB disconnect, device number 102 21:32:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:32:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 512.410757][T19955] usb 5-1: USB disconnect, device number 39 21:32:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 512.467804][T20777] hfsplus: unable to parse mount options 21:32:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 512.609759][T20795] hfsplus: unable to parse mount options [ 512.728180][ T12] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 512.756702][ T9937] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 512.846709][T19955] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 512.966717][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 512.996695][ T9937] usb 3-1: Using ep0 maxpacket: 32 [ 513.007839][ T12] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 513.036714][ T9937] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 513.117640][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.133895][ T12] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 513.136643][T19955] usb 5-1: Using ep0 maxpacket: 32 [ 513.141591][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.156498][ T12] usb 2-1: can't read configurations, error -61 [ 513.187369][T19955] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 513.237081][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.249956][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.287218][T19955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.297390][T19955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.306663][ T12] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 513.337602][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.349066][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.407021][T19955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.419373][T19955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.436992][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.449611][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.528038][T19955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.536911][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.538942][T19955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.550024][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 513.564421][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.596665][ T12] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 513.647126][T19955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.648106][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.657728][T19955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.671006][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.726662][ T12] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 513.734368][ T12] usb 2-1: can't read configurations, error -61 [ 513.741468][ T12] usb usb2-port1: attempt power cycle [ 513.757003][T19955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.766627][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.767184][T19955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.780463][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.876908][T19955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.876936][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.887239][T19955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.898979][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.997917][T19955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.008036][T19955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.077805][ T9937] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 514.087181][ T9937] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 514.095421][ T9937] usb 3-1: Product: syz [ 514.100049][ T9937] usb 3-1: Manufacturer: syz [ 514.104753][ T9937] usb 3-1: SerialNumber: syz [ 514.108000][T19955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.114969][ T9937] usb 3-1: config 0 descriptor?? [ 514.132989][T19955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.169510][ T9937] hub 3-1:0.0: USB hub found [ 514.306598][T19955] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 514.316096][T19955] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 514.324838][T19955] usb 5-1: Product: syz [ 514.329683][T19955] usb 5-1: Manufacturer: syz [ 514.334365][T19955] usb 5-1: SerialNumber: syz [ 514.341264][T19955] usb 5-1: config 0 descriptor?? [ 514.426540][ T9937] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 514.456561][ T12] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 514.507243][ T9937] usb 3-1: USB disconnect, device number 103 [ 514.546558][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 514.586606][ T12] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 514.706516][ T12] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 514.714250][ T12] usb 2-1: can't read configurations, error -61 [ 514.866473][ T12] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 514.956497][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 514.997058][ T12] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 515.116760][ T12] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 515.124603][ T12] usb 2-1: can't read configurations, error -61 [ 515.130921][ T12] usb usb2-port1: unable to enumerate USB device 21:32:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:25 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) [ 515.589381][ T12] usb 5-1: USB disconnect, device number 40 21:32:25 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 515.650884][T20840] hfsplus: unable to parse mount options 21:32:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:25 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 515.779638][T20855] hfsplus: unable to parse mount options [ 515.886348][ T9937] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 515.907009][T19955] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 516.046347][ T12] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 516.126335][ T9937] usb 3-1: Using ep0 maxpacket: 32 [ 516.167412][ T9937] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 516.196321][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 516.236810][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 516.246692][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.257937][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.286344][ T12] usb 5-1: Using ep0 maxpacket: 32 [ 516.326745][ T12] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 516.346787][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.357701][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.376939][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 516.384562][T19955] usb 2-1: can't read configurations, error -61 [ 516.406752][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.417064][ T12] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.456742][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.468152][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.506325][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.516674][ T12] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.536358][T19955] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 516.556696][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.567647][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.606607][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.617404][ T12] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.656287][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.668572][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.706293][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.716541][ T12] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.756303][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.767317][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.786346][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 516.806629][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.817131][ T12] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.836670][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 516.856603][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.867684][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.906279][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.916916][ T12] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.956319][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.967802][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.976631][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 516.985200][T19955] usb 2-1: can't read configurations, error -61 [ 516.991635][T19955] usb usb2-port1: attempt power cycle [ 517.006250][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.016646][ T12] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.096958][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.107202][ T12] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.136494][ T9937] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 517.145583][ T9937] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 517.154211][ T9937] usb 3-1: Product: syz [ 517.158472][ T9937] usb 3-1: Manufacturer: syz [ 517.163095][ T9937] usb 3-1: SerialNumber: syz [ 517.170086][ T9937] usb 3-1: config 0 descriptor?? [ 517.206494][ T9937] hub 3-1:0.0: USB hub found [ 517.276252][ T12] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 517.285409][ T12] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 517.293816][ T12] usb 5-1: Product: syz [ 517.298201][ T12] usb 5-1: Manufacturer: syz [ 517.302897][ T12] usb 5-1: SerialNumber: syz [ 517.308473][ T12] usb 5-1: config 0 descriptor?? [ 517.466248][ T9937] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 517.546696][ T9937] usb 3-1: USB disconnect, device number 104 [ 517.716158][T19955] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 517.818553][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 517.866693][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 518.016154][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 518.023794][T19955] usb 2-1: can't read configurations, error -61 [ 518.186108][T19955] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 518.276416][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 518.316182][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 518.466369][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 518.474083][T19955] usb 2-1: can't read configurations, error -61 [ 518.480389][T19955] usb usb2-port1: unable to enumerate USB device 21:32:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:28 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:32:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 518.640912][ T48] usb 5-1: USB disconnect, device number 41 21:32:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 519.115999][ T48] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 519.135983][T19955] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 519.375962][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 519.415948][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 519.427394][ T48] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 519.466007][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 519.516332][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.526679][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.616007][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 519.623695][T19955] usb 2-1: can't read configurations, error -61 [ 519.645957][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.656701][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.746044][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.757165][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.785930][T19955] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 519.856122][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.866474][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.965986][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.976196][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.035890][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 520.066715][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.076935][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.090521][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 520.186317][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.196661][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.235927][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 520.243675][T19955] usb 2-1: can't read configurations, error -61 [ 520.250694][T19955] usb usb2-port1: attempt power cycle [ 520.286092][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.296485][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.486293][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 520.497100][ T48] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 520.506368][ T48] usb 5-1: Product: syz [ 520.510635][ T48] usb 5-1: Manufacturer: syz [ 520.515251][ T48] usb 5-1: SerialNumber: syz [ 520.522834][ T48] usb 5-1: config 0 descriptor?? [ 520.568093][ T48] hub 5-1:0.0: bad descriptor, ignoring hub [ 520.574154][ T48] hub: probe of 5-1:0.0 failed with error -5 [ 520.582404][ T48] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 520.995766][T19955] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 521.085831][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 521.135950][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 521.265807][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 521.273528][T19955] usb 2-1: can't read configurations, error -61 [ 521.435758][T19955] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 521.525736][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 521.566068][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 521.685704][T19955] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 521.693554][T19955] usb 2-1: can't read configurations, error -71 [ 521.700560][T19955] usb usb2-port1: unable to enumerate USB device 21:32:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:31 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009"], 0x0) 21:32:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40010, 0x0, 0x0) 21:32:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 522.045669][ T9937] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 522.205640][T19955] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 522.305651][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 522.356029][ T9937] usb 5-1: device firmware changed [ 522.363076][ T9937] usb 5-1: USB disconnect, device number 42 [ 522.455685][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 522.495660][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 522.575991][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.587496][T19955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 522.675882][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.686181][T19955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 522.725601][ T9937] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 522.776264][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.787925][T19955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 522.875607][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.885735][T19955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 522.965619][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.977765][T19955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 522.985542][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 523.036110][ T9937] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 523.066014][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.077515][T19955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.126009][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.137535][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.166013][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.176365][T19955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.235894][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.248222][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.255891][T19955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.272615][T19955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.365940][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.376189][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.436391][T19955] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 523.445501][T19955] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 523.453843][T19955] usb 2-1: Product: syz [ 523.458504][T19955] usb 2-1: Manufacturer: syz [ 523.463778][T19955] usb 2-1: SerialNumber: syz [ 523.470931][T19955] usb 2-1: config 0 descriptor?? [ 523.485863][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.497401][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.585525][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.595780][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.685596][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.695856][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.717930][ T48] usb 2-1: USB disconnect, device number 56 [ 523.805496][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.815772][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.915532][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.926478][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.145504][ T9937] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 524.155184][ T9937] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 524.163745][ T9937] usb 5-1: Product: syz [ 524.168002][ T9937] usb 5-1: Manufacturer: syz [ 524.172615][ T9937] usb 5-1: SerialNumber: syz [ 524.178198][ T9937] usb 5-1: config 0 descriptor?? [ 524.215732][ T9937] hub 5-1:0.0: bad descriptor, ignoring hub [ 524.221696][ T9937] hub: probe of 5-1:0.0 failed with error -5 [ 524.240813][ T9937] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 21:32:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40010, 0x0, 0x0) 21:32:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='creat']) 21:32:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:32:34 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40010, 0x0, 0x0) 21:32:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:32:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40010, 0x0, 0x0) [ 525.622716][T21038] hfsplus: unable to find HFS+ superblock [ 525.695268][ T9937] usb 5-1: reset high-speed USB device number 43 using dummy_hcd [ 525.745277][T19955] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 525.935263][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 525.982577][ T9937] usb 5-1: device firmware changed [ 525.987785][ T9937] usb 5-1: USB disconnect, device number 43 [ 526.005221][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 526.045301][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 526.165609][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 526.173544][T19955] usb 2-1: can't read configurations, error -61 [ 526.325202][T19955] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 526.345221][ T9937] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 526.565584][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 526.595246][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 526.605796][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 526.645525][ T9937] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 526.725509][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 526.733742][T19955] usb 2-1: can't read configurations, error -61 [ 526.741685][T19955] usb usb2-port1: attempt power cycle [ 526.745516][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.757478][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.845677][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.855888][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.965614][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.976187][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.085159][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.095310][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.185489][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.195863][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.285113][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.295335][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.395112][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.406757][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.455096][T19955] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 527.496913][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.507149][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.545373][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 527.585447][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 527.705077][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 527.705687][ T9937] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 527.712860][T19955] usb 2-1: can't read configurations, error -61 [ 527.722651][ T9937] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 527.736303][ T9937] usb 5-1: Product: syz [ 527.740560][ T9937] usb 5-1: Manufacturer: syz [ 527.745355][ T9937] usb 5-1: SerialNumber: syz [ 527.751496][ T9937] usb 5-1: config 0 descriptor?? [ 527.805397][ T9937] hub 5-1:0.0: bad descriptor, ignoring hub [ 527.811665][ T9937] hub: probe of 5-1:0.0 failed with error -5 [ 527.822866][ T9937] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 527.875044][T19955] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 527.965064][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 528.005136][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 528.125074][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 528.132657][T19955] usb 2-1: can't read configurations, error -61 [ 528.139563][T19955] usb usb2-port1: unable to enumerate USB device 21:32:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40010, 0x0, 0x0) 21:32:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:32:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:32:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40010, 0x0, 0x0) 21:32:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 529.051408][T21074] hfsplus: unable to find HFS+ superblock 21:32:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:32:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x128, 0x40010, 0x0, 0x0) 21:32:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175a", 0x128, 0x40010, 0x0, 0x0) 21:32:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x128, 0x40010, 0x0, 0x0) 21:32:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 529.219898][T21096] hfsplus: unable to find HFS+ superblock [ 529.314882][ T9902] usb 5-1: reset high-speed USB device number 44 using dummy_hcd [ 529.344946][T19955] usb 2-1: new high-speed USB device number 61 using dummy_hcd 21:32:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 529.574864][ T9902] usb 5-1: Using ep0 maxpacket: 32 [ 529.614910][ T9902] usb 5-1: device firmware changed [ 529.620160][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 529.628272][ T9902] usb 5-1: USB disconnect, device number 44 [ 529.674905][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 529.795136][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 529.802807][T19955] usb 2-1: can't read configurations, error -61 [ 529.964786][T19955] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 530.005228][ T9902] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 530.204911][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 530.255181][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 530.265290][ T9902] usb 5-1: Using ep0 maxpacket: 32 [ 530.305166][ T9902] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 530.384811][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 530.392780][T19955] usb 2-1: can't read configurations, error -61 [ 530.399816][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.410072][T19955] usb usb2-port1: attempt power cycle [ 530.416264][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.515216][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.525563][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.634896][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.646151][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.754804][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.766498][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.884721][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.894940][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.994946][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.005166][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.114933][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.126641][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.155070][T19955] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 531.214911][ T9902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.229573][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.246119][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 531.286239][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 531.414973][ T9902] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 531.424241][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 531.432157][ T9902] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 531.441897][T19955] usb 2-1: can't read configurations, error -61 [ 531.448663][ T9902] usb 5-1: Product: syz [ 531.452855][ T9902] usb 5-1: Manufacturer: syz [ 531.458087][ T9902] usb 5-1: SerialNumber: syz [ 531.463583][ T9902] usb 5-1: config 0 descriptor?? [ 531.516295][ T9902] hub 5-1:0.0: bad descriptor, ignoring hub [ 531.522446][ T9902] hub: probe of 5-1:0.0 failed with error -5 [ 531.533947][ T9902] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 531.614653][T19955] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 531.714659][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 531.754662][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 531.894884][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 531.902702][T19955] usb 2-1: can't read configurations, error -61 [ 531.909706][T19955] usb usb2-port1: unable to enumerate USB device 21:32:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[]) 21:32:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x1bc, 0x40010, 0x0, 0x0) 21:32:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:32:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x1bc, 0x40010, 0x0, 0x0) [ 532.759353][T21140] hfsplus: unable to find HFS+ superblock 21:32:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[]) 21:32:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8", 0x1bc, 0x40010, 0x0, 0x0) 21:32:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x206, 0x40010, 0x0, 0x0) 21:32:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[]) [ 532.887189][T21161] hfsplus: unable to find HFS+ superblock [ 532.965068][T21171] hfsplus: unable to find HFS+ superblock [ 533.004515][ T48] usb 5-1: reset high-speed USB device number 45 using dummy_hcd [ 533.037914][T19955] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 533.274469][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 533.314453][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 533.319829][ T48] usb 5-1: device firmware changed [ 533.328981][ T48] usb 5-1: USB disconnect, device number 45 [ 533.354909][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 533.484826][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 533.492556][T19955] usb 2-1: can't read configurations, error -61 [ 533.654422][T19955] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 533.704440][ T48] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 533.934398][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 533.944911][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 533.985466][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 534.003683][ T48] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 534.084455][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.095323][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.144808][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 534.153630][T19955] usb 2-1: can't read configurations, error -61 [ 534.161001][T19955] usb usb2-port1: attempt power cycle [ 534.184411][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.195264][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.294867][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.321562][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.434604][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.445131][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.564730][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.575791][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.664393][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.674713][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.784330][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.795194][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.884521][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.894760][T19955] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 534.902316][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.984393][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 535.024795][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 535.094331][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 535.104681][ T48] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 535.113647][ T48] usb 5-1: Product: syz [ 535.118357][ T48] usb 5-1: Manufacturer: syz [ 535.123275][ T48] usb 5-1: SerialNumber: syz [ 535.128920][ T48] usb 5-1: config 0 descriptor?? [ 535.154281][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 535.162264][T19955] usb 2-1: can't read configurations, error -61 [ 535.184543][ T48] hub 5-1:0.0: bad descriptor, ignoring hub [ 535.190536][ T48] hub: probe of 5-1:0.0 failed with error -5 [ 535.201922][ T48] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 535.334334][T19955] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 535.444588][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 535.485007][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 535.624696][T19955] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 535.632323][T19955] usb 2-1: can't read configurations, error -61 [ 535.638747][T19955] usb usb2-port1: unable to enumerate USB device 21:32:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x206, 0x40010, 0x0, 0x0) 21:32:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) 21:32:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b090224000100"], 0x0) 21:32:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x206, 0x40010, 0x0, 0x0) [ 536.424838][T21199] hfsplus: unable to find HFS+ superblock 21:32:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) 21:32:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x22b, 0x40010, 0x0, 0x0) 21:32:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 536.531809][T21219] hfsplus: unable to find HFS+ superblock 21:32:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) [ 536.661606][T21230] hfsplus: unable to find HFS+ superblock [ 536.667469][ T9937] usb 5-1: reset high-speed USB device number 46 using dummy_hcd [ 536.694708][ T48] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 536.704104][ T5] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 536.914068][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 536.954157][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 536.959479][ T9937] usb 5-1: device firmware changed [ 536.964910][ T9937] usb 5-1: USB disconnect, device number 46 [ 536.994123][ T48] usb 3-1: device descriptor read/64, error 18 [ 536.994253][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 537.084078][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.095430][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.184069][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.194246][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.284143][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.295249][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.315301][ T9937] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 537.384050][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.394390][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.414038][ T48] usb 3-1: device descriptor read/64, error 18 [ 537.474375][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.484733][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.554013][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 537.564421][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.574580][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.594075][ T9937] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 537.665753][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.676005][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.686452][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.694020][ T48] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 537.697196][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.794017][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.804155][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.814225][ T5] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.823431][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.914438][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.928839][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.974490][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 537.983984][ T5] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 537.992544][ T5] usb 2-1: Product: syz [ 537.997075][ T5] usb 2-1: Manufacturer: syz [ 538.002301][ T5] usb 2-1: SerialNumber: syz [ 538.003946][ T48] usb 3-1: device descriptor read/64, error 18 [ 538.012866][ T5] usb 2-1: config 0 descriptor?? [ 538.025875][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.037504][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.135204][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.145485][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.234056][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.245667][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.261202][ T12] usb 2-1: USB disconnect, device number 69 [ 538.334013][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.349002][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.435614][ T9937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.447261][ T9937] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.453888][ T48] usb 3-1: device descriptor read/64, error 18 [ 538.593925][ T48] usb usb3-port1: attempt power cycle [ 538.623937][ T9937] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 538.633284][ T9937] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 538.643589][ T9937] usb 5-1: Product: syz [ 538.648365][ T9937] usb 5-1: Manufacturer: syz [ 538.653253][ T9937] usb 5-1: SerialNumber: syz [ 538.660024][ T9937] usb 5-1: config 0 descriptor?? [ 538.704142][ T9937] hub 5-1:0.0: bad descriptor, ignoring hub [ 538.710257][ T9937] hub: probe of 5-1:0.0 failed with error -5 [ 538.720971][ T9937] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 539.303850][ T48] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 539.453812][ T48] usb 3-1: device descriptor read/8, error -71 [ 539.663827][ T48] usb 3-1: device descriptor read/8, error -71 21:32:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000080)) 21:32:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68", 0x22b, 0x40010, 0x0, 0x0) 21:32:49 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='cre']) 21:32:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) 21:32:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000080)) 21:32:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68", 0x22b, 0x40010, 0x0, 0x0) [ 539.956728][T21265] hfsplus: unable to parse mount options 21:32:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000080)) 21:32:49 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:32:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23e, 0x40010, 0x0, 0x0) 21:32:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23e, 0x40010, 0x0, 0x0) [ 540.089577][T21287] hfsplus: unable to parse mount options [ 540.183748][ T9918] usb 5-1: reset high-speed USB device number 47 using dummy_hcd [ 540.243802][T19955] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 540.433705][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 540.453741][ T48] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 540.473780][ T9918] usb 5-1: device firmware changed [ 540.479101][ T9918] usb 5-1: USB disconnect, device number 47 [ 540.485406][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 540.524203][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 540.604055][T19955] usb 2-1: config 0 has no interfaces? [ 540.624072][ T48] usb 3-1: device descriptor read/8, error -61 [ 540.683879][T19955] usb 2-1: config 0 has no interfaces? [ 540.764148][T19955] usb 2-1: config 0 has no interfaces? [ 540.833682][ T9918] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 540.844097][T19955] usb 2-1: config 0 has no interfaces? [ 540.893691][ T48] usb 3-1: device descriptor read/8, error -61 [ 540.923963][T19955] usb 2-1: config 0 has no interfaces? [ 541.003947][T19955] usb 2-1: config 0 has no interfaces? [ 541.014179][ T48] usb usb3-port1: unable to enumerate USB device [ 541.073637][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 541.084168][T19955] usb 2-1: config 0 has no interfaces? [ 541.114049][ T9918] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 541.164051][T19955] usb 2-1: config 0 has no interfaces? [ 541.193960][ T9918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.283697][ T9918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.323664][T19955] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 541.332840][T19955] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 541.341386][T19955] usb 2-1: Product: syz [ 541.345642][T19955] usb 2-1: Manufacturer: syz [ 541.350240][T19955] usb 2-1: SerialNumber: syz [ 541.355681][T19955] usb 2-1: config 0 descriptor?? [ 541.373637][ T9918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.464987][ T9918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.553619][ T9918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.596692][T19955] usb 2-1: USB disconnect, device number 70 [ 541.643664][ T9918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.736391][ T9918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.824047][ T9918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.993879][ T9918] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 542.003466][ T9918] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 542.013458][ T9918] usb 5-1: Product: syz [ 542.017704][ T9918] usb 5-1: Manufacturer: syz [ 542.022391][ T9918] usb 5-1: SerialNumber: syz [ 542.031006][ T9918] usb 5-1: config 0 descriptor?? [ 542.073849][ T9918] hub 5-1:0.0: bad descriptor, ignoring hub [ 542.079869][ T9918] hub: probe of 5-1:0.0 failed with error -5 [ 542.091862][ T9918] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 21:32:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, 0x0) 21:32:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) 21:32:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23e, 0x40010, 0x0, 0x0) 21:32:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328"], 0x0) 21:32:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, 0x0) 21:32:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x247, 0x40010, 0x0, 0x0) [ 543.337296][T21329] hfsplus: unable to find HFS+ superblock 21:32:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x247, 0x40010, 0x0, 0x0) 21:32:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) 21:32:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x247, 0x40010, 0x0, 0x0) 21:32:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, 0x0) [ 543.511559][T21353] hfsplus: unable to find HFS+ superblock [ 543.563387][ T12] usb 5-1: reset high-speed USB device number 48 using dummy_hcd [ 543.595145][ T5] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 543.633433][ T9918] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 543.803395][ T12] usb 5-1: Using ep0 maxpacket: 32 [ 543.844552][ T12] usb 5-1: device firmware changed [ 543.849831][ T12] usb 5-1: USB disconnect, device number 48 [ 543.873403][ T5] usb 3-1: device descriptor read/64, error 18 [ 543.893403][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 543.943728][ T9918] usb 2-1: no configurations [ 543.948505][ T9918] usb 2-1: can't read configurations, error -22 [ 544.113329][ T9918] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 544.203359][ T12] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 544.263337][ T5] usb 3-1: device descriptor read/64, error 18 [ 544.383794][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 544.423650][ T9918] usb 2-1: no configurations [ 544.428345][ T9918] usb 2-1: can't read configurations, error -22 [ 544.434687][ T9918] usb usb2-port1: attempt power cycle [ 544.443346][ T12] usb 5-1: Using ep0 maxpacket: 32 [ 544.483418][ T12] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 544.533318][ T5] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 544.563371][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.653977][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.743366][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.803274][ T5] usb 3-1: device descriptor read/64, error 18 [ 544.834762][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.923716][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.013620][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.103521][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.163259][ T9918] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 545.193241][ T5] usb 3-1: device descriptor read/64, error 18 [ 545.199575][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.273282][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 545.313262][ T5] usb usb3-port1: attempt power cycle [ 545.313634][ T9918] usb 2-1: no configurations [ 545.323279][ T9918] usb 2-1: can't read configurations, error -22 [ 545.373550][ T12] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 545.382745][ T12] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 545.391434][ T12] usb 5-1: Product: syz [ 545.395695][ T12] usb 5-1: Manufacturer: syz [ 545.400295][ T12] usb 5-1: SerialNumber: syz [ 545.406550][ T12] usb 5-1: config 0 descriptor?? [ 545.443455][ T12] hub 5-1:0.0: bad descriptor, ignoring hub [ 545.449811][ T12] hub: probe of 5-1:0.0 failed with error -5 [ 545.457938][ T12] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 545.483214][ T9918] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 545.583566][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 545.633509][ T9918] usb 2-1: no configurations [ 545.638290][ T9918] usb 2-1: can't read configurations, error -22 [ 545.647769][ T9918] usb usb2-port1: unable to enumerate USB device [ 546.043153][ T5] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 546.233156][ T5] usb 3-1: device descriptor read/8, error -61 [ 546.463190][ T5] usb 3-1: device descriptor read/8, error -71 21:32:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:32:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x24c, 0x40010, 0x0, 0x0) 21:32:56 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) 21:32:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328"], 0x0) 21:32:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x24c, 0x40010, 0x0, 0x0) [ 546.717626][T21393] hfsplus: unable to find HFS+ superblock 21:32:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) 21:32:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x24c, 0x40010, 0x0, 0x0) 21:32:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x24e, 0x40010, 0x0, 0x0) 21:32:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x24e, 0x40010, 0x0, 0x0) 21:32:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8f", 0x24e, 0x40010, 0x0, 0x0) 21:32:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fde", 0x24f, 0x40010, 0x0, 0x0) 21:32:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x24f, 0x40010, 0x0, 0x0) [ 546.923108][T19955] usb 5-1: reset high-speed USB device number 49 using dummy_hcd [ 546.963096][ T12] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 547.053086][ T5] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 547.063123][ T9918] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 547.113078][ T48] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 547.173034][T19955] usb 5-1: Using ep0 maxpacket: 32 [ 547.213352][T19955] usb 5-1: device firmware changed [ 547.218736][T19955] usb 5-1: USB disconnect, device number 49 [ 547.233362][ T5] usb 3-1: device descriptor read/8, error -61 [ 547.239678][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 547.283391][ T12] usb 2-1: no configurations [ 547.288129][ T12] usb 2-1: can't read configurations, error -22 [ 547.303038][ T9918] usb 6-1: Using ep0 maxpacket: 32 [ 547.343618][ T9918] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 547.353103][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 547.393180][ T48] usb 1-1: too many configurations: 27, using maximum allowed: 8 [ 547.423041][ T9918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.433300][ T9918] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.453624][ T12] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 547.473124][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.484062][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.523018][ T9918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.533233][ T9918] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.553479][ T5] usb 3-1: device descriptor read/8, error -61 [ 547.573092][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.584033][T19955] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 547.592035][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.623372][ T9918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.633995][ T9918] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.673324][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.683005][ T5] usb usb3-port1: unable to enumerate USB device [ 547.686147][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.722982][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 547.723010][ T9918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.738765][ T9918] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.773008][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.773380][ T12] usb 2-1: no configurations [ 547.785816][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.788998][ T12] usb 2-1: can't read configurations, error -22 [ 547.805479][ T12] usb usb2-port1: attempt power cycle [ 547.823027][ T9918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.833317][T19955] usb 5-1: Using ep0 maxpacket: 32 [ 547.839059][ T9918] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.873031][T19955] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 547.880987][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.892462][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.923024][ T9918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.933369][ T9918] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.974935][T19955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.987867][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.999228][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.033023][ T9918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.043731][ T9918] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.083018][T19955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.096234][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.107127][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.142971][ T9918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.153919][ T9918] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.193003][T19955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.205962][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.216933][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.303306][T19955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.333372][ T9918] usb 6-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 548.342659][ T9918] usb 6-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 548.352830][ T9918] usb 6-1: Product: syz [ 548.357983][ T9918] usb 6-1: Manufacturer: syz [ 548.362659][ T9918] usb 6-1: SerialNumber: syz [ 548.371334][ T9918] usb 6-1: config 0 descriptor?? [ 548.394074][ T48] usb 1-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 548.403344][T19955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.417640][ T48] usb 1-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 548.426763][ T48] usb 1-1: Product: syz [ 548.430998][ T48] usb 1-1: Manufacturer: syz [ 548.436198][ T48] usb 1-1: SerialNumber: syz [ 548.441565][ T48] usb 1-1: config 0 descriptor?? [ 548.485117][ T48] hub 1-1:0.0: USB hub found [ 548.502957][T19955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.542956][ T12] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 548.593728][T19955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.654187][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 548.682939][T19955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.708160][ T12] usb 2-1: no configurations [ 548.713344][ T12] usb 2-1: can't read configurations, error -22 [ 548.722897][ T48] hub 1-1:0.0: 2 ports detected [ 548.853278][T19955] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 548.862736][T19955] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 548.871352][T19955] usb 5-1: Product: syz [ 548.875711][T19955] usb 5-1: Manufacturer: syz [ 548.880310][T19955] usb 5-1: SerialNumber: syz [ 548.882853][ T12] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 548.886189][T19955] usb 5-1: config 0 descriptor?? [ 548.934726][T19955] hub 5-1:0.0: bad descriptor, ignoring hub [ 548.941191][T19955] hub: probe of 5-1:0.0 failed with error -5 [ 548.951730][ T48] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 548.961778][ T48] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 548.977891][T19955] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 548.994673][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 549.043780][ T12] usb 2-1: no configurations [ 549.048800][ T12] usb 2-1: can't read configurations, error -22 [ 549.055761][ T12] usb usb2-port1: unable to enumerate USB device [ 549.063551][ T48] usb 1-1: USB disconnect, device number 5 21:32:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328"], 0x0) [ 549.777528][ T5] usb 6-1: USB disconnect, device number 97 21:32:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db00090400000103010100092500000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x24f, 0x40010, 0x0, 0x0) 21:32:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0xfffffffd}, 0x18) 21:32:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:32:59 executing program 5 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 550.132752][ T12] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 550.177146][T21477] input: syz1 as /devices/virtual/input/input133 [ 550.200546][T21487] FAULT_INJECTION: forcing a failure. [ 550.200546][T21487] name failslab, interval 1, probability 0, space 0, times 1 [ 550.223671][T21487] CPU: 1 PID: 21487 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 550.232748][T21487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.243093][T21487] Call Trace: [ 550.246454][T21487] dump_stack+0x10f/0x19d [ 550.250769][T21487] should_fail+0x23c/0x250 [ 550.255835][T21487] __should_failslab+0x81/0x90 [ 550.260594][T21487] ? __se_sys_memfd_create+0xfb/0x380 [ 550.266439][T21487] should_failslab+0x5/0x20 [ 550.271161][T21487] __kmalloc+0x43/0x2d0 [ 550.276218][T21487] ? strnlen_user+0x166/0x1f0 [ 550.280981][T21487] __se_sys_memfd_create+0xfb/0x380 [ 550.286378][T21487] __x64_sys_memfd_create+0x2d/0x40 [ 550.291727][T21487] do_syscall_64+0x51/0xb0 [ 550.296127][T21487] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 550.301993][T21487] RIP: 0033:0x45cb29 [ 550.305942][T21487] Code: Bad RIP value. [ 550.310003][T21487] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 550.318473][T21487] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045cb29 21:32:59 executing program 0 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x0, 0x0, 0x0) 21:32:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:32:59 executing program 5 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 550.326537][T21487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1c91 [ 550.334793][T21487] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 550.342837][T21487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 550.350892][T21487] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x0, 0x0, 0x0) 21:33:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x2, 0x0, &(0x7f0000000080)) [ 550.421912][T21501] FAULT_INJECTION: forcing a failure. [ 550.421912][T21501] name failslab, interval 1, probability 0, space 0, times 0 [ 550.446512][T21501] CPU: 0 PID: 21501 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 550.455909][T21501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.466150][T21501] Call Trace: [ 550.469440][T21501] dump_stack+0x10f/0x19d [ 550.474387][T21501] should_fail+0x23c/0x250 [ 550.478808][T21501] __should_failslab+0x81/0x90 [ 550.483784][T21501] ? shmem_match+0xa0/0xa0 [ 550.488396][T21501] should_failslab+0x5/0x20 [ 550.493192][T21501] kmem_cache_alloc+0x29/0x2b0 [ 550.498064][T21501] ? shmem_alloc_inode+0x22/0x30 [ 550.504018][T21501] ? shmem_match+0xa0/0xa0 [ 550.508448][T21501] shmem_alloc_inode+0x22/0x30 [ 550.512698][ T9918] usb 5-1: reset high-speed USB device number 50 using dummy_hcd [ 550.513408][T21501] new_inode_pseudo+0x38/0x190 [ 550.521588][ T48] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 550.526214][T21501] new_inode+0x21/0x100 [ 550.526228][T21501] shmem_get_inode+0xd1/0x470 [ 550.526240][T21501] __shmem_file_setup+0xf1/0x1d0 [ 550.526251][T21501] shmem_file_setup+0x37/0x40 [ 550.526266][T21501] __se_sys_memfd_create+0x231/0x380 [ 550.560358][T21501] __x64_sys_memfd_create+0x2d/0x40 [ 550.567268][T21501] do_syscall_64+0x51/0xb0 [ 550.571872][T21501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 550.578300][T21501] RIP: 0033:0x45cb29 [ 550.582567][T21501] Code: Bad RIP value. [ 550.586669][T21501] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 550.595277][T21501] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045cb29 [ 550.603243][T21501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1c91 [ 550.611206][T21501] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 550.619206][T21501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 550.627174][T21501] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 550.692695][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 550.743160][ T12] usb 2-1: no configurations [ 550.747793][ T12] usb 2-1: can't read configurations, error -22 [ 550.772935][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 550.812728][ T9918] usb 5-1: device firmware changed [ 550.820689][ T9918] usb 5-1: USB disconnect, device number 50 [ 550.832402][ T48] usb 3-1: device descriptor read/64, error 18 [ 550.912704][ T12] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 551.172614][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 551.183213][ T9918] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 551.213649][ T12] usb 2-1: no configurations [ 551.219080][ T12] usb 2-1: can't read configurations, error -22 [ 551.222664][ T48] usb 3-1: device descriptor read/64, error 18 [ 551.226438][ T12] usb usb2-port1: attempt power cycle [ 551.432618][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 551.493058][ T9918] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 551.503189][ T48] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 551.573642][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.673000][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.762952][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.803122][ T48] usb 3-1: device descriptor read/64, error 18 [ 551.862901][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.942606][ T12] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 551.962955][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.032579][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 552.063474][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.072995][ T12] usb 2-1: no configurations [ 552.077830][ T12] usb 2-1: can't read configurations, error -22 [ 552.162950][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.222579][ T48] usb 3-1: device descriptor read/64, error 18 [ 552.232578][ T12] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 552.263872][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.322862][ T12] usb 2-1: Using ep0 maxpacket: 32 [ 552.342559][ T48] usb usb3-port1: attempt power cycle [ 552.363083][ T12] usb 2-1: no configurations [ 552.367745][ T12] usb 2-1: can't read configurations, error -22 [ 552.375861][ T12] usb usb2-port1: unable to enumerate USB device [ 552.454466][ T9918] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 552.464007][ T9918] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 552.472408][ T9918] usb 5-1: Product: syz [ 552.478264][ T9918] usb 5-1: Manufacturer: syz [ 552.483335][ T9918] usb 5-1: SerialNumber: syz [ 552.490868][ T9918] usb 5-1: config 0 descriptor?? [ 552.552775][ T9918] hub 5-1:0.0: bad descriptor, ignoring hub [ 552.558836][ T9918] hub: probe of 5-1:0.0 failed with error -5 [ 552.571340][ T9918] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 21:33:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b"], 0x0) [ 553.062470][ T48] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 553.162465][ T5] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 553.232437][ T48] usb 3-1: device descriptor read/8, error -71 [ 553.412428][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 553.442432][ T48] usb 3-1: device descriptor read/8, error -71 [ 553.452870][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 553.572424][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 553.580147][ T5] usb 2-1: can't read configurations, error -61 21:33:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db00090400000103010100092500000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1e, 0x805, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={r7}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x1c, 0x400}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r8, @in={{0x2, 0x4e23, @multicast1}}, 0x1, 0x8}, 0x90) 21:33:03 executing program 5 (fault-call:3 fault-nth:2): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x0, 0x0, 0x0) 21:33:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 553.732892][ T5] usb 2-1: new high-speed USB device number 84 using dummy_hcd 21:33:03 executing program 3 (fault-call:5 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 553.817370][T21549] FAULT_INJECTION: forcing a failure. [ 553.817370][T21549] name failslab, interval 1, probability 0, space 0, times 0 [ 553.855510][T21549] CPU: 0 PID: 21549 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 553.864251][T21549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.874315][T21549] Call Trace: [ 553.877597][T21549] dump_stack+0x10f/0x19d [ 553.881921][T21549] should_fail+0x23c/0x250 [ 553.886345][T21549] __should_failslab+0x81/0x90 [ 553.891213][T21549] should_failslab+0x5/0x20 [ 553.895708][T21549] kmem_cache_alloc+0x29/0x2b0 [ 553.900542][T21549] ? __d_alloc+0x36/0x370 [ 553.904907][T21549] __d_alloc+0x36/0x370 [ 553.909217][T21549] d_alloc_pseudo+0x1a/0x50 [ 553.913768][T21549] alloc_file_pseudo+0x63/0x130 [ 553.918608][T21549] ? shmem_get_inode+0x46b/0x470 [ 553.923531][T21549] __shmem_file_setup+0x14c/0x1d0 [ 553.928543][T21549] shmem_file_setup+0x37/0x40 [ 553.933300][T21549] __se_sys_memfd_create+0x231/0x380 [ 553.938600][T21549] __x64_sys_memfd_create+0x2d/0x40 [ 553.943786][T21549] do_syscall_64+0x51/0xb0 [ 553.948202][T21549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 553.954083][T21549] RIP: 0033:0x45cb29 [ 553.958094][T21549] Code: Bad RIP value. [ 553.959433][T21554] FAULT_INJECTION: forcing a failure. [ 553.959433][T21554] name failslab, interval 1, probability 0, space 0, times 0 [ 553.962248][T21549] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 553.983463][T21549] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045cb29 [ 553.991583][T21549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1c91 [ 553.999557][T21549] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 554.007587][T21549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 21:33:03 executing program 5 (fault-call:3 fault-nth:3): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 554.015532][T21549] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 554.023489][T21554] CPU: 1 PID: 21554 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 554.032324][T21554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.042456][T21554] Call Trace: [ 554.045816][T21554] dump_stack+0x10f/0x19d [ 554.050135][T21554] should_fail+0x23c/0x250 [ 554.055673][T21554] __should_failslab+0x81/0x90 [ 554.060450][T21554] should_failslab+0x5/0x20 [ 554.065022][T21554] kmem_cache_alloc+0x29/0x2b0 [ 554.066421][T21561] FAULT_INJECTION: forcing a failure. [ 554.066421][T21561] name failslab, interval 1, probability 0, space 0, times 0 [ 554.069798][T21554] ? __sigqueue_alloc+0x129/0x280 [ 554.069813][T21554] __sigqueue_alloc+0x129/0x280 [ 554.083075][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 554.088641][T21554] __send_signal+0x169/0x7d0 [ 554.088721][T21554] send_signal+0x398/0x3e0 [ 554.108013][T21554] ? __rcu_read_unlock+0x4b/0x260 [ 554.113110][T21554] do_send_sig_info+0x9b/0xe0 [ 554.118201][T21554] send_sig+0x4f/0x60 [ 554.122181][T21554] sk_stream_error+0x94/0xe0 [ 554.127144][T21554] tcp_sendmsg_locked+0x19aa/0x2200 [ 554.133119][T21554] ? terminate_walk+0x24e/0x270 [ 554.138302][T21554] ? aa_label_sk_perm+0x1f9/0x280 [ 554.143448][T21554] ? path_openat+0x1e48/0x20e0 [ 554.148189][T21554] ? kstrtoull+0x30b/0x350 [ 554.152808][T21554] ? __this_cpu_preempt_check+0x18/0x20 [ 554.158341][T21554] ? __local_bh_enable_ip+0x48/0x70 [ 554.163551][T21554] ? local_bh_enable+0x1b/0x20 [ 554.168287][T21554] ? lock_sock_nested+0xfb/0x120 [ 554.173206][T21554] tcp_sendmsg+0x2c/0x40 [ 554.177427][T21554] inet_sendmsg+0x5f/0x80 [ 554.181733][T21554] __sys_sendto+0x2ad/0x380 [ 554.182312][ T9937] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 554.186217][T21554] ? __this_cpu_preempt_check+0x18/0x20 [ 554.186226][T21554] ? __sb_end_write+0x90/0xe0 [ 554.186243][T21554] ? vfs_write+0x323/0x350 [ 554.209149][T21554] ? check_preemption_disabled+0x51/0x140 [ 554.214098][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 554.215179][T21554] ? debug_smp_processor_id+0x18/0x20 [ 554.228212][T21554] __x64_sys_sendto+0x74/0x90 [ 554.233243][T21554] do_syscall_64+0x51/0xb0 [ 554.237652][T21554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.243531][T21554] RIP: 0033:0x45cb29 [ 554.247583][T21554] Code: Bad RIP value. [ 554.251725][T21554] RSP: 002b:00007f00a2795c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 554.260206][T21554] RAX: ffffffffffffffda RBX: 0000000000502960 RCX: 000000000045cb29 [ 554.268164][T21554] RDX: 0000000000000250 RSI: 0000000020000640 RDI: 0000000000000003 [ 554.276150][T21554] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 554.284117][T21554] R10: 0000000000040010 R11: 0000000000000246 R12: 0000000000000004 [ 554.292150][T21554] R13: 0000000000000a4c R14: 00000000004cd338 R15: 00007f00a27966d4 [ 554.300108][T21561] CPU: 0 PID: 21561 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 554.308779][T21561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.319167][T21561] Call Trace: [ 554.322454][T21561] dump_stack+0x10f/0x19d [ 554.326791][T21561] should_fail+0x23c/0x250 [ 554.331196][T21561] __should_failslab+0x81/0x90 [ 554.336127][T21561] should_failslab+0x5/0x20 [ 554.340723][T21561] kmem_cache_alloc+0x29/0x2b0 [ 554.345503][T21561] ? __alloc_file+0x2e/0x1f0 [ 554.350075][T21561] __alloc_file+0x2e/0x1f0 [ 554.354474][T21561] alloc_empty_file+0xcd/0x1c0 [ 554.360267][T21561] alloc_file+0x3a/0x280 [ 554.364490][T21561] alloc_file_pseudo+0xe2/0x130 [ 554.369433][T21561] __shmem_file_setup+0x14c/0x1d0 [ 554.374461][T21561] shmem_file_setup+0x37/0x40 [ 554.379121][T21561] __se_sys_memfd_create+0x231/0x380 [ 554.384468][T21561] __x64_sys_memfd_create+0x2d/0x40 [ 554.389722][T21561] do_syscall_64+0x51/0xb0 [ 554.394131][T21561] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.401156][T21561] RIP: 0033:0x45cb29 [ 554.405017][T21561] Code: Bad RIP value. [ 554.409057][T21561] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 21:33:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:04 executing program 5 (fault-call:3 fault-nth:4): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 554.417692][T21561] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045cb29 [ 554.425639][T21561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1c91 [ 554.433845][T21561] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 554.441808][T21561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 554.450127][T21561] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x414000) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x401, 0xfc}) [ 554.493138][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 554.500730][ T5] usb 2-1: can't read configurations, error -61 [ 554.510367][T21566] FAULT_INJECTION: forcing a failure. [ 554.510367][T21566] name failslab, interval 1, probability 0, space 0, times 0 [ 554.518286][ T5] usb usb2-port1: attempt power cycle [ 554.539387][T21566] CPU: 1 PID: 21566 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 554.548687][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.558739][T21566] Call Trace: [ 554.562030][T21566] dump_stack+0x10f/0x19d [ 554.566368][T21566] should_fail+0x23c/0x250 [ 554.571561][T21566] __should_failslab+0x81/0x90 [ 554.576328][T21566] should_failslab+0x5/0x20 [ 554.581149][T21566] kmem_cache_alloc+0x29/0x2b0 [ 554.585941][T21566] ? security_file_alloc+0x30/0x190 [ 554.591248][T21566] security_file_alloc+0x30/0x190 [ 554.596470][T21566] __alloc_file+0x83/0x1f0 [ 554.600875][T21566] alloc_empty_file+0xcd/0x1c0 [ 554.605786][T21566] alloc_file+0x3a/0x280 [ 554.610025][T21566] alloc_file_pseudo+0xe2/0x130 [ 554.614872][T21566] __shmem_file_setup+0x14c/0x1d0 [ 554.619897][T21566] shmem_file_setup+0x37/0x40 [ 554.624574][T21566] __se_sys_memfd_create+0x231/0x380 [ 554.629847][T21566] __x64_sys_memfd_create+0x2d/0x40 [ 554.635041][T21566] do_syscall_64+0x51/0xb0 [ 554.639529][T21566] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.645410][T21566] RIP: 0033:0x45cb29 [ 554.649303][T21566] Code: Bad RIP value. [ 554.652290][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 554.653440][T21566] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 554.653450][T21566] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045cb29 [ 554.653455][T21566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1c91 [ 554.653466][T21566] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 554.691102][T21566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 554.699064][T21566] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 554.708859][ T48] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 554.712793][ T9937] usb 5-1: device firmware changed [ 554.732376][ T9937] usb 5-1: USB disconnect, device number 51 21:33:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0x1000000, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000080)) [ 554.912558][ T48] usb 3-1: device descriptor read/8, error -61 [ 555.092282][ T9937] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 555.202577][ T48] usb 3-1: device descriptor read/8, error -61 [ 555.232244][ T5] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 555.322256][ T48] usb usb3-port1: unable to enumerate USB device [ 555.322611][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 555.333738][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 555.372582][ T9937] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 555.392577][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 555.452259][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.512594][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 555.520370][ T5] usb 2-1: can't read configurations, error -61 [ 555.543805][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.632604][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.672177][ T5] usb 2-1: new high-speed USB device number 86 using dummy_hcd 21:33:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b"], 0x0) [ 555.722605][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.792187][ T5] usb 2-1: device descriptor read/8, error -71 [ 555.832490][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.922650][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.002154][ T5] usb 2-1: device descriptor read/8, error -71 [ 556.012668][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.102456][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.122252][ T5] usb usb2-port1: unable to enumerate USB device [ 556.282211][ T9937] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 556.291272][ T9937] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 556.312145][ T9937] usb 5-1: Product: syz [ 556.316760][ T9937] usb 5-1: Manufacturer: syz [ 556.321366][ T9937] usb 5-1: SerialNumber: syz [ 556.332879][ T9937] usb 5-1: config 0 descriptor?? [ 556.372430][ T9937] hub 5-1:0.0: bad descriptor, ignoring hub [ 556.379986][ T9937] hub: probe of 5-1:0.0 failed with error -5 [ 556.392973][ T9937] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 556.472135][ T5] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 556.712132][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 556.752156][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 556.872177][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 556.880397][ T5] usb 2-1: can't read configurations, error -61 [ 557.032095][ T5] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 557.272053][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 557.312438][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 557.432372][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 557.439928][ T5] usb 2-1: can't read configurations, error -61 [ 557.447682][ T5] usb usb2-port1: attempt power cycle 21:33:07 executing program 5 (fault-call:3 fault-nth:5): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000000)) 21:33:07 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x4, 0x80000, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db00090400000103010100092500000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x44090, 0x0, 0x0) [ 557.616473][T21614] FAULT_INJECTION: forcing a failure. [ 557.616473][T21614] name failslab, interval 1, probability 0, space 0, times 0 [ 557.666144][T21614] CPU: 0 PID: 21614 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 557.675009][T21614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.685050][T21614] Call Trace: [ 557.688335][T21614] dump_stack+0x10f/0x19d [ 557.692761][T21614] should_fail+0x23c/0x250 [ 557.697168][T21614] __should_failslab+0x81/0x90 [ 557.701960][T21614] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 557.707677][T21614] should_failslab+0x5/0x20 [ 557.712172][T21614] __kmalloc+0x43/0x2d0 [ 557.716483][T21614] tomoyo_realpath_from_path+0x98/0x3c0 [ 557.722214][T21614] tomoyo_path_perm+0xc6/0x330 [ 557.726977][T21614] ? check_preemption_disabled+0x51/0x140 [ 557.733219][T21614] tomoyo_path_truncate+0x18/0x20 [ 557.738559][T21614] security_path_truncate+0x7f/0xd0 [ 557.743775][T21614] do_sys_ftruncate+0x2fa/0x3e0 [ 557.748958][T21614] ? debug_smp_processor_id+0x18/0x20 [ 557.754337][T21614] ? fpregs_assert_state_consistent+0x7e/0x90 [ 557.760628][T21614] __x64_sys_ftruncate+0x2f/0x40 [ 557.765655][T21614] do_syscall_64+0x51/0xb0 [ 557.770072][T21614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 557.775959][T21614] RIP: 0033:0x45caf7 [ 557.779837][T21614] Code: Bad RIP value. [ 557.783895][T21614] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000213 ORIG_RAX: 000000000000004d [ 557.792297][T21614] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045caf7 [ 557.800272][T21614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 557.808422][T21614] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 21:33:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = gettid() tkill(r1, 0x1004000000013) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xff, &(0x7f0000000080)=""/122) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 557.816483][T21614] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000000006 [ 557.824934][T21614] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 557.955079][T21614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 557.968844][T21614] hfsplus: unable to parse mount options [ 557.991973][ T9918] usb 5-1: reset high-speed USB device number 52 using dummy_hcd 21:33:07 executing program 5 (fault-call:3 fault-nth:6): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 557.999759][ T48] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 558.063998][T21638] FAULT_INJECTION: forcing a failure. [ 558.063998][T21638] name failslab, interval 1, probability 0, space 0, times 0 [ 558.077132][T21638] CPU: 0 PID: 21638 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 558.085883][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.095929][T21638] Call Trace: [ 558.099430][T21638] dump_stack+0x10f/0x19d [ 558.103758][T21638] should_fail+0x23c/0x250 [ 558.108170][T21638] __should_failslab+0x81/0x90 [ 558.112938][T21638] ? tomoyo_encode2+0x1e2/0x350 [ 558.117955][T21638] should_failslab+0x5/0x20 [ 558.122503][T21638] __kmalloc+0x43/0x2d0 [ 558.126651][T21638] ? should_fail+0xd6/0x250 [ 558.131176][T21638] tomoyo_encode2+0x1e2/0x350 [ 558.135861][T21638] ? dynamic_dname+0xf0/0xf0 [ 558.140446][T21638] tomoyo_realpath_from_path+0x36e/0x3c0 [ 558.146088][T21638] tomoyo_path_perm+0xc6/0x330 [ 558.150858][T21638] ? check_preemption_disabled+0x51/0x140 [ 558.156645][T21638] tomoyo_path_truncate+0x18/0x20 [ 558.161676][T21638] security_path_truncate+0x7f/0xd0 [ 558.166872][T21638] do_sys_ftruncate+0x2fa/0x3e0 [ 558.171721][T21638] ? debug_smp_processor_id+0x18/0x20 [ 558.177096][T21638] ? fpregs_assert_state_consistent+0x7e/0x90 [ 558.184030][T21638] __x64_sys_ftruncate+0x2f/0x40 [ 558.189250][T21638] do_syscall_64+0x51/0xb0 [ 558.193665][T21638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.199606][T21638] RIP: 0033:0x45caf7 [ 558.203479][T21638] Code: Bad RIP value. [ 558.207579][T21638] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000213 ORIG_RAX: 000000000000004d [ 558.216161][T21638] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045caf7 [ 558.224123][T21638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 558.232167][T21638] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 558.240242][T21638] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000000006 [ 558.248297][T21638] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 558.331930][ T5] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 558.381938][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 558.422258][ T9918] usb 5-1: device firmware changed [ 558.427639][ T9918] usb 5-1: USB disconnect, device number 52 [ 558.432309][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 558.461907][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 558.472415][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 558.491944][T21638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 558.502378][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 558.518978][T21638] hfsplus: unable to parse mount options [ 558.592391][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 558.606401][ T5] usb 2-1: can't read configurations, error -61 [ 558.622335][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 21:33:08 executing program 5 (fault-call:3 fault-nth:7): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 558.650710][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.675726][T21649] FAULT_INJECTION: forcing a failure. [ 558.675726][T21649] name failslab, interval 1, probability 0, space 0, times 0 [ 558.708748][T21649] CPU: 1 PID: 21649 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 558.719228][T21649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.729383][T21649] Call Trace: [ 558.732741][T21649] dump_stack+0x10f/0x19d [ 558.737089][T21649] should_fail+0x23c/0x250 [ 558.741501][T21649] __should_failslab+0x81/0x90 [ 558.746318][T21649] should_failslab+0x5/0x20 [ 558.750813][T21649] kmem_cache_alloc+0x29/0x2b0 [ 558.755566][T21649] ? getname_flags+0x84/0x3d0 [ 558.760257][T21649] getname_flags+0x84/0x3d0 [ 558.764747][T21649] ? __this_cpu_preempt_check+0x18/0x20 [ 558.770338][T21649] ? fput+0x2d/0x130 [ 558.772369][ T5] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 558.774217][T21649] getname+0x15/0x20 [ 558.774230][T21649] do_sys_openat2+0x2f3/0x4a0 [ 558.774246][T21649] __x64_sys_open+0xe2/0x110 [ 558.794966][T21649] do_syscall_64+0x51/0xb0 [ 558.799468][T21649] entry_SYSCALL_64_after_hwframe+0x44/0xa9 21:33:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b"], 0x0) [ 558.805371][T21649] RIP: 0033:0x416921 [ 558.809769][T21649] Code: Bad RIP value. [ 558.813820][T21649] RSP: 002b:00007f3ed6d56a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 558.822220][T21649] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 0000000000416921 [ 558.830180][T21649] RDX: 00007f3ed6d56b0a RSI: 0000000000000002 RDI: 00007f3ed6d56b00 [ 558.838152][T21649] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 558.846374][T21649] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 21:33:08 executing program 5 (fault-call:3 fault-nth:8): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 558.854515][T21649] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 558.903596][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.921597][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.932470][ T9918] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 558.943468][T21656] FAULT_INJECTION: forcing a failure. [ 558.943468][T21656] name failslab, interval 1, probability 0, space 0, times 0 [ 558.976661][T21656] CPU: 0 PID: 21656 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 558.985351][T21656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.995436][T21656] Call Trace: [ 558.998734][T21656] dump_stack+0x10f/0x19d [ 559.003168][T21656] should_fail+0x23c/0x250 [ 559.007590][T21656] __should_failslab+0x81/0x90 [ 559.012356][T21656] should_failslab+0x5/0x20 [ 559.016928][T21656] kmem_cache_alloc+0x29/0x2b0 [ 559.021666][T21656] ? __alloc_file+0x2e/0x1f0 [ 559.026252][T21656] __alloc_file+0x2e/0x1f0 [ 559.030666][T21656] alloc_empty_file+0xcd/0x1c0 [ 559.035424][T21656] path_openat+0x6a/0x20e0 [ 559.040187][T21656] ? __srcu_read_unlock+0x1f/0x40 [ 559.045271][T21656] ? tomoyo_path_perm+0x2d9/0x330 [ 559.050293][T21656] ? check_preemption_disabled+0x51/0x140 [ 559.056094][T21656] ? preempt_count_add+0x4e/0x90 [ 559.061125][T21656] ? _raw_spin_unlock+0x2e/0x50 [ 559.066199][T21656] ? simple_xattr_get+0xc8/0x100 [ 559.071140][T21656] do_filp_open+0xbd/0x1d0 [ 559.075638][T21656] ? expand_files+0x55/0x510 [ 559.080224][T21656] ? __check_object_size+0x253/0x310 [ 559.085527][T21656] ? _raw_spin_unlock+0x2e/0x50 [ 559.090377][T21656] ? __alloc_fd+0x33c/0x390 [ 559.094880][T21656] do_sys_openat2+0x33c/0x4a0 [ 559.099582][T21656] __x64_sys_open+0xe2/0x110 [ 559.104451][T21656] do_syscall_64+0x51/0xb0 [ 559.108962][T21656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 559.114853][T21656] RIP: 0033:0x416921 [ 559.118732][T21656] Code: Bad RIP value. [ 559.123227][T21656] RSP: 002b:00007f3ed6d56a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 559.131715][T21656] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 0000000000416921 [ 559.139716][T21656] RDX: 00007f3ed6d56b0a RSI: 0000000000000002 RDI: 00007f3ed6d56b00 [ 559.147689][T21656] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 559.155660][T21656] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 559.164078][T21656] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:08 executing program 5 (fault-call:3 fault-nth:9): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 559.232344][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.255283][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.267320][T21661] FAULT_INJECTION: forcing a failure. [ 559.267320][T21661] name failslab, interval 1, probability 0, space 0, times 0 [ 559.302218][T21661] CPU: 1 PID: 21661 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 559.312160][T21661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.323827][T21661] Call Trace: [ 559.327678][T21661] dump_stack+0x10f/0x19d [ 559.332021][T21661] should_fail+0x23c/0x250 [ 559.336478][T21661] __should_failslab+0x81/0x90 [ 559.341546][T21661] should_failslab+0x5/0x20 [ 559.346141][T21661] kmem_cache_alloc+0x29/0x2b0 [ 559.350903][T21661] ? security_file_alloc+0x30/0x190 [ 559.356165][T21661] security_file_alloc+0x30/0x190 [ 559.361317][T21661] __alloc_file+0x83/0x1f0 [ 559.365730][T21661] alloc_empty_file+0xcd/0x1c0 [ 559.370497][T21661] path_openat+0x6a/0x20e0 [ 559.374921][T21661] ? __srcu_read_unlock+0x1f/0x40 [ 559.380008][T21661] ? tomoyo_path_perm+0x2d9/0x330 [ 559.385204][T21661] ? check_preemption_disabled+0x51/0x140 [ 559.390924][T21661] ? preempt_count_add+0x4e/0x90 [ 559.395857][T21661] ? _raw_spin_unlock+0x2e/0x50 [ 559.400782][T21661] ? simple_xattr_get+0xc8/0x100 [ 559.405712][T21661] do_filp_open+0xbd/0x1d0 [ 559.410159][T21661] ? expand_files+0x55/0x510 [ 559.411881][ T5] usb 2-1: device not accepting address 90, error -71 [ 559.414769][T21661] ? __check_object_size+0x253/0x310 [ 559.414787][T21661] ? _raw_spin_unlock+0x2e/0x50 [ 559.423695][ T5] usb usb2-port1: unable to enumerate USB device [ 559.426893][T21661] ? __alloc_fd+0x33c/0x390 [ 559.426906][T21661] do_sys_openat2+0x33c/0x4a0 [ 559.426918][T21661] __x64_sys_open+0xe2/0x110 [ 559.426933][T21661] do_syscall_64+0x51/0xb0 [ 559.456447][T21661] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 559.462454][T21661] RIP: 0033:0x416921 [ 559.466373][T21661] Code: Bad RIP value. [ 559.470518][T21661] RSP: 002b:00007f3ed6d56a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 559.478923][T21661] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 0000000000416921 [ 559.486888][T21661] RDX: 00007f3ed6d56b0a RSI: 0000000000000002 RDI: 00007f3ed6d56b00 [ 559.494853][T21661] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 559.502837][T21661] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 559.510889][T21661] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 559.532697][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 21:33:09 executing program 5 (fault-call:3 fault-nth:10): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 559.551814][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.572163][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 559.594280][T21664] FAULT_INJECTION: forcing a failure. [ 559.594280][T21664] name failslab, interval 1, probability 0, space 0, times 0 [ 559.612494][ T9918] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 559.627961][T21664] CPU: 1 PID: 21664 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 559.638042][T21664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.648152][T21664] Call Trace: [ 559.651537][T21664] dump_stack+0x10f/0x19d [ 559.655864][T21664] should_fail+0x23c/0x250 [ 559.660309][T21664] __should_failslab+0x81/0x90 [ 559.665943][T21664] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 559.671656][T21664] should_failslab+0x5/0x20 [ 559.676153][T21664] __kmalloc+0x43/0x2d0 [ 559.680308][T21664] tomoyo_realpath_from_path+0x98/0x3c0 [ 559.685848][T21664] ? ima_get_action+0x58/0x70 [ 559.690686][T21664] tomoyo_check_open_permission+0xaf/0x370 [ 559.697364][T21664] tomoyo_file_open+0xd0/0xe0 [ 559.702066][T21664] security_file_open+0x3f/0x90 [ 559.706983][T21664] do_dentry_open+0x27c/0x8e0 [ 559.711661][T21664] vfs_open+0x43/0x50 [ 559.715636][T21664] path_openat+0x185f/0x20e0 [ 559.720254][T21664] ? _raw_spin_unlock+0x2e/0x50 [ 559.725096][T21664] ? simple_xattr_get+0xc8/0x100 [ 559.730160][T21664] do_filp_open+0xbd/0x1d0 [ 559.734579][T21664] ? _raw_spin_unlock+0x2e/0x50 [ 559.739474][T21664] ? __alloc_fd+0x33c/0x390 [ 559.744060][T21664] do_sys_openat2+0x33c/0x4a0 [ 559.748733][T21664] __x64_sys_open+0xe2/0x110 [ 559.753378][T21664] do_syscall_64+0x51/0xb0 [ 559.757927][T21664] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 559.764075][T21664] RIP: 0033:0x416921 [ 559.768047][T21664] Code: Bad RIP value. [ 559.772101][T21664] RSP: 002b:00007f3ed6d56a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 559.780506][T21664] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 0000000000416921 [ 559.783414][ T5] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 559.788475][T21664] RDX: 00007f3ed6d56b0a RSI: 0000000000000002 RDI: 00007f3ed6d56b00 [ 559.803985][T21664] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 559.811986][T21664] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 559.819951][T21664] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 559.832157][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 21:33:09 executing program 5 (fault-call:3 fault-nth:11): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 559.847473][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.857167][T21664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 559.866814][T21664] hfsplus: unable to parse mount options [ 559.912411][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.942873][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.957918][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.976429][T21671] FAULT_INJECTION: forcing a failure. [ 559.976429][T21671] name failslab, interval 1, probability 0, space 0, times 0 [ 559.990699][T21671] CPU: 1 PID: 21671 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 559.999371][T21671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.009428][T21671] Call Trace: [ 560.012718][T21671] dump_stack+0x10f/0x19d [ 560.017032][T21671] should_fail+0x23c/0x250 [ 560.021448][T21671] __should_failslab+0x81/0x90 [ 560.026209][T21671] ? tomoyo_encode2+0x1e2/0x350 [ 560.031095][T21671] should_failslab+0x5/0x20 [ 560.035589][T21671] __kmalloc+0x43/0x2d0 [ 560.039767][T21671] tomoyo_encode2+0x1e2/0x350 [ 560.041773][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 560.044514][T21671] tomoyo_realpath_from_path+0x36e/0x3c0 [ 560.056634][T21671] tomoyo_check_open_permission+0xaf/0x370 [ 560.062527][T21671] tomoyo_file_open+0xd0/0xe0 [ 560.067201][T21671] security_file_open+0x3f/0x90 [ 560.072114][T21671] do_dentry_open+0x27c/0x8e0 [ 560.076790][T21671] vfs_open+0x43/0x50 [ 560.080762][T21671] path_openat+0x185f/0x20e0 [ 560.082195][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 560.085345][T21671] ? _raw_spin_unlock+0x2e/0x50 [ 560.098071][T21671] ? simple_xattr_get+0xc8/0x100 [ 560.103023][T21671] do_filp_open+0xbd/0x1d0 [ 560.107457][T21671] ? _raw_spin_unlock+0x2e/0x50 [ 560.112641][T21671] ? __alloc_fd+0x33c/0x390 [ 560.117158][T21671] do_sys_openat2+0x33c/0x4a0 [ 560.121834][T21671] __x64_sys_open+0xe2/0x110 [ 560.126416][T21671] do_syscall_64+0x51/0xb0 [ 560.130836][T21671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 560.136721][T21671] RIP: 0033:0x416921 [ 560.142513][T21671] Code: Bad RIP value. [ 560.146569][T21671] RSP: 002b:00007f3ed6d56a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 560.154973][T21671] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 0000000000416921 [ 560.163018][T21671] RDX: 00007f3ed6d56b0a RSI: 0000000000000002 RDI: 00007f3ed6d56b00 [ 560.171106][T21671] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 560.179179][T21671] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 560.187147][T21671] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 560.202202][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.222064][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 560.229631][ T5] usb 2-1: can't read configurations, error -61 [ 560.261796][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.275301][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 560.321839][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.371800][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.387356][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 560.401735][ T5] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 560.409314][T21671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 560.422324][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.434794][T21671] hfsplus: unable to parse mount options 21:33:10 executing program 5 (fault-call:3 fault-nth:12): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 560.532212][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.566721][T21677] FAULT_INJECTION: forcing a failure. [ 560.566721][T21677] name failslab, interval 1, probability 0, space 0, times 0 [ 560.591782][T21677] CPU: 0 PID: 21677 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 560.600559][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.610601][T21677] Call Trace: [ 560.613948][T21677] dump_stack+0x10f/0x19d [ 560.618311][T21677] should_fail+0x23c/0x250 [ 560.622724][T21677] __should_failslab+0x81/0x90 [ 560.627549][T21677] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 560.633258][T21677] should_failslab+0x5/0x20 [ 560.637786][T21677] __kmalloc+0x43/0x2d0 [ 560.641936][T21677] tomoyo_realpath_from_path+0x98/0x3c0 [ 560.647485][T21677] tomoyo_path_number_perm+0xc1/0x2d0 [ 560.652922][T21677] ? putname+0xa5/0xc0 [ 560.656985][T21677] ? __rcu_read_unlock+0x4b/0x260 [ 560.662004][T21677] tomoyo_file_ioctl+0x1c/0x20 [ 560.666849][T21677] security_file_ioctl+0x45/0x90 [ 560.671788][T21677] __se_sys_ioctl+0x48/0x130 [ 560.676385][T21677] __x64_sys_ioctl+0x3f/0x50 [ 560.680969][T21677] do_syscall_64+0x51/0xb0 [ 560.685399][T21677] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 560.691296][T21677] RIP: 0033:0x45c9f7 [ 560.695177][T21677] Code: Bad RIP value. [ 560.699232][T21677] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.708016][T21677] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 560.716149][T21677] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 560.724220][T21677] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 560.732205][T21677] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 21:33:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) kexec_load(0x2, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="da6e5605fad62108cce8b27d30194f30e5c63693ad386a37288dd1837cea28413203675f904ca00cb2cfb42d28a3fcf47e0366e8ad22c3d94e6c50c378c44ee3785f", 0x42, 0x4, 0xc8}, {&(0x7f00000001c0)="8c94684eae4d777cf902144063b02ce7867c291773665bd137a276e907b7d786459eeb20e29be3bd778249403dad161ca5ffa35f0e07daed0ed1207457f0a3220f9e6732d8c28d862928b9705dc8abe0ba1b7ca2b863d3a63d613f95e1ada1527679eb977d9c9910016a20c19294c554438cd1dbd38b186649ca8cc1", 0x7c, 0xff}], 0x280000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffffffff00000) bind$netrom(r3, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xb3754e5fb79142a0}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="532827b9", @ANYRES16=r4, @ANYBLOB="000325bd7000fddbdf25030000000c00040005000000000000000c00060003000000000000000c0006000300000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc055}, 0x4004800) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 560.740209][T21677] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 560.791720][ T9918] usb 5-1: unable to read config index 5 descriptor/all [ 560.791768][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 560.811807][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 560.824606][ T9918] usb 5-1: can't read configurations, error -71 [ 560.837782][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 560.858392][ T48] usb 3-1: Product: syz [ 560.862055][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 560.870774][ T48] usb 3-1: Manufacturer: syz [ 560.884017][ T48] usb 3-1: config 0 descriptor?? 21:33:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x2200) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@multicast]}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'wg2\x00', @ifru_settings={0x6, 0x8000, @fr_pvc_info=&(0x7f00000001c0)={0x0, 'macvlan1\x00'}}}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x460, 0x240, 0x3c8, 0x0, 0x240, 0x1a8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xa}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xda, 0xfb}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@ip={@local, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x11, 0x2, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x23, 0xa4, 0x1}}}, {{@ip={@multicast1, @broadcast, 0xff, 0x0, 'netpci0\x00', 'rose0\x00', {}, {0xff}, 0x5c, 0x2, 0x28}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @empty, 0x0, 0xff, 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x34df6eb5b845074c, 0x0, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}, @common=@inet=@dccp={{0x30, 'dccp\x00'}, {[0x4e23, 0x4e24], [0x4e20, 0x4e21], 0x2, 0x8, 0x7, 0x6e}}]}, @TTL={0x28, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000000c0)={0x1, [0x0]}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{@none}, {@none}]}) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x4c) [ 560.931759][ T48] usb 3-1: can't set config #0, error -71 [ 560.947564][ T48] usb 3-1: USB disconnect, device number 117 [ 560.982021][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 561.025741][ T5] usb 2-1: can't read configurations, error -61 [ 561.055071][ T5] usb usb2-port1: attempt power cycle [ 561.061742][T21700] x_tables: duplicate underflow at hook 1 [ 561.178433][T21677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.197863][T21677] hfsplus: unable to parse mount options [ 561.231688][ T9918] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 561.371664][ T48] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 561.501657][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 561.551826][ T9918] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 561.631651][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 561.652055][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.663026][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.673809][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 561.782164][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.791616][ T5] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 561.793741][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.811624][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.821341][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 21:33:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:33:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000340)=0x7ff) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/timer\x00', 0xcab4e74eee7caa8b) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) read(r2, &(0x7f00000000c0)=""/169, 0xa9) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="05001000010000007fd289de4f0dd260425c5836604cfa26b4541caeee40ffa2c9d34eacc46db032c974f984ba478155bc059393d03cc6801e09537d0860a23cc46fe7edc449a8f65ab5c5e2ba69b29e95a0e0b75e9e1f24ffad91a6700302edcfbc5fbde34d9b29236307c8e70ba78032a3e27f00eced21e6dd07936aba0b3b3614fd"], 0x88, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) 21:33:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000008c0)={[0xff0, 0x4, 0x8, 0x7, 0x5, 0x7f, 0xfffffffd, 0x1, 0x10001, 0x8, 0x55f, 0xef, 0x17, 0x2, 0x3, 0x7, 0x9, 0x8, 0x800, 0x3, 0x7, 0x9, 0x9, 0x7fffffff, 0x7, 0x9, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x1f47, 0xfffffffc, 0x80, 0x2, 0x100, 0xffffffff, 0xc996, 0xfff, 0x2, 0xa3c, 0x4, 0xffffffff, 0xffffff01, 0x7fffffff, 0x7b, 0x3ff, 0x80000000, 0x35, 0x9, 0x0, 0x101, 0x8, 0x5, 0x7, 0x4, 0x2, 0x60381c4, 0x9, 0x8, 0x695, 0x83e4, 0x0, 0x4, 0x401, 0x4, 0x7, 0x1f, 0x0, 0x8, 0x10000, 0x40, 0xfffffffa, 0x4, 0x2, 0x10001, 0x6, 0x2, 0x1, 0x342f0fa6, 0x9, 0x55, 0x84, 0xfff, 0x3, 0x29c, 0x4, 0x1ff, 0x9, 0x4, 0x4, 0xfa, 0x2, 0x400, 0x2, 0x90000, 0xb35, 0x363e, 0x2, 0x3, 0x9, 0x4, 0x9, 0x785, 0x5, 0x200, 0x80, 0x0, 0x1, 0x10000, 0x8, 0x3cc, 0x81, 0x0, 0xe3, 0x10000, 0x67, 0x80000001, 0x7, 0x271, 0x101, 0x9f, 0x8, 0x1, 0x0, 0x6, 0x5, 0x4f, 0x7f84, 0xa7, 0x3, 0x5, 0x94, 0x7, 0x1, 0x101, 0x367, 0x200, 0x2507, 0xfff, 0xffff0001, 0xcb44, 0x400, 0x7fff, 0x6, 0x1, 0x5305, 0x6, 0x8, 0x20, 0x9, 0x6, 0x4, 0x7ff, 0xb7, 0x4, 0x2, 0x9, 0x686, 0x3, 0xdcec, 0x9, 0x8, 0x80, 0x7, 0x1, 0xffffffff, 0x2, 0x0, 0x1, 0xc6, 0x6, 0x0, 0x7, 0x1, 0x2, 0x3, 0x20, 0x1, 0x76, 0x5, 0x9, 0x0, 0x7f, 0x0, 0xff, 0x7, 0x80000000, 0x101, 0xaf, 0x69a4, 0x7fff, 0x81, 0x8, 0x0, 0x840, 0x400, 0x1, 0xffffffff, 0x3, 0x5, 0x8, 0x3, 0x400, 0x47, 0xffffffff, 0x0, 0x9, 0x8, 0x1, 0x2, 0x7fff, 0x7fffffff, 0x0, 0x100, 0x100, 0x6, 0x20, 0x7, 0x200, 0xffff, 0xf6f, 0x1, 0x81, 0x9, 0x8, 0x2, 0x18d5a1c9, 0x2, 0x401, 0x0, 0x1, 0x1, 0x0, 0xffff0fd4, 0x6, 0x1f, 0x7, 0x3f, 0x2, 0x4, 0x3, 0x1ff, 0x6, 0xf3c6, 0xffffffff, 0x9, 0x10001, 0x9, 0x8, 0x479, 0x20, 0x3, 0x95, 0x5, 0x101, 0x7, 0x9, 0xf7, 0x7fffffff, 0xffffffff, 0x2, 0x3ff, 0x100, 0xb7ec, 0x1, 0xa2, 0x3f, 0x2, 0x8, 0x1, 0x2, 0xffff7fff, 0x0, 0x1000, 0x0, 0x2, 0x7, 0xf2cb, 0x6, 0xff, 0x1, 0x2, 0xbb2, 0x9, 0x0, 0xffffff7f, 0x5, 0xde, 0x8, 0x0, 0x8, 0x3, 0x8001, 0xffffffc3, 0x10001, 0x2, 0x0, 0x7162baed, 0x1, 0x6, 0x8, 0xe1fa, 0xffff, 0x4, 0x6, 0x5, 0x176a, 0x400, 0x1, 0xfffff800, 0x7, 0x7, 0x7ff, 0x3, 0x400, 0x8, 0xfffffff9, 0x3, 0xbe56, 0x8000, 0x4, 0x7, 0x63260f77, 0x0, 0x1, 0x9, 0x401, 0xffff8001, 0x1, 0x6, 0x101, 0xfffffc00, 0x6f, 0x400, 0x3, 0x8000, 0x0, 0xb8, 0x0, 0x81, 0x6a, 0x401, 0x6, 0x25d, 0x2, 0x8000, 0x7, 0x6, 0x8, 0x40, 0x200, 0x6, 0x2, 0x453, 0x5, 0x1, 0x80000000, 0x3, 0x4, 0x3, 0x83, 0x0, 0x1ff, 0x81, 0x80000001, 0x0, 0x2, 0xfe000000, 0x7b1, 0x3f, 0x7fffffff, 0x3ff, 0xff, 0xffffffff, 0x401, 0xc64, 0x7fffffff, 0x94, 0x30000, 0xfffffff7, 0x2, 0x2, 0x2ae, 0x1f, 0x7fff, 0x401, 0x0, 0x6a31, 0x7fffffff, 0x1f, 0x1, 0x2, 0x8, 0x2, 0x1, 0x8001, 0x1, 0x3ff, 0xff, 0x2, 0x2, 0x6, 0x1, 0x1, 0x40, 0x3, 0x3a953442, 0x100, 0x200, 0x9a, 0x6, 0x1, 0x2b7aa1c8, 0x3, 0x401, 0x2, 0x80000001, 0x3, 0x0, 0x7, 0x9, 0x1, 0x9, 0x7ff, 0x4, 0x1, 0x6db, 0x81, 0x2, 0x1, 0x0, 0x8, 0x7, 0x19d, 0x4, 0x10000, 0x7, 0x6, 0x6, 0x2, 0x892, 0x800, 0x40, 0x1, 0x4, 0x9, 0x3, 0x303, 0x4, 0x3, 0x800, 0x6, 0x7, 0x3f, 0x2, 0x8, 0x4, 0x4, 0x0, 0x80000000, 0x10000, 0x401, 0x1f, 0x80000001, 0x6, 0x845, 0x1f, 0x1, 0xfffffffe, 0x10001, 0x318, 0x8, 0x3, 0xff, 0x0, 0x7, 0x6, 0x400, 0xfffffff7, 0x8, 0x4, 0xc60, 0x800, 0x3ff, 0x1, 0x4, 0x3, 0x9, 0x4c, 0x89ea, 0x3, 0xfffffffb, 0x3f, 0xff, 0xffff, 0x6, 0x4, 0xfffffe43, 0x0, 0xfffffffa, 0x5, 0x5, 0x1, 0x1, 0x1, 0x8, 0x0, 0x5, 0x2, 0x4, 0xfffffffb, 0x4, 0x4, 0x7fffffff, 0x3, 0x3, 0x8000, 0x2, 0x9, 0x4, 0x2, 0xffffffff, 0x100, 0x3, 0x1, 0xcda, 0x80, 0xffffffc1, 0x4a6, 0x3f, 0x80, 0x5, 0x5, 0x2, 0x10001, 0x9, 0xff, 0x2, 0x6, 0x7, 0xc000, 0xfffffffa, 0x5, 0x576, 0x3, 0x4, 0x8d, 0x4, 0x7, 0x8001, 0x6, 0x3, 0x8000, 0x5, 0x8, 0x1, 0x1, 0x2, 0x2, 0x0, 0xbbac, 0x6a, 0x4, 0x401, 0x53d985bb, 0x20, 0x101, 0x423d, 0x80000000, 0x9, 0x8, 0xffff9044, 0x0, 0x4, 0xdc82, 0x6, 0x3, 0x674, 0xf79, 0x0, 0xd76, 0xffff7fff, 0x4, 0x8, 0x9, 0xfaa6, 0x401, 0x1, 0x3, 0x1, 0x8b7, 0x5d, 0xcd5, 0x0, 0x7, 0x5, 0x7ff, 0xfff, 0x20, 0xae800000, 0x5, 0xffff, 0x4, 0x401, 0x3, 0x96c, 0x91, 0x9, 0x3f, 0x7, 0x5, 0x5, 0x9, 0x57, 0x7fffffff, 0x4, 0xfffff801, 0x40, 0xff, 0x7, 0xd0fd, 0x9, 0x1f, 0x0, 0x67, 0x80, 0xfffffffb, 0xffffffff, 0x8, 0x8, 0xfffffffe, 0x8000, 0x7, 0x67d642ca, 0x2700000, 0x7289, 0x0, 0x7, 0x1000, 0x4, 0x6, 0x9703, 0x5, 0x10001, 0x4, 0x800, 0x4, 0x4, 0x9, 0x8, 0x1, 0xffffffff, 0xe8e, 0x64e, 0x7add, 0x8, 0xffff33ff, 0x3, 0x8, 0x7f, 0x1000, 0x7, 0x14, 0xfffffff9, 0x80, 0x10000, 0x3da, 0x0, 0x9, 0x600000, 0x3, 0xfffffffc, 0x40, 0xffffffff, 0x80, 0x6, 0x8, 0x3, 0xa2, 0x3, 0x401, 0x7f, 0x0, 0x2, 0x7f, 0x1000, 0x0, 0x1000, 0x4, 0x1000000, 0x6, 0x0, 0x9, 0x1, 0x1, 0x10001, 0x5, 0x80000000, 0x0, 0x20000, 0x1, 0x20b, 0x101, 0x0, 0x81, 0x9, 0x7, 0x1, 0x1, 0xffff, 0x2, 0x4, 0x10000, 0xa9b, 0x3f, 0x7f, 0x7, 0x6, 0x1, 0x0, 0x2, 0x5, 0x3, 0x0, 0x9, 0x4, 0x58d7d474, 0x6, 0x20, 0x4, 0x4, 0x1, 0x200, 0x7, 0x76, 0x1, 0x7, 0x0, 0x800, 0xaf, 0xcdb9369, 0x1d, 0x2, 0xe6e, 0x3ff, 0x7fffffff, 0x7, 0x2, 0x9, 0x4, 0x9, 0x8, 0x3, 0xfffffff8, 0x80, 0x1ff, 0x100, 0x4fb4, 0x200000, 0x33, 0x31, 0x2, 0x1f, 0x380, 0xffffff7c, 0x5, 0x400, 0x5, 0x7fffffff, 0x6, 0x0, 0x7fff, 0xa5, 0x3, 0x0, 0x80, 0x100, 0x3ff, 0xfffffffe, 0x7ff, 0x4, 0x2, 0x3, 0x305a, 0x9c81, 0x10001, 0x800, 0x0, 0x1, 0x81, 0x7, 0xffff, 0xffffff82, 0x9, 0x1, 0x2, 0x1, 0x598, 0xa4, 0x6, 0x1, 0x7f, 0x4, 0x0, 0x2, 0x1, 0xfffffffe, 0xffff, 0x3, 0x9, 0x7ff, 0x6, 0x0, 0x76, 0xffff, 0x5, 0x6, 0x200, 0xf8, 0xff, 0x5, 0x9, 0x9, 0xffff, 0x3, 0x1, 0xcc59, 0xff, 0xe5, 0x800, 0x667, 0x0, 0x3f, 0x9, 0x2, 0x2, 0x3ff, 0x5, 0x100, 0x6, 0xa5b6, 0x401, 0x6, 0x1679, 0x8001, 0x5, 0x1f, 0x40, 0x6, 0x100, 0x5, 0x1000, 0x8001, 0x900, 0x2, 0x400, 0x4, 0x8, 0x1, 0x9, 0x4, 0x22, 0x39833e6e, 0x1, 0x40, 0x0, 0x2, 0x80000001, 0x5, 0x30000000, 0x1, 0x5, 0x14000000, 0x20, 0x0, 0x7, 0x7, 0x3d, 0xf0, 0x2, 0x400, 0x9, 0x4f20, 0xba, 0x2912, 0x40, 0x7, 0xac, 0xe38, 0x72, 0xa86, 0x1, 0x9, 0x5, 0x3, 0x80000000, 0x7ff, 0x7fffffff, 0x1, 0xff, 0x8, 0x8, 0xc94, 0x101, 0xffffffff, 0x3077, 0x18, 0x62ba, 0x9, 0x8, 0x80000000, 0x7, 0xfff, 0x8b, 0x5, 0xfffffffe, 0x6, 0x1, 0x81f, 0x1, 0x80000000, 0x200, 0x2, 0x9, 0x800, 0x7, 0x7, 0xc09, 0x5, 0x7f23b8cf, 0x1, 0xc00, 0x2cf, 0x5, 0x8, 0x7ff, 0x1, 0x1c000, 0x9, 0x7, 0xfffffbc3, 0x7fff, 0x3ff, 0x8, 0xffffffff, 0x400, 0x368, 0x10001, 0x5, 0x9, 0x1, 0x1, 0x5, 0x1b9, 0x3ff, 0x6, 0x5, 0x7ff, 0xd1c7, 0x8, 0xff, 0x1, 0xc79, 0x0, 0x19, 0x8000, 0x400, 0x1f, 0x6, 0x80000000, 0x3, 0xffffffff, 0x1, 0x3, 0xf64b, 0x3, 0x2, 0x6, 0x1e, 0x8, 0x1, 0x4671, 0x7425b12a, 0xfffffffe, 0x8001, 0x401, 0x3f, 0xff, 0x5, 0xffffffff, 0x401, 0x2c8e, 0x8ac4, 0x9, 0x20, 0x84, 0x3, 0xffffff00, 0x3, 0x80000000, 0x0, 0x8, 0x81, 0x7, 0x1c000000, 0x0, 0x1, 0x80000001, 0x7, 0x467e, 0x7, 0x6, 0x40, 0x8, 0x3, 0x3ff, 0x1, 0x9, 0x101, 0x9, 0x2, 0x40, 0x7, 0x1]}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'batadv0\x00', 0x5}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:11 executing program 5 (fault-call:3 fault-nth:13): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 561.912008][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.921629][ T5] usb 2-1: device descriptor read/8, error -71 [ 561.923658][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.934680][T21728] FAULT_INJECTION: forcing a failure. [ 561.934680][T21728] name failslab, interval 1, probability 0, space 0, times 0 [ 561.951808][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:33:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x805, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r5}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x6, 0xfff8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e22, 0xfffffa91, @empty, 0x8}}}, 0x84) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 561.966591][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.994511][T21728] CPU: 0 PID: 21728 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 562.003207][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.013311][T21728] Call Trace: [ 562.016605][T21728] dump_stack+0x10f/0x19d [ 562.020922][T21728] should_fail+0x23c/0x250 [ 562.025328][T21728] __should_failslab+0x81/0x90 [ 562.030077][T21728] ? tomoyo_encode2+0x1e2/0x350 [ 562.034914][T21728] should_failslab+0x5/0x20 [ 562.039402][T21728] __kmalloc+0x43/0x2d0 [ 562.043551][T21728] tomoyo_encode2+0x1e2/0x350 [ 562.052245][T21728] tomoyo_realpath_from_path+0x36e/0x3c0 [ 562.057922][T21728] tomoyo_path_number_perm+0xc1/0x2d0 [ 562.063294][T21728] ? putname+0xa5/0xc0 [ 562.067534][T21728] ? __rcu_read_unlock+0x4b/0x260 [ 562.072629][T21728] tomoyo_file_ioctl+0x1c/0x20 [ 562.077454][T21728] security_file_ioctl+0x45/0x90 [ 562.082388][T21728] __se_sys_ioctl+0x48/0x130 [ 562.087234][T21728] __x64_sys_ioctl+0x3f/0x50 [ 562.091855][T21728] do_syscall_64+0x51/0xb0 [ 562.096281][T21728] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 562.102162][T21728] RIP: 0033:0x45c9f7 [ 562.106031][T21728] Code: Bad RIP value. [ 562.110108][T21728] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.118683][T21728] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 562.126908][T21728] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 562.135596][T21728] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 562.143555][T21728] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 562.151574][T21728] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x189440, 0x0) lseek(r1, 0x9, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 562.165998][T21728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 562.176575][T21728] hfsplus: unable to parse mount options [ 562.213735][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.225473][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.241921][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.251601][ T5] usb 2-1: device descriptor read/8, error -71 [ 562.260502][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.341629][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.352675][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.363486][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.373767][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.451608][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.463194][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.473283][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.483476][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.571838][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.582835][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.593035][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.603686][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.711857][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.722763][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.732830][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.741516][ T5] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 562.743243][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.841625][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.852010][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.861669][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 562.901824][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 562.941600][ T9918] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 562.950825][ T9918] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 562.959511][ T9918] usb 5-1: Product: syz [ 562.963951][ T9918] usb 5-1: Manufacturer: syz [ 562.968550][ T9918] usb 5-1: SerialNumber: syz [ 562.974188][ T9918] usb 5-1: config 0 descriptor?? [ 563.021553][ T5] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 563.024164][ T9918] hub 5-1:0.0: USB hub found [ 563.029146][ T5] usb 2-1: can't read configurations, error -61 [ 563.043159][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 563.051598][ T5] usb usb2-port1: unable to enumerate USB device [ 563.055830][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 563.067400][ T48] usb 3-1: Product: syz [ 563.071808][ T48] usb 3-1: Manufacturer: syz [ 563.076407][ T48] usb 3-1: SerialNumber: syz [ 563.085526][ T48] usb 3-1: config 0 descriptor?? [ 563.301960][ T9918] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 563.382018][ T9918] usb 5-1: USB disconnect, device number 54 21:33:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 564.031480][ T5] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 564.271405][ T5] usb 5-1: Using ep0 maxpacket: 32 21:33:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$phonet_pipe(r2, &(0x7f0000000000), &(0x7f0000000080)=0x10) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:13 executing program 5 (fault-call:3 fault-nth:14): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 564.311815][ T5] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 564.345540][ T12] usb 3-1: USB disconnect, device number 118 [ 564.391751][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.404817][T21777] FAULT_INJECTION: forcing a failure. [ 564.404817][T21777] name failslab, interval 1, probability 0, space 0, times 0 [ 564.417646][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.428375][T21777] CPU: 0 PID: 21777 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 564.437050][T21777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.447102][T21777] Call Trace: [ 564.450567][T21777] dump_stack+0x10f/0x19d [ 564.455007][T21777] should_fail+0x23c/0x250 [ 564.459429][T21777] ? loop_set_status_from_info+0x3a0/0x3a0 [ 564.465227][T21777] __should_failslab+0x81/0x90 [ 564.469987][T21777] should_failslab+0x5/0x20 [ 564.474478][T21777] kmem_cache_alloc_trace+0x32/0x2c0 [ 564.479874][T21777] ? __kthread_create_on_node+0x7a/0x270 [ 564.485491][T21777] ? loop_set_status_from_info+0x3a0/0x3a0 [ 564.491276][T21777] __kthread_create_on_node+0x7a/0x270 [ 564.497145][T21777] ? kobject_put+0x107/0x170 [ 564.501792][T21777] ? loop_set_status_from_info+0x3a0/0x3a0 [ 564.507618][T21777] kthread_create_on_node+0x72/0xa0 [ 564.512791][T21777] ? loop_attr_do_show_dio+0x70/0x70 [ 564.518138][T21777] loop_configure+0x5d5/0xbe0 [ 564.522979][T21777] lo_ioctl+0x554/0x1190 [ 564.527215][T21777] ? debug_smp_processor_id+0x18/0x20 [ 564.532570][T21777] ? blkdev_common_ioctl+0xaae/0x10b0 [ 564.537920][T21777] ? lo_release+0x130/0x130 [ 564.542403][T21777] blkdev_ioctl+0x1b2/0x3f0 [ 564.546896][T21777] block_ioctl+0x6d/0x80 [ 564.551173][T21777] ? blkdev_iopoll+0x80/0x80 [ 564.555850][T21777] __se_sys_ioctl+0xc9/0x130 [ 564.560423][T21777] __x64_sys_ioctl+0x3f/0x50 [ 564.565102][T21777] do_syscall_64+0x51/0xb0 [ 564.569538][T21777] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 564.575415][T21777] RIP: 0033:0x45c9f7 [ 564.579301][T21777] Code: Bad RIP value. [ 564.583609][T21777] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:33:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x0, 0x100, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x7, {0xffe}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @rand_addr=0x64010100, @private=0xa010102, 0x4, 0x1}}}, {{@arp={@empty, @multicast1, 0xffffff00, 0xff, 0x2, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x5, 0x8000, 0x1, 0x8001, 0xfffa, 0x0, 'ipvlan1\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x348}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x430) [ 564.592094][T21777] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 564.600354][T21777] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 564.608309][T21777] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 564.616283][T21777] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 564.624337][T21777] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 564.711880][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.731364][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.812856][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.823782][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:33:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) 21:33:14 executing program 5 (fault-call:3 fault-nth:15): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x3f, 0x8000) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 564.906285][T21792] FAULT_INJECTION: forcing a failure. [ 564.906285][T21792] name failslab, interval 1, probability 0, space 0, times 0 [ 564.919081][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.920529][T21796] mmap: syz-executor.3 (21796) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 564.930123][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.953565][ T12] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 564.961452][T21792] CPU: 0 PID: 21792 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 564.970108][T21792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.980150][T21792] Call Trace: [ 564.983434][T21792] dump_stack+0x10f/0x19d [ 564.987751][T21792] should_fail+0x23c/0x250 [ 564.992158][T21792] __should_failslab+0x81/0x90 [ 564.997953][T21792] should_failslab+0x5/0x20 21:33:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x200200, 0x0) getsockname$inet(r1, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x81}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0x5}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 565.002442][T21792] kmem_cache_alloc+0x29/0x2b0 [ 565.007195][T21792] ? __kernfs_new_node+0x6a/0x340 [ 565.012213][T21792] __kernfs_new_node+0x6a/0x340 [ 565.017067][T21792] ? update_load_avg+0x1ad/0x2d0 [ 565.022110][T21792] kernfs_create_dir_ns+0x5e/0x140 [ 565.027541][T21792] internal_create_group+0x12f/0x890 [ 565.032845][T21792] ? check_preempt_wakeup+0x1cb/0x370 [ 565.038354][T21792] sysfs_create_group+0x1b/0x20 [ 565.043208][T21792] loop_configure+0x9e7/0xbe0 [ 565.048012][T21792] lo_ioctl+0x554/0x1190 [ 565.052394][T21792] ? debug_smp_processor_id+0x18/0x20 [ 565.057829][T21792] ? blkdev_common_ioctl+0xaae/0x10b0 [ 565.063261][T21792] ? lo_release+0x130/0x130 [ 565.067737][T21792] blkdev_ioctl+0x1b2/0x3f0 [ 565.072222][T21792] block_ioctl+0x6d/0x80 [ 565.076507][T21792] ? blkdev_iopoll+0x80/0x80 [ 565.081070][T21792] __se_sys_ioctl+0xc9/0x130 [ 565.085632][T21792] __x64_sys_ioctl+0x3f/0x50 [ 565.090194][T21792] do_syscall_64+0x51/0xb0 [ 565.094612][T21792] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 565.100486][T21792] RIP: 0033:0x45c9f7 [ 565.104346][T21792] Code: Bad RIP value. [ 565.108404][T21792] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.116784][T21792] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 565.124778][T21792] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 565.132722][T21792] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 565.141362][T21792] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 565.149414][T21792] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:14 executing program 3: r0 = msgget(0x1, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000640)="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", 0x250, 0x40040, 0x0, 0x0) [ 565.160567][T21792] hfsplus: unable to parse mount options 21:33:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x20, 0x4, 0x8}, 0x4}}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4a31, @loopback}, 0x10) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r2, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 565.231756][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.246868][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.342488][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.353490][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.401284][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 565.441637][ T12] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 565.452579][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.463958][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.501302][ T9937] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 565.521352][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.531616][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.551305][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.562365][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.611692][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.623046][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.712073][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.722231][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.741697][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 565.750921][ T5] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 565.759841][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 565.765078][ T5] usb 5-1: Product: syz [ 565.769370][ T5] usb 5-1: Manufacturer: syz [ 565.774722][ T5] usb 5-1: SerialNumber: syz [ 565.784375][ T5] usb 5-1: config 0 descriptor?? [ 565.802720][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 565.810520][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.823589][ T5] hub 5-1:0.0: USB hub found [ 565.828221][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.911480][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.922184][ T9937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 565.929887][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.939830][ T9937] usb 2-1: can't read configurations, error -61 [ 566.021630][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.032122][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 566.081276][ T5] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 566.094282][ T9937] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 566.121247][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.132103][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 566.162189][ T5] usb 5-1: USB disconnect, device number 55 [ 566.211368][ T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.221632][ T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 566.341236][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 566.381823][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 566.392192][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 566.401425][ T12] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 566.410251][ T12] usb 3-1: Product: syz [ 566.414605][ T12] usb 3-1: Manufacturer: syz [ 566.419182][ T12] usb 3-1: SerialNumber: syz [ 566.426381][ T12] usb 3-1: config 0 descriptor?? 21:33:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 566.501251][ T9937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 566.508884][ T9937] usb 2-1: can't read configurations, error -61 [ 566.515483][ T9937] usb usb2-port1: attempt power cycle [ 566.821205][ T48] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 567.081415][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 567.131654][ T48] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 567.211440][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.221159][ T9937] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 567.223039][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.312640][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 567.331693][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.342640][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.351539][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 567.441462][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.452474][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.471131][ T9937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 567.479410][ T9937] usb 2-1: can't read configurations, error -61 [ 567.571178][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.582191][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.631075][ T9937] usb 2-1: new high-speed USB device number 98 using dummy_hcd 21:33:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:17 executing program 5 (fault-call:3 fault-nth:16): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x39c, 0x14, 0x4, 0x70bd27, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x48, 0x0, 0x0, @u32=0x4}, @nested={0x12a, 0x83, 0x0, 0x1, [@typed={0x14, 0x91, 0x0, 0x0, @ipv6=@local}, @generic="f12ac52c75b4126266055bed86e1ed1bedb2674723e3f67b17c4f924651ab7330ed54f2e83670c93510478917eab3d5df74aa47ee37846c1063a5f2c10c7afc9a44e0c199b45f452613e77874c1584556671c640f668fbf46b4d6c132b895919bf2ded52888e9e61565308011a49fb0db8b4ee18e35314c102147ee2fec6b8af99b0b24b741dc45b9b424415b0969363ed91cf0927d28ab5e295559e3cb96ff1aa66e72321b5d6d14f93ab7acf8a17f57696", @typed={0xc, 0x64, 0x0, 0x0, @u64=0x6622}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x7ff}, @generic="bafd24f7019f2bc38a2d9a205f589e409bcf67d5042ea4dc271ce6ca76310458e89171342f47498ba405a465e7c9c179d37cac32", @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="31375e6cfd5470a8ad4af4a14b2984dc28f3346106b0153ea05b65c3914f0e6496", @nested={0x230, 0x8c, 0x0, 0x1, [@generic="36f01025a48f984b501ebd2511890a13a3e310790f89408dc213d82f082bcfaca12239acab0c282390ddffa719fd7218e19f5df3715ddf7b7eed93cddf24abd9b1751238ec5d98e38420e37ec90f4f0848f8b5f2414f25b07af25ceebf59131b17ff9f0858c5726d0855c53a0cfe1125528f3ea56f59e1d50ff6476abc9557c51816fff34bdcb60a70b58a5c0604eec4f64df2bf01f1edc6f1fb38e1bdd18bab67ee4cd8b423bf87a59311a157e8af2eac1c94b89d98aaac815bfb109ddb67c972225f87505320c06627b396c43b0b2f34052765110d3fdd24bc2b65ff", @typed={0x8, 0x6a, 0x0, 0x0, @uid=r5}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @typed={0xc, 0x93, 0x0, 0x0, @u64=0x7}, @generic="e7a059c8b85b621b2264963ca24b74a1b3a731e988fdee69099bdafbea03a241d723207362c3a1590f8690c6a8dddfbabc905802c72d37710109629a04ac", @generic="c600346c73df5b941824641f671836012b0f23432cff487bb40e344a3a7f0d13f082f74837d14edf3a01a499ed00fa7e6c86db941c20644a0ff1bc6b59438bc318396c99ef069e2d1a80e5514670a1266b44193c18fa9464fe5dc175ea7519bd13e412080ae5d5db61b168873b465a1439bbfc3f03de42d057ccbea791eb7ab2ab8dab632de52ea5334acd2763818754a3d22436714137e56e7a1a8fe014a3d28bdb793f6faf4acc011fcbea27686dd3051768552638210b26c4c091de30b30b654bb05d021274dfed3522fdd9d91edfb8656d83a723f2c26968301f735d7f10caf1618fce50ce07b3"]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x20054}, 0x4000) [ 567.681561][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.683989][ T5] usb 3-1: USB disconnect, device number 119 [ 567.721107][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 567.728071][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.749758][T21843] FAULT_INJECTION: forcing a failure. [ 567.749758][T21843] name failslab, interval 1, probability 0, space 0, times 0 [ 567.763616][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 567.797249][T21843] CPU: 0 PID: 21843 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 567.805937][T21843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.815975][T21843] Call Trace: [ 567.819248][T21843] dump_stack+0x10f/0x19d [ 567.823564][T21843] should_fail+0x23c/0x250 [ 567.827963][T21843] __should_failslab+0x81/0x90 [ 567.832711][T21843] should_failslab+0x5/0x20 [ 567.837198][T21843] kmem_cache_alloc+0x29/0x2b0 [ 567.841948][T21843] ? __kernfs_new_node+0x6a/0x340 21:33:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @private=0xa010101}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 567.846957][T21843] __kernfs_new_node+0x6a/0x340 [ 567.851789][T21843] ? idr_alloc_cyclic+0x243/0x2d0 [ 567.856799][T21843] ? rb_insert_color+0x7e/0x310 [ 567.861654][T21843] kernfs_new_node+0x5b/0xd0 [ 567.866233][T21843] __kernfs_create_file+0x45/0x1a0 [ 567.871336][T21843] sysfs_add_file_mode_ns+0x1c1/0x250 [ 567.876693][T21843] internal_create_group+0x2f4/0x890 [ 567.882142][T21843] sysfs_create_group+0x1b/0x20 [ 567.887029][T21843] loop_configure+0x9e7/0xbe0 [ 567.891709][T21843] lo_ioctl+0x554/0x1190 21:33:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09"], 0x0) [ 567.895940][T21843] ? debug_smp_processor_id+0x18/0x20 [ 567.901339][T21843] ? blkdev_common_ioctl+0xaae/0x10b0 [ 567.906720][T21843] ? lo_release+0x130/0x130 [ 567.911192][T21843] blkdev_ioctl+0x1b2/0x3f0 [ 567.915675][T21843] block_ioctl+0x6d/0x80 [ 567.919923][T21843] ? blkdev_iopoll+0x80/0x80 [ 567.924502][T21843] __se_sys_ioctl+0xc9/0x130 [ 567.929256][T21843] __x64_sys_ioctl+0x3f/0x50 [ 567.933869][T21843] do_syscall_64+0x51/0xb0 [ 567.938345][T21843] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 567.944217][T21843] RIP: 0033:0x45c9f7 [ 567.948228][T21843] Code: Bad RIP value. [ 567.952263][T21843] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.960640][T21843] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 567.968586][T21843] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 567.977206][T21843] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 567.985756][T21843] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 567.993697][T21843] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 568.011299][T21843] hfsplus: unable to parse mount options 21:33:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x458, 0x3f3, 0x8, 0x70bd2c, 0x25dfdbfc, {0x4, 0x0, 0x9, [0x1acb, 0x7fa, 0x5, 0x82, 0x800, 0x2, 0x5, 0x97, 0x9, 0x3, 0x8001, 0x85d, 0x20, 0x2, 0xc2, 0x6, 0xe1, 0x1ff, 0x401, 0x800, 0x81, 0x4, 0x8001, 0x7, 0xdca, 0x6, 0xfffff001, 0x3, 0x3, 0x80000000, 0x80000001, 0x1, 0x80, 0x200, 0x1000, 0x8, 0x8, 0x3, 0x8, 0x2, 0x3, 0x68, 0x0, 0x2, 0x7, 0x23e, 0x5, 0x7, 0x5, 0x10001, 0x44, 0x9, 0x7, 0x1ff, 0x3, 0x4, 0x60000000, 0xfffff000, 0x3, 0x4, 0x5, 0x3, 0x1f, 0x2], [0x4, 0x3f, 0xffffc7b5, 0x3c240000, 0x75800000, 0x200, 0x67a, 0x8, 0x4, 0xfffffffc, 0xfffffff9, 0x1, 0x8, 0xa00000, 0x0, 0x3f, 0x7, 0x9, 0x0, 0x5, 0x8, 0x4, 0x800, 0x1f, 0x3, 0xb42e, 0x91c, 0x1ff, 0x7f, 0x5, 0x3, 0x7fffffff, 0x57f, 0x7fff, 0x1, 0x8001, 0x3, 0xffff274e, 0x50d, 0x11e, 0xfff, 0x81, 0x96b5, 0x61, 0x9, 0x8, 0x1, 0x3f, 0x3, 0x4, 0x401, 0x7ff, 0x401, 0x7, 0x4, 0x2, 0x0, 0xfff, 0xf, 0xb3b, 0x2, 0x80000001, 0xfffffffe, 0x80000000], [0xfff, 0x7, 0x800, 0x6, 0x5, 0x4070, 0x9, 0x1ff, 0x7, 0x2, 0x7f, 0x1, 0x7, 0x1, 0x8, 0x1, 0x2, 0x7ff, 0x401, 0x7fffffff, 0xb30, 0x1, 0x100, 0x6ab, 0xffff8001, 0xffffff01, 0x2d50, 0x8, 0xfffffc00, 0x9, 0xf96, 0xffffffff, 0x2518, 0x7ff, 0x80, 0x81, 0x1, 0x3, 0xff, 0x5, 0x1, 0x80000000, 0x81, 0x7, 0xffff, 0x1, 0x9, 0x10000, 0x3, 0x7, 0x4, 0x443, 0x1236c00, 0x80, 0x7f, 0x0, 0xc8, 0x1, 0x3f, 0x1, 0x1f, 0x1, 0x9], [0x8, 0x0, 0xfffffffb, 0x345, 0xdb, 0xb385, 0x7f, 0x20000000, 0x101, 0x800, 0x7, 0x2, 0x9, 0x9, 0x9, 0xfff, 0x0, 0x3ff, 0x7, 0x0, 0x2, 0x1, 0x8, 0x80000000, 0xb6, 0x3, 0x2, 0x5, 0x5, 0x1ff, 0x80, 0x7, 0x1, 0xffffffff, 0x1f, 0x0, 0xfffffff7, 0x0, 0x66cd, 0xcf63, 0x6, 0x1, 0xffff, 0x6, 0x86, 0xff, 0x9, 0x1, 0x2da7, 0xffff, 0x80, 0x5, 0x7, 0x1, 0x9d5, 0x5, 0x8001, 0x7fffffff, 0xffffffff, 0x7f, 0x6, 0x9, 0x200, 0x2], 0x37, ['\x00', '(\x00', '^*\x00', '..\x00', '}]%\x1d!!:)/#}#\x00', '),-*$*\\\xb4\xb5+\xc8/\x00', '/\x00', '%)@&$-\x00', '\x820xffffffffffffffff}) r4 = dup(r3) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x20, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000000)) 21:33:17 executing program 5 (fault-call:3 fault-nth:17): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 568.041052][ T9937] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 568.048986][ T9937] usb 2-1: can't read configurations, error -71 [ 568.064117][ T9937] usb usb2-port1: unable to enumerate USB device [ 568.071454][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:33:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0dc07507205ff45d2d8a"], &(0x7f00000008c0)=""/4096, 0x1000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d3bdb50ba08e03317b998ca9ff96563d6e2e4680ef82404873977ee49dae6f3a47026a8ea884c94", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltgid=', @ANYRESHEX=r6, @ANYBLOB=',k']) r7 = gettid() tkill(r7, 0x1004000000013) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, r6, 0x189, 0xfff}, 0x3f, 0x9, 0x145, 0x6, r7, 0xffffffffffffffff}) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000000c0)) [ 568.150491][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.184912][T21867] FAULT_INJECTION: forcing a failure. [ 568.184912][T21867] name failslab, interval 1, probability 0, space 0, times 0 21:33:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x76) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffff) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 568.207903][T21867] CPU: 0 PID: 21867 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 568.216673][T21867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.226739][T21867] Call Trace: [ 568.230089][T21867] dump_stack+0x10f/0x19d [ 568.234439][T21867] should_fail+0x23c/0x250 [ 568.238978][T21867] __should_failslab+0x81/0x90 [ 568.243758][T21867] should_failslab+0x5/0x20 [ 568.248234][T21867] kmem_cache_alloc+0x29/0x2b0 [ 568.253580][T21867] ? __kernfs_new_node+0x6a/0x340 [ 568.258577][T21867] __kernfs_new_node+0x6a/0x340 [ 568.263428][T21867] ? kernfs_link_sibling+0x227/0x240 [ 568.268738][T21867] ? rb_insert_color+0x7e/0x310 [ 568.273566][T21867] kernfs_new_node+0x5b/0xd0 [ 568.278169][T21867] __kernfs_create_file+0x45/0x1a0 [ 568.283250][T21867] sysfs_add_file_mode_ns+0x1c1/0x250 [ 568.288593][T21867] internal_create_group+0x2f4/0x890 [ 568.293856][T21867] sysfs_create_group+0x1b/0x20 [ 568.298675][T21867] loop_configure+0x9e7/0xbe0 [ 568.303497][T21867] lo_ioctl+0x554/0x1190 [ 568.307714][T21867] ? debug_smp_processor_id+0x18/0x20 [ 568.313059][T21867] ? blkdev_common_ioctl+0xaae/0x10b0 [ 568.318533][T21867] ? lo_release+0x130/0x130 [ 568.323268][T21867] blkdev_ioctl+0x1b2/0x3f0 [ 568.327744][T21867] block_ioctl+0x6d/0x80 [ 568.331959][T21867] ? blkdev_iopoll+0x80/0x80 [ 568.336588][T21867] __se_sys_ioctl+0xc9/0x130 [ 568.341185][T21867] __x64_sys_ioctl+0x3f/0x50 [ 568.345841][T21867] do_syscall_64+0x51/0xb0 [ 568.350237][T21867] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 568.356357][T21867] RIP: 0033:0x45c9f7 [ 568.360440][T21867] Code: Bad RIP value. [ 568.364476][T21867] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.372853][T21867] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 568.380917][T21867] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 568.388862][T21867] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 568.396908][T21867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 568.404859][T21867] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 568.421398][T21867] hfsplus: unable to parse mount options 21:33:18 executing program 5 (fault-call:3 fault-nth:18): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 568.471059][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.480993][ T5] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 568.501541][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.561154][T21881] FAULT_INJECTION: forcing a failure. [ 568.561154][T21881] name failslab, interval 1, probability 0, space 0, times 0 [ 568.574249][T21881] CPU: 0 PID: 21881 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 568.583026][T21881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.593209][T21881] Call Trace: [ 568.596534][T21881] dump_stack+0x10f/0x19d [ 568.600839][T21881] should_fail+0x23c/0x250 [ 568.605229][T21881] __should_failslab+0x81/0x90 [ 568.609968][T21881] should_failslab+0x5/0x20 [ 568.614489][T21881] kmem_cache_alloc+0x29/0x2b0 [ 568.619225][T21881] ? __kernfs_new_node+0x6a/0x340 [ 568.624235][T21881] __kernfs_new_node+0x6a/0x340 [ 568.629071][T21881] ? kernfs_link_sibling+0x227/0x240 [ 568.634329][T21881] kernfs_new_node+0x5b/0xd0 [ 568.638959][T21881] __kernfs_create_file+0x45/0x1a0 [ 568.644153][T21881] sysfs_add_file_mode_ns+0x1c1/0x250 [ 568.649592][T21881] internal_create_group+0x2f4/0x890 [ 568.654853][T21881] sysfs_create_group+0x1b/0x20 [ 568.659677][T21881] loop_configure+0x9e7/0xbe0 [ 568.664351][T21881] lo_ioctl+0x554/0x1190 [ 568.668786][T21881] ? debug_smp_processor_id+0x18/0x20 [ 568.674136][T21881] ? blkdev_common_ioctl+0xaae/0x10b0 [ 568.679513][T21881] ? lo_release+0x130/0x130 [ 568.683986][T21881] blkdev_ioctl+0x1b2/0x3f0 [ 568.688724][T21881] block_ioctl+0x6d/0x80 [ 568.693025][T21881] ? blkdev_iopoll+0x80/0x80 [ 568.697590][T21881] __se_sys_ioctl+0xc9/0x130 [ 568.702235][T21881] __x64_sys_ioctl+0x3f/0x50 [ 568.706793][T21881] do_syscall_64+0x51/0xb0 [ 568.711237][T21881] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 568.717222][T21881] RIP: 0033:0x45c9f7 [ 568.721210][T21881] Code: Bad RIP value. [ 568.725255][T21881] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.734074][T21881] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 568.742050][T21881] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 568.750096][T21881] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 568.758572][T21881] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 568.767571][T21881] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 568.782001][T21881] hfsplus: unable to parse mount options [ 568.811368][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.822274][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.840978][ T9937] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 568.894266][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 568.931235][ T5] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 569.011307][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.021698][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.030964][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 569.043823][ T48] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 569.052096][ T48] usb 5-1: Product: syz [ 569.056251][ T48] usb 5-1: Manufacturer: syz [ 569.060812][ T48] usb 5-1: SerialNumber: syz [ 569.069303][ T48] usb 5-1: config 0 descriptor?? [ 569.091082][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 569.111332][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.114593][ T48] hub 5-1:0.0: USB hub found [ 569.122593][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.143617][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 569.231412][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.241643][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.281049][ T9937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 569.288631][ T9937] usb 2-1: can't read configurations, error -61 [ 569.331285][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.342632][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.390933][ T48] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 569.431224][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.441434][ T9937] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 569.449213][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.471872][ T48] usb 5-1: USB disconnect, device number 56 [ 569.540916][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.551200][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.641288][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.651472][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.681221][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 569.721567][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 569.741435][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.751609][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 21:33:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x7, 0x1, 0x6, 0x0, '+-\x88\\--'}}, 0x2f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r2, &(0x7f0000000640)="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", 0xfffffffffffffe8b, 0x40010, 0x0, 0x0) [ 569.842438][ T9937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 569.850097][ T9937] usb 2-1: can't read configurations, error -61 [ 569.857084][ T9937] usb usb2-port1: attempt power cycle [ 569.940909][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 569.950055][ T5] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 569.958785][ T5] usb 3-1: Product: syz [ 569.963334][ T5] usb 3-1: Manufacturer: syz [ 569.967910][ T5] usb 3-1: SerialNumber: syz [ 569.973710][ T5] usb 3-1: config 0 descriptor?? [ 570.012700][ T5] hub 3-1:0.0: bad descriptor, ignoring hub [ 570.018633][ T5] hub: probe of 3-1:0.0 failed with error -5 [ 570.028706][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 570.572175][ T9937] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 570.661067][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 570.701242][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 570.821080][ T9937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 570.832359][ T9937] usb 2-1: can't read configurations, error -61 [ 570.980856][ T9937] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 571.072572][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 571.132536][ T9937] usb 2-1: device descriptor read/all, error -71 [ 571.138946][ T9937] usb usb2-port1: unable to enumerate USB device 21:33:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$isdn(0x22, 0x3, 0x4) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x8, 0x7, 0x4, 0x24008, 0x9, {0x77359400}, {0x3, 0x2, 0x1, 0xe3, 0x1f, 0x0, "14201222"}, 0x37, 0x1, @planes=&(0x7f0000000000)={0x8, 0x8, @fd=r3, 0x10001}, 0x0, 0x0, r1}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3, 0x0) poll(&(0x7f0000000180)=[{r4, 0xb97a}, {r5, 0xa054}, {r6, 0x8002}], 0x3, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="8dae948e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x9}, &(0x7f0000000200)=0x8) 21:33:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:20 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff000000000000000012c33ba462bd7f525204c4c4cdbc2eef38ef7bade828bc1cfbcd1a9147235cebc894c3db40846435c84f01010000492a5b5256520b5d410d"], 0x70}}, 0x0) ioctl$sock_ifreq(r1, 0x891d, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) 21:33:20 executing program 5 (fault-call:3 fault-nth:19): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 571.280814][T21921] FAULT_INJECTION: forcing a failure. [ 571.280814][T21921] name failslab, interval 1, probability 0, space 0, times 0 [ 571.293933][T21921] CPU: 1 PID: 21921 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 571.302697][T21921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.312760][T21921] Call Trace: [ 571.316097][T21921] dump_stack+0x10f/0x19d [ 571.320430][T21921] should_fail+0x23c/0x250 [ 571.325280][T21921] __should_failslab+0x81/0x90 [ 571.330215][T21921] should_failslab+0x5/0x20 [ 571.334711][T21921] kmem_cache_alloc+0x29/0x2b0 [ 571.339470][T21921] ? __kernfs_new_node+0x6a/0x340 [ 571.344529][T21921] __kernfs_new_node+0x6a/0x340 [ 571.349408][T21921] ? kernfs_link_sibling+0x227/0x240 [ 571.354689][T21921] kernfs_new_node+0x5b/0xd0 [ 571.360053][T21921] __kernfs_create_file+0x45/0x1a0 [ 571.365601][T21921] sysfs_add_file_mode_ns+0x1c1/0x250 [ 571.371014][T21921] internal_create_group+0x2f4/0x890 [ 571.376307][T21921] sysfs_create_group+0x1b/0x20 [ 571.381232][T21921] loop_configure+0x9e7/0xbe0 [ 571.385915][T21921] lo_ioctl+0x554/0x1190 [ 571.390247][T21921] ? debug_smp_processor_id+0x18/0x20 [ 571.395691][T21921] ? blkdev_common_ioctl+0xaae/0x10b0 [ 571.401062][T21921] ? lo_release+0x130/0x130 [ 571.405862][T21921] blkdev_ioctl+0x1b2/0x3f0 [ 571.410355][T21921] block_ioctl+0x6d/0x80 [ 571.414738][T21921] ? blkdev_iopoll+0x80/0x80 [ 571.419312][T21921] __se_sys_ioctl+0xc9/0x130 [ 571.423949][T21921] __x64_sys_ioctl+0x3f/0x50 [ 571.429374][T21921] do_syscall_64+0x51/0xb0 [ 571.433774][T21921] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 571.439671][T21921] RIP: 0033:0x45c9f7 [ 571.443627][T21921] Code: Bad RIP value. [ 571.447667][T21921] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.456181][T21921] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 571.464287][T21921] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 571.472245][T21921] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 21:33:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 571.480194][T21921] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 571.488217][T21921] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 571.499692][T21921] hfsplus: unable to parse mount options 21:33:21 executing program 5 (fault-call:3 fault-nth:20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e00, @broadcast}, 0xfffffffffffffeda) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 571.614628][T21943] FAULT_INJECTION: forcing a failure. [ 571.614628][T21943] name failslab, interval 1, probability 0, space 0, times 0 [ 571.627375][T21943] CPU: 1 PID: 21943 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 571.636145][T21943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.650265][T21943] Call Trace: [ 571.653545][T21943] dump_stack+0x10f/0x19d [ 571.657867][T21943] should_fail+0x23c/0x250 21:33:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000080)={0x3, 0xff, @name="bb59864403a0a84839c7f14def6caaaeed9238efde20669e48ca9f0a907bec48"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r4, r5/1000+60000}, {0x77359400}}, 0x0) setitimer(0x2, 0x0, &(0x7f0000000040)) 21:33:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10) [ 571.662267][T21943] __should_failslab+0x81/0x90 [ 571.667038][T21943] should_failslab+0x5/0x20 [ 571.670758][ T9937] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 571.671535][T21943] kmem_cache_alloc+0x29/0x2b0 [ 571.684300][T21943] ? radix_tree_node_alloc+0x142/0x200 [ 571.689752][T21943] radix_tree_node_alloc+0x142/0x200 [ 571.695220][T21943] idr_get_free+0x22a/0x5d0 [ 571.699841][T21943] ? radix_tree_iter_tag_clear+0xe4/0x150 [ 571.705550][T21943] idr_alloc_cyclic+0xe4/0x2d0 [ 571.710306][T21943] ? __radix_tree_preload+0x1bd/0x1e0 [ 571.715823][T21943] __kernfs_new_node+0xb4/0x340 [ 571.720765][T21943] ? kernfs_link_sibling+0x227/0x240 [ 571.726576][T21943] kernfs_new_node+0x5b/0xd0 [ 571.731162][T21943] __kernfs_create_file+0x45/0x1a0 [ 571.736256][T21943] sysfs_add_file_mode_ns+0x1c1/0x250 [ 571.741777][T21943] internal_create_group+0x2f4/0x890 [ 571.747045][T21943] sysfs_create_group+0x1b/0x20 [ 571.751882][T21943] loop_configure+0x9e7/0xbe0 [ 571.756534][T21943] lo_ioctl+0x554/0x1190 [ 571.761715][T21943] ? debug_smp_processor_id+0x18/0x20 [ 571.767105][T21943] ? blkdev_common_ioctl+0xaae/0x10b0 [ 571.772470][T21943] ? lo_release+0x130/0x130 [ 571.776968][T21943] blkdev_ioctl+0x1b2/0x3f0 [ 571.781465][T21943] block_ioctl+0x6d/0x80 [ 571.785690][T21943] ? blkdev_iopoll+0x80/0x80 [ 571.790253][T21943] __se_sys_ioctl+0xc9/0x130 [ 571.794817][T21943] __x64_sys_ioctl+0x3f/0x50 [ 571.799500][T21943] do_syscall_64+0x51/0xb0 [ 571.803924][T21943] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 571.809867][T21943] RIP: 0033:0x45c9f7 [ 571.813785][T21943] Code: Bad RIP value. [ 571.817897][T21943] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.826382][T21943] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 571.834375][T21943] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 571.842338][T21943] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 571.850305][T21943] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 21:33:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 571.858515][T21943] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 571.867187][ T3895] usb 3-1: reset high-speed USB device number 120 using dummy_hcd [ 571.875034][ T48] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 571.900312][T21943] hfsplus: unable to parse mount options [ 571.930746][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 571.971564][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 572.090937][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.101768][ T9937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.150658][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 572.155846][ T3895] usb 3-1: Using ep0 maxpacket: 32 [ 572.191093][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.201229][ T9937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.213394][ T3895] usb 3-1: device firmware changed [ 572.218687][ T48] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 572.226468][ T3895] usb 3-1: USB disconnect, device number 120 [ 572.280686][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.290917][ T9937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.320695][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.331722][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.371092][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.382372][ T9937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.421057][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.432333][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.470702][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.480866][ T9937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.541149][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.552167][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.561210][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.572524][ T9937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.591056][ T3895] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 572.660647][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.661365][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.672372][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.683486][ T9937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.780702][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.781392][ T9937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.793146][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.802642][ T9937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.860621][ T3895] usb 3-1: Using ep0 maxpacket: 32 [ 572.902211][ T3895] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 572.910741][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.921936][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.980911][ T9937] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 572.990007][ T9937] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 572.998281][ T9937] usb 2-1: Product: syz [ 573.001137][ T3895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.002471][ T9937] usb 2-1: Manufacturer: syz [ 573.014231][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.017592][ T9937] usb 2-1: SerialNumber: syz [ 573.019834][ T9937] usb 2-1: config 0 descriptor?? [ 573.030540][ T3895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.052818][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.140653][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.151956][ T3895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.162289][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.172056][ T3895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.280598][ T3895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.290850][ T3895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.370625][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 573.379676][ T48] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 573.389449][ T48] usb 5-1: Product: syz [ 573.393753][ T3895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.403905][ T48] usb 5-1: Manufacturer: syz [ 573.408733][ T48] usb 5-1: SerialNumber: syz [ 573.413368][ T3895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.427151][ T48] usb 5-1: config 0 descriptor?? [ 573.471166][ T48] hub 5-1:0.0: USB hub found [ 573.520941][ T3895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.531424][ T3895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.651131][ T3895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.661578][ T3895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.750541][ T48] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 573.770579][ T3895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.780758][ T3895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.841198][ T48] usb 5-1: USB disconnect, device number 57 [ 573.890596][ T3895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.900934][ T3895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.090529][ T3895] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 574.099716][ T3895] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 574.113008][ T3895] usb 3-1: Product: syz [ 574.117287][ T3895] usb 3-1: Manufacturer: syz [ 574.122469][ T3895] usb 3-1: SerialNumber: syz [ 574.128014][ T3895] usb 3-1: config 0 descriptor?? [ 574.172212][ T3895] hub 3-1:0.0: bad descriptor, ignoring hub [ 574.178143][ T3895] hub: probe of 3-1:0.0 failed with error -5 [ 574.187791][ T3895] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:33:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:23 executing program 5 (fault-call:3 fault-nth:21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x400) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x1, 0x1, @raw_data=[0x8, 0x0, 0x7, 0x80000000, 0x90, 0x4, 0x0, 0x5, 0x2, 0x3, 0x3, 0x100, 0x8b25, 0x229, 0x2, 0x6]}) 21:33:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',k']) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x400, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize'}}], [{@dont_appraise='dont_appraise'}]}}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x40000, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 574.354402][T21991] FAULT_INJECTION: forcing a failure. [ 574.354402][T21991] name failslab, interval 1, probability 0, space 0, times 0 [ 574.393444][ T5] usb 2-1: USB disconnect, device number 103 21:33:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000000)={{r3, r4/1000+60000}, {0x77359400}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 574.399985][T21991] CPU: 1 PID: 21991 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 574.408663][T21991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.418706][T21991] Call Trace: [ 574.421993][T21991] dump_stack+0x10f/0x19d [ 574.426314][T21991] should_fail+0x23c/0x250 [ 574.430729][T21991] __should_failslab+0x81/0x90 [ 574.435652][T21991] should_failslab+0x5/0x20 [ 574.440228][T21991] kmem_cache_alloc+0x29/0x2b0 [ 574.444974][T21991] ? __kernfs_new_node+0x6a/0x340 [ 574.450111][T21991] __kernfs_new_node+0x6a/0x340 [ 574.454981][T21991] ? kernfs_link_sibling+0x227/0x240 [ 574.460376][T21991] kernfs_new_node+0x5b/0xd0 [ 574.464953][T21991] __kernfs_create_file+0x45/0x1a0 [ 574.470046][T21991] sysfs_add_file_mode_ns+0x1c1/0x250 [ 574.475419][T21991] internal_create_group+0x2f4/0x890 [ 574.480826][T21991] sysfs_create_group+0x1b/0x20 [ 574.485657][T21991] loop_configure+0x9e7/0xbe0 [ 574.490316][T21991] lo_ioctl+0x554/0x1190 [ 574.494828][T21991] ? debug_smp_processor_id+0x18/0x20 [ 574.500282][T21991] ? blkdev_common_ioctl+0xaae/0x10b0 [ 574.505632][T21991] ? lo_release+0x130/0x130 [ 574.510356][T21991] blkdev_ioctl+0x1b2/0x3f0 [ 574.514964][T21991] block_ioctl+0x6d/0x80 [ 574.519703][T21991] ? blkdev_iopoll+0x80/0x80 [ 574.524320][T21991] __se_sys_ioctl+0xc9/0x130 [ 574.528972][T21991] __x64_sys_ioctl+0x3f/0x50 [ 574.533680][T21991] do_syscall_64+0x51/0xb0 [ 574.538338][T21991] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 574.544400][T21991] RIP: 0033:0x45c9f7 [ 574.548265][T21991] Code: Bad RIP value. [ 574.552338][T21991] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.560724][T21991] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 574.568915][T21991] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 574.576995][T21991] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 574.585019][T21991] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 574.593092][T21991] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 574.603707][T21991] hfsplus: unable to parse mount options 21:33:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000000)) 21:33:24 executing program 5 (fault-call:3 fault-nth:22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x10) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3dbe1d49aaee5b5d}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)={0x440, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbfd, {0x10, 0x0, 0x12, [0x785, 0x7ff, 0x100, 0xfff, 0x8, 0x2, 0x8, 0x6, 0x9, 0xbffcf4, 0x0, 0x7, 0x4, 0x3fe, 0x1, 0x4d5a, 0x9, 0x4, 0x0, 0x401, 0x20, 0x2dea, 0x10001, 0x80000000, 0x4, 0x3f, 0x237b, 0x3ff, 0x401, 0x3ff, 0x800, 0x8, 0x0, 0xfffff39d, 0x0, 0xec, 0x603f, 0x8, 0x81, 0x2, 0x0, 0x9, 0xdc1, 0x80000000, 0xffff, 0xe3f, 0x401, 0x7fff, 0x9, 0x10001, 0x80000000, 0x8000, 0x3f, 0xfffffbff, 0x3, 0x5, 0x7f, 0x5, 0x40000040, 0x7, 0xfac, 0x3f, 0x3, 0x4], [0x0, 0x9, 0x1, 0x8, 0x6, 0x2, 0x6, 0x1f, 0x3f, 0x8, 0x1, 0x0, 0x78c, 0x2, 0x2, 0xfffeffff, 0x63, 0x583f, 0x1ff, 0x3, 0xfffffffd, 0x401, 0x946, 0x3, 0x80000001, 0x8, 0x8, 0x6, 0x7, 0x400, 0x4, 0x9, 0x4, 0x4, 0x4, 0x1000, 0x1, 0x101, 0x20aa7191, 0x101, 0x7fffffff, 0x0, 0x7, 0x2, 0x7fd759fb, 0x800000, 0x7f, 0x81, 0xe10, 0x1, 0x4, 0x67e6dc11, 0x2, 0x9, 0x7, 0xfffffffa, 0xfff, 0x9, 0x1ff, 0x4, 0x9, 0x5, 0x8, 0x6], [0x8000, 0x4583, 0xfff, 0x7f, 0x2, 0x7, 0x9, 0x7, 0xa1, 0x5, 0x7, 0x6, 0x5, 0x4, 0x1, 0x80, 0x2, 0x75, 0x800, 0x0, 0x7, 0x3, 0xfffffffd, 0x8f, 0x673, 0x101, 0x1, 0x1, 0x9, 0x5, 0x7ff, 0x5, 0x9, 0x2a90, 0x8000, 0xe5, 0x6, 0x800, 0x0, 0x1cc5, 0x2, 0x20, 0xff, 0x4, 0x401, 0xddfc, 0x9, 0x4, 0x9, 0x120000, 0xfffffffc, 0x0, 0x0, 0x9, 0xff, 0x8, 0x1, 0x5, 0x4d9, 0x9, 0x3, 0x1f, 0x1, 0x8], [0x2, 0x8000, 0x0, 0x10001, 0x1, 0xb25, 0x6, 0x5, 0x6, 0x1, 0x1, 0x4, 0x9, 0x1, 0x1, 0x20, 0x6, 0x80000001, 0x7, 0x6, 0x9, 0x2553, 0x81, 0x2, 0xfff, 0x1f, 0x1f, 0x1, 0x2, 0xffffffff, 0x9, 0xc7, 0x200, 0xfffffff8, 0x0, 0x8, 0x80000000, 0x7, 0x6, 0x2, 0x6f, 0x7ff, 0x0, 0x200, 0x7, 0x0, 0x1, 0x2, 0x6, 0x4, 0xfffffffa, 0x6, 0x7, 0x800, 0xc1a, 0x3, 0x8, 0x0, 0x7, 0x8, 0x8, 0x3f, 0x439a, 0x3], 0x1d, ['+\'\x00', 'veth1_vlan\x00', 'bridge_slave_0\x00']}, ["", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x24040004}, 0x81) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000100)={0x1, 0x8, 0x5, 0x3}) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000e000000000000000000400005000600000000080a000000000000000000000000000000000000000000000100000000000000000200010000000000000000000000000005000500000600000a00655e0506d721f97100000000000000000000000000820a00000000000000d1cc7b6b7659563b34c782953718fe63be4ef17674398072f1d92c561cf3b927ae085f5ded21a5f813ee9fa8038b78e4b23186549a53082d702d1fa6631c180f966bf7c77acb02b2d8f3f94849f38e92c93253ce"], 0x70}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000000c0)={0x6, 'veth1_vlan\x00', {0x6c4}, 0x4}) 21:33:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{r2, r3/1000+10000}, {0x0, 0xea60}}, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x0) keyctl$reject(0x13, r4, 0x5c, 0x3ff, 0xffffffffffffffff) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 574.690506][ T9936] usb 3-1: reset high-speed USB device number 121 using dummy_hcd [ 574.750429][ T48] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 574.776754][T22023] FAULT_INJECTION: forcing a failure. [ 574.776754][T22023] name failslab, interval 1, probability 0, space 0, times 0 [ 574.841383][T22023] CPU: 0 PID: 22023 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 574.850073][T22023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.860210][T22023] Call Trace: [ 574.863708][T22023] dump_stack+0x10f/0x19d [ 574.868080][T22023] should_fail+0x23c/0x250 [ 574.872518][T22023] __should_failslab+0x81/0x90 [ 574.877333][T22023] should_failslab+0x5/0x20 [ 574.881831][T22023] kmem_cache_alloc+0x29/0x2b0 [ 574.886681][T22023] ? getname_flags+0x84/0x3d0 [ 574.891340][T22023] getname_flags+0x84/0x3d0 [ 574.895837][T22023] do_mkdirat+0x3a/0x220 [ 574.900068][T22023] ? switch_fpu_return+0xa/0x10 [ 574.904905][T22023] __x64_sys_mkdir+0x32/0x40 [ 574.909565][T22023] do_syscall_64+0x51/0xb0 [ 574.914062][T22023] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 574.919943][T22023] RIP: 0033:0x45bfa7 [ 574.923819][T22023] Code: Bad RIP value. [ 574.927937][T22023] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 574.936332][T22023] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 574.944291][T22023] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 574.952357][T22023] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 574.960316][T22023] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 574.968359][T22023] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 574.990451][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 575.040463][ T48] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 575.100486][ T9936] usb 3-1: Using ep0 maxpacket: 32 [ 575.140412][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.140420][ T5] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 575.140727][ T9936] usb 3-1: device firmware changed [ 575.156818][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.159425][ T9936] usb 3-1: USB disconnect, device number 121 [ 575.240416][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.252398][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.340763][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.351906][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.400378][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 575.440973][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.452927][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.460785][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 575.540402][ T9936] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 575.540769][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.560736][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.570880][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.583937][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.651379][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.663226][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.680969][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.692430][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.750680][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.762791][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.780348][ T9936] usb 3-1: Using ep0 maxpacket: 32 [ 575.800810][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.811799][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.822278][ T9936] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 575.850629][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.862989][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.900994][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.912015][ T9936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.922116][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.932105][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.030757][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 576.031021][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.039953][ T48] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 576.039963][ T48] usb 5-1: Product: syz [ 576.039970][ T48] usb 5-1: Manufacturer: syz [ 576.039983][ T48] usb 5-1: SerialNumber: syz [ 576.053021][ T9936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.067848][ T48] usb 5-1: config 0 descriptor?? [ 576.069988][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.070015][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.110525][ T48] hub 5-1:0.0: USB hub found [ 576.150373][ T9936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.162093][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.200373][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.211472][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.270336][ T9936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.280598][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.320417][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.332020][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.370399][ T9936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.381038][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.390741][ T48] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 576.440330][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.451802][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.470965][ T48] usb 5-1: USB disconnect, device number 58 [ 576.500391][ T9936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.511389][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.610774][ T9936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.622939][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.636579][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 576.645653][ T5] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 576.654551][ T5] usb 2-1: Product: syz [ 576.658691][ T5] usb 2-1: Manufacturer: syz [ 576.663732][ T5] usb 2-1: SerialNumber: syz [ 576.668954][ T5] usb 2-1: config 0 descriptor?? [ 576.712262][ T5] hub 2-1:0.0: USB hub found [ 576.740368][ T9936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.751013][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.950313][ T5] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 576.960116][ T9936] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 576.969273][ T9936] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 576.977659][ T9936] usb 3-1: Product: syz [ 576.981874][ T9936] usb 3-1: Manufacturer: syz [ 576.986457][ T9936] usb 3-1: SerialNumber: syz [ 576.994684][ T9936] usb 3-1: config 0 descriptor?? [ 577.020927][ T5] usb 2-1: USB disconnect, device number 104 [ 577.030992][ T9936] hub 3-1:0.0: bad descriptor, ignoring hub [ 577.036924][ T9936] hub: probe of 3-1:0.0 failed with error -5 [ 577.048323][ T9936] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:33:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000002480)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000000000000000000000000000000000000016e7bafad784bb3b000001000000007082ad000000000200010000000000000000000000000005000500000000000a00000000000000fe800000000000ef00"/120], 0x70}}, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x80104) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001d00)=[{&(0x7f00000000c0), 0x1}, {&(0x7f0000000100)=0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)=0x2}, {&(0x7f00000001c0)=0x1}, {&(0x7f0000000200)=0x2}, {&(0x7f0000000280)=0x1, 0x2}, {&(0x7f00000002c0)=0x2, 0x2}, {&(0x7f0000000300)=0x1, 0x1}, {&(0x7f0000000340)=0x2, 0x2}, {&(0x7f0000000380), 0x2}, {&(0x7f00000003c0)=0x2, 0x1}, {&(0x7f0000000400), 0x1}, {&(0x7f0000000440), 0x2}, {&(0x7f0000000480)=0x1}, {&(0x7f00000004c0)=0x1, 0x1}, {&(0x7f0000000500)=0x1, 0x2}, {&(0x7f0000000540)=0x2}, {&(0x7f0000000580)=0x1}, {&(0x7f00000005c0), 0x1}, {&(0x7f0000000600)=0x2, 0x2}, {&(0x7f0000000640)=0x2}, {&(0x7f0000000680)=0x2, 0x1}, {&(0x7f00000006c0)=0x2, 0x2}, {&(0x7f0000000700)=0x1, 0x1}, {&(0x7f0000000740)=0x2}, {&(0x7f0000000780)=0x1, 0x2}, {&(0x7f00000007c0)=0x2, 0x2}, {&(0x7f0000000800), 0x1}, {&(0x7f0000000840)=0x1}, {&(0x7f0000000880)=0x2}, {&(0x7f00000008c0)=0x1, 0x1}, {&(0x7f0000000900)=0x1, 0x2}, {&(0x7f0000000940)=0x2, 0x1}, {&(0x7f0000000980)=0x2}, {&(0x7f00000009c0)=0x1, 0x2}, {&(0x7f0000000a00)=0x1, 0x1}, {&(0x7f0000000a40)=0x1, 0x1}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)=0x2, 0x1}, {&(0x7f0000000b00)=0x2, 0x1}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=0x1, 0x2}, {&(0x7f0000000bc0), 0x2}, {&(0x7f0000000c00)=0x2}, {&(0x7f0000000c40)=0x2}, {&(0x7f0000000c80)=0x2, 0x2}, {&(0x7f0000000cc0), 0x2}, {&(0x7f0000000d00)=0x2, 0x1}, {&(0x7f0000000d40), 0x2}, {&(0x7f0000000d80)=0x1, 0x2}, {&(0x7f0000000dc0), 0x2}, {&(0x7f0000000e00)}, {&(0x7f0000000e40), 0x2}, {&(0x7f0000000e80), 0x2}, {&(0x7f0000000ec0)=0x2}, {&(0x7f0000000f00)=0x2, 0x2}, {&(0x7f0000000f40)=0x2, 0x1}, {&(0x7f0000000f80)=0x2, 0x2}, {&(0x7f0000000fc0)=0x1, 0x2}, {&(0x7f0000001000)=0x2}, {&(0x7f0000001040)=0x1}, {&(0x7f0000001080)=0x2}, {&(0x7f00000010c0)=0x2, 0x1}, {&(0x7f0000001100), 0x2}, {&(0x7f0000001140), 0x2}, {&(0x7f0000001180)=0x2, 0x1}, {&(0x7f00000011c0)=0x1, 0x1}, {&(0x7f0000001200), 0x2}, {&(0x7f0000001240)=0x2, 0x1}, {&(0x7f0000001280)=0x2}, {&(0x7f00000012c0)=0x1, 0x1}, {&(0x7f0000001300)=0x1, 0x1}, {&(0x7f0000001340), 0x2}, {&(0x7f0000001380), 0x2}, {&(0x7f00000013c0)=0x1}, {&(0x7f0000001400)=0x2, 0x1}, {&(0x7f0000001440)=0x2, 0x1}, {&(0x7f0000001480), 0x2}, {&(0x7f00000014c0)}, {&(0x7f0000001500)}, {&(0x7f0000001540)=0x2}, {&(0x7f0000001580)=0x1}, {&(0x7f00000015c0)=0x1, 0x1}, {&(0x7f0000001600)=0x1, 0x1}, {&(0x7f0000001640)=0x2}, {&(0x7f0000001680), 0x2}, {&(0x7f00000016c0), 0x1}, {&(0x7f0000001700), 0x1}, {&(0x7f0000001740)}, {&(0x7f0000001780), 0x2}, {&(0x7f00000017c0)=0x1}, {&(0x7f0000001800), 0x1}, {&(0x7f0000001840), 0x2}, {&(0x7f0000001880)=0x1, 0x2}, {&(0x7f00000018c0)=0x1, 0x1}, {&(0x7f0000001900), 0x1}, {&(0x7f0000001940), 0x1}, {&(0x7f0000001980)=0x1, 0x2}, {&(0x7f00000019c0), 0x2}, {&(0x7f0000001a00), 0x1}, {&(0x7f0000001a40)=0x1, 0x2}, {&(0x7f0000001a80)=0x2, 0x1}, {&(0x7f0000001ac0)=0x2}, {&(0x7f0000001b00)=0x1, 0x1}, {&(0x7f0000001b40), 0x2}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)=0x2, 0x1}, {&(0x7f0000001c00)=0x2, 0x2}, {&(0x7f0000001c40)=0x1, 0x1}, {&(0x7f0000001c80), 0x1}, {&(0x7f0000001cc0), 0x2}], 0xd, 0x70, &(0x7f0000002440)={r6, r7+10000000}, 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x805, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048014}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r5}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r5, 0x25, 0x1, 0x1f}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x5}, 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:27 executing program 5 (fault-call:3 fault-nth:23): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x414000) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x401, 0xfc}) [ 578.326102][T22074] FAULT_INJECTION: forcing a failure. [ 578.326102][T22074] name failslab, interval 1, probability 0, space 0, times 0 [ 578.347304][T22074] CPU: 1 PID: 22074 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 578.356005][T22074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.366568][T22074] Call Trace: [ 578.370111][T22074] dump_stack+0x10f/0x19d 21:33:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000d428cae21a92a8edc767206d043d2179540328a21b0902cf098f83abb44f560eabb955068c6449b224f5ee0e2a2c71e6def20f14543210404e7b2ceebb72ce06f6907bb1933c9577660db9929d411af6af19c54ac8bcee887df1620244c27cca534ae4028f559c765baea8430f7022e423b89597cb40d36e044c4507a60afda15298a14ac4c674613a00506ebc46ca6b65ed276ee4aae36ec4d0d8cd6fabf445bd87ca0b618785055bb42956248108ef73af"], 0x0) [ 578.374440][T22074] should_fail+0x23c/0x250 [ 578.378851][T22074] __should_failslab+0x81/0x90 [ 578.383607][T22074] should_failslab+0x5/0x20 [ 578.388101][T22074] kmem_cache_alloc+0x29/0x2b0 [ 578.392855][T22074] ? getname_flags+0x84/0x3d0 [ 578.397790][T22074] getname_flags+0x84/0x3d0 [ 578.402286][T22074] do_mkdirat+0x3a/0x220 [ 578.406524][T22074] ? switch_fpu_return+0xa/0x10 [ 578.411536][T22074] __x64_sys_mkdir+0x32/0x40 [ 578.416115][T22074] do_syscall_64+0x51/0xb0 [ 578.420820][T22074] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.426711][T22074] RIP: 0033:0x45bfa7 [ 578.430628][T22074] Code: Bad RIP value. [ 578.434674][T22074] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 578.443070][T22074] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 578.452132][T22074] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 578.460183][T22074] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 578.468211][T22074] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 21:33:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r2, 0x1409}], 0x1, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000180)={[0x8]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 578.476169][T22074] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x2, 0x0, 0x0, 0x0, 0x4, 0x1, 0x3, 0x101, 0x689, 0x3, 0x10000, 0x8, 0x8, 0x1, 0x8, 0x0, {0x10001, 0x1}, 0xc6, 0x3}}) 21:33:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}], [], 0x6b}}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x292082, &(0x7f0000000180)={'trans=unix,', {[{@access_client='access=client'}, {@version_9p2000='version=9p2000'}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@access_any='access=any'}], [{@pcr={'pcr', 0x3d, 0x2e}}, {@euid_lt={'euid<', r8}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot'}}]}}) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:28 executing program 5 (fault-call:3 fault-nth:24): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r2) sendto$inet(r2, &(0x7f0000000640)="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", 0x250, 0x4048844, 0x0, 0x0) [ 578.630189][ T9047] usb 3-1: reset high-speed USB device number 122 using dummy_hcd [ 578.638578][ T5] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 578.695552][T22112] FAULT_INJECTION: forcing a failure. [ 578.695552][T22112] name failslab, interval 1, probability 0, space 0, times 0 [ 578.718252][T22112] CPU: 1 PID: 22112 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 578.726951][T22112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.737253][T22112] Call Trace: [ 578.741135][T22112] dump_stack+0x10f/0x19d [ 578.745463][T22112] should_fail+0x23c/0x250 [ 578.749876][T22112] __should_failslab+0x81/0x90 [ 578.754639][T22112] should_failslab+0x5/0x20 [ 578.759123][T22112] kmem_cache_alloc+0x29/0x2b0 [ 578.763870][T22112] ? __d_alloc+0x36/0x370 [ 578.768181][T22112] __d_alloc+0x36/0x370 [ 578.772318][T22112] d_alloc+0x2a/0x110 [ 578.776367][T22112] __lookup_hash+0x93/0x180 [ 578.780858][T22112] filename_create+0xdb/0x3c0 [ 578.785529][T22112] do_mkdirat+0x5a/0x220 [ 578.789772][T22112] __x64_sys_mkdir+0x32/0x40 [ 578.794542][T22112] do_syscall_64+0x51/0xb0 [ 578.798956][T22112] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.804830][T22112] RIP: 0033:0x45bfa7 [ 578.808699][T22112] Code: Bad RIP value. [ 578.812765][T22112] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 578.821200][T22112] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 578.821450][ T9937] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 578.829160][T22112] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 578.844722][T22112] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 578.852681][T22112] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 578.860687][T22112] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 578.900421][ T9047] usb 3-1: Using ep0 maxpacket: 32 [ 578.905770][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 578.940672][ T9047] usb 3-1: device firmware changed [ 578.946370][ T9047] usb 3-1: USB disconnect, device number 122 [ 578.957644][ T5] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 579.041741][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.056125][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.130171][ T9937] usb 2-1: device descriptor read/64, error 18 [ 579.140505][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.151456][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.240269][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.251207][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.330546][ T9047] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 579.342036][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.353899][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.440276][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.451463][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.520007][ T9937] usb 2-1: device descriptor read/64, error 18 [ 579.540055][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.551394][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.570023][ T9047] usb 3-1: Using ep0 maxpacket: 32 [ 579.610058][ T9047] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 579.640090][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.651202][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.690143][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.700329][ T9047] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.740008][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.750960][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.790061][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.800784][ T9937] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 579.808507][ T9047] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.900327][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.911377][ T9047] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.924872][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 579.934073][ T5] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 579.942852][ T5] usb 5-1: Product: syz [ 579.947061][ T5] usb 5-1: Manufacturer: syz [ 579.951741][ T5] usb 5-1: SerialNumber: syz [ 579.959399][ T5] usb 5-1: config 0 descriptor?? [ 580.000339][ T5] hub 5-1:0.0: USB hub found [ 580.010044][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.021093][ T9047] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.089941][ T9937] usb 2-1: device descriptor read/64, error 18 [ 580.110052][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.120299][ T9047] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.210305][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.220552][ T9047] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.281203][ T5] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 580.310243][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.320588][ T9047] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.370986][ T5] usb 5-1: USB disconnect, device number 59 [ 580.409991][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.410009][ T9047] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.479922][ T9937] usb 2-1: device descriptor read/64, error 18 [ 580.569928][ T9047] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 580.578999][ T9047] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 580.587819][ T9047] usb 3-1: Product: syz [ 580.592444][ T9047] usb 3-1: Manufacturer: syz [ 580.597023][ T9047] usb 3-1: SerialNumber: syz [ 580.602066][ T9937] usb usb2-port1: attempt power cycle [ 580.609402][ T9047] usb 3-1: config 0 descriptor?? [ 580.650183][ T9047] hub 3-1:0.0: bad descriptor, ignoring hub [ 580.656109][ T9047] hub: probe of 3-1:0.0 failed with error -5 [ 580.667413][ T9047] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 581.309845][ T9937] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 581.399993][ T9937] usb 2-1: Invalid ep0 maxpacket: 212 21:33:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x3800) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000001c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1e000100000000000000521453f37abc14a098ed05108311ea0000000000e000000100000000000000000000000000000000000000a1e6181e0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0xfd, 0x0, {0x1, 0x1, 0x954, 0x1, 0x2}, 0x8}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDDISABIO(r5, 0x4b37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 21:33:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000280)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0xffffffffffffff06) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:33:31 executing program 5 (fault-call:3 fault-nth:25): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x101400, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) [ 581.898560][T22155] FAULT_INJECTION: forcing a failure. [ 581.898560][T22155] name failslab, interval 1, probability 0, space 0, times 0 [ 581.913470][T22155] CPU: 1 PID: 22155 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 581.922227][T22155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.932262][T22155] Call Trace: [ 581.935579][T22155] dump_stack+0x10f/0x19d [ 581.939899][T22155] should_fail+0x23c/0x250 [ 581.944304][T22155] __should_failslab+0x81/0x90 [ 581.949056][T22155] ? tomoyo_encode2+0x1e2/0x350 [ 581.954021][T22155] should_failslab+0x5/0x20 [ 581.958507][T22155] __kmalloc+0x43/0x2d0 [ 581.962657][T22155] tomoyo_encode2+0x1e2/0x350 [ 581.967323][T22155] tomoyo_realpath_from_path+0x36e/0x3c0 [ 581.973056][T22155] tomoyo_path_number_perm+0xc1/0x2d0 [ 581.978415][T22155] ? __d_add+0x50/0x450 [ 581.982564][T22155] tomoyo_path_mkdir+0x50/0x70 [ 581.987318][T22155] security_path_mkdir+0x95/0xf0 [ 581.992299][T22155] do_mkdirat+0xf7/0x220 [ 581.996530][T22155] __x64_sys_mkdir+0x32/0x40 [ 582.001107][T22155] do_syscall_64+0x51/0xb0 [ 582.005656][T22155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 582.011535][T22155] RIP: 0033:0x45bfa7 [ 582.015512][T22155] Code: Bad RIP value. [ 582.019560][T22155] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 582.028037][T22155] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 582.035995][T22155] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 21:33:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r2, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r3 = gettid() tkill(r3, 0x1004000000013) r4 = syz_open_procfs(r3, &(0x7f0000000080)='task\x00') ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f00000000c0)) [ 582.043954][T22155] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 582.052001][T22155] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 582.060012][T22155] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 582.101892][T22155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 582.139538][T22155] hfsplus: unable to parse mount options 21:33:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2b02, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f00000001c0)={r5, 0x1}) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:31 executing program 5 (fault-call:3 fault-nth:26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 582.221051][ T48] usb 3-1: reset high-speed USB device number 123 using dummy_hcd [ 582.228906][ T3895] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 582.299931][ T9937] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 582.315475][T22179] FAULT_INJECTION: forcing a failure. [ 582.315475][T22179] name failslab, interval 1, probability 0, space 0, times 0 [ 582.339160][T22179] CPU: 1 PID: 22179 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 582.348188][T22179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.358340][T22179] Call Trace: [ 582.361619][T22179] dump_stack+0x10f/0x19d [ 582.365939][T22179] should_fail+0x23c/0x250 [ 582.370351][T22179] __should_failslab+0x81/0x90 [ 582.375278][T22179] ? set_qf_name+0x220/0x220 [ 582.379859][T22179] should_failslab+0x5/0x20 [ 582.384348][T22179] kmem_cache_alloc+0x29/0x2b0 [ 582.389170][T22179] ? ext4_alloc_inode+0x27/0x2c0 [ 582.394109][T22179] ? set_qf_name+0x220/0x220 [ 582.398723][T22179] ext4_alloc_inode+0x27/0x2c0 [ 582.400080][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 582.403540][T22179] ? set_qf_name+0x220/0x220 [ 582.413435][T22179] new_inode_pseudo+0x38/0x190 [ 582.418266][T22179] new_inode+0x21/0x100 [ 582.422678][T22179] __ext4_new_inode+0x2cb/0x2fc0 [ 582.427618][T22179] ? tomoyo_path_number_perm+0x286/0x2d0 [ 582.433241][T22179] ext4_mkdir+0x299/0xc90 [ 582.437558][T22179] ? generic_permission+0xe7/0x3e0 [ 582.442662][T22179] ? inode_permission+0x61/0x330 [ 582.447615][T22179] vfs_mkdir+0x288/0x370 [ 582.451811][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 582.452538][T22179] do_mkdirat+0x132/0x220 [ 582.452554][T22179] __x64_sys_mkdir+0x32/0x40 [ 582.469177][T22179] do_syscall_64+0x51/0xb0 [ 582.473593][T22179] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 582.479466][T22179] RIP: 0033:0x45bfa7 [ 582.483334][T22179] Code: Bad RIP value. [ 582.487370][T22179] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 582.495752][T22179] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 582.503698][T22179] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 582.511668][T22179] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 582.519678][T22179] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 582.527736][T22179] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 582.540139][ T9937] usb 2-1: config 0 has no interfaces? 21:33:32 executing program 5 (fault-call:3 fault-nth:27): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 582.620050][ T9937] usb 2-1: config 0 has no interfaces? [ 582.628738][T22192] FAULT_INJECTION: forcing a failure. [ 582.628738][T22192] name failslab, interval 1, probability 0, space 0, times 0 [ 582.655733][T22192] CPU: 1 PID: 22192 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 582.664417][T22192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.674451][T22192] Call Trace: [ 582.677757][T22192] dump_stack+0x10f/0x19d [ 582.682085][T22192] should_fail+0x23c/0x250 [ 582.687275][T22192] __should_failslab+0x81/0x90 [ 582.692082][T22192] ? kcalloc+0x32/0x50 [ 582.696355][T22192] should_failslab+0x5/0x20 [ 582.700175][ T9937] usb 2-1: config 0 has no interfaces? [ 582.701538][T22192] __kmalloc+0x43/0x2d0 [ 582.711210][T22192] ? check_preemption_disabled+0x51/0x140 [ 582.716996][T22192] kcalloc+0x32/0x50 [ 582.720863][T22192] ext4_find_extent+0x248/0x840 [ 582.725684][T22192] ext4_ext_map_blocks+0xd9/0x20c0 [ 582.730928][T22192] ? from_kprojid+0x143/0x190 [ 582.735674][T22192] ? __brelse+0x2c/0x50 [ 582.739814][T22192] ? __this_cpu_preempt_check+0x18/0x20 [ 582.745349][T22192] ? percpu_counter_add_batch+0x112/0x130 [ 582.751175][T22192] ? _raw_read_unlock+0x13/0x30 [ 582.756684][T22192] ext4_map_blocks+0x2bd/0xf60 [ 582.761423][T22192] ? __brelse+0x2c/0x50 [ 582.765550][T22192] ext4_getblk+0x67/0x2e0 [ 582.769861][T22192] ext4_bread+0x3a/0x1f0 [ 582.774322][T22192] ext4_append+0xda/0x1c0 [ 582.778622][T22192] ext4_mkdir+0x4b6/0xc90 [ 582.779742][ T9937] usb 2-1: config 0 has no interfaces? [ 582.783023][T22192] ? generic_permission+0xe7/0x3e0 [ 582.793637][T22192] ? inode_permission+0x61/0x330 [ 582.798918][T22192] vfs_mkdir+0x288/0x370 [ 582.803157][T22192] do_mkdirat+0x132/0x220 [ 582.808000][T22192] __x64_sys_mkdir+0x32/0x40 [ 582.812587][T22192] do_syscall_64+0x51/0xb0 [ 582.816979][T22192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 582.822843][T22192] RIP: 0033:0x45bfa7 [ 582.826876][T22192] Code: Bad RIP value. [ 582.830912][T22192] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 582.839345][T22192] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 582.847306][T22192] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 582.855259][T22192] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 582.860240][ T9937] usb 2-1: config 0 has no interfaces? 21:33:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="080cefa7ada287e1fd8e4781adbcb9881b85efe30075ec169ec2df3db89891ec0f0e4112f2a37df201d39c59f91e49598cf70388e881300bd1ce688fbdc216bdf2c7eeb92e9244740f5da956710617589b635cebacd054fd89dea253c4b662ddf0b943cbfd35c522701f2314b59f9ecef13cf796fa1063a2a5e066d3a7c2df4566fd3697311cca87a615c0847b04c75603bf130c73d69aa9d69f499548ee270f4ee192", 0xa3}, {&(0x7f0000000000)='8DI', 0x3}], 0x2, 0x200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 582.863498][T22192] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 582.877103][T22192] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 582.889244][ T3895] usb 5-1: Using ep0 maxpacket: 32 [ 582.894424][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 582.902806][T22192] hfsplus: unable to parse mount options 21:33:32 executing program 5 (fault-call:3 fault-nth:28): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 582.940272][ T9937] usb 2-1: config 0 has no interfaces? [ 582.951255][ T3895] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 582.959487][ T48] usb 3-1: device firmware changed [ 582.974692][ T48] usb 3-1: USB disconnect, device number 123 [ 583.006705][T22209] FAULT_INJECTION: forcing a failure. [ 583.006705][T22209] name failslab, interval 1, probability 0, space 0, times 0 [ 583.020926][ T9937] usb 2-1: config 0 has no interfaces? [ 583.057669][T22209] CPU: 0 PID: 22209 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 583.066364][T22209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.076406][T22209] Call Trace: [ 583.079729][T22209] dump_stack+0x10f/0x19d [ 583.084059][T22209] should_fail+0x23c/0x250 [ 583.088464][T22209] __should_failslab+0x81/0x90 [ 583.093392][T22209] ? set_qf_name+0x220/0x220 [ 583.098132][T22209] should_failslab+0x5/0x20 [ 583.102620][T22209] kmem_cache_alloc+0x29/0x2b0 [ 583.107371][T22209] ? ext4_alloc_inode+0x27/0x2c0 [ 583.112415][T22209] ? set_qf_name+0x220/0x220 [ 583.116995][T22209] ext4_alloc_inode+0x27/0x2c0 [ 583.121777][T22209] ? set_qf_name+0x220/0x220 [ 583.126435][T22209] new_inode_pseudo+0x38/0x190 [ 583.131185][T22209] new_inode+0x21/0x100 [ 583.135520][T22209] __ext4_new_inode+0x2cb/0x2fc0 [ 583.140556][T22209] ? tomoyo_path_number_perm+0x286/0x2d0 [ 583.146421][T22209] ext4_mkdir+0x299/0xc90 [ 583.151342][T22209] ? generic_permission+0xe7/0x3e0 [ 583.156542][T22209] ? inode_permission+0x61/0x330 [ 583.161597][T22209] vfs_mkdir+0x288/0x370 [ 583.165950][T22209] do_mkdirat+0x132/0x220 [ 583.170394][T22209] __x64_sys_mkdir+0x32/0x40 [ 583.175043][T22209] do_syscall_64+0x51/0xb0 [ 583.179433][T22209] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 583.185296][T22209] RIP: 0033:0x45bfa7 [ 583.189167][T22209] Code: Bad RIP value. [ 583.193450][T22209] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 583.202140][T22209] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 583.210428][T22209] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 583.218496][T22209] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 583.227221][T22209] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 583.235179][T22209] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 583.254258][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.272142][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.280819][ T9937] usb 2-1: config 0 has no interfaces? [ 583.369945][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.383051][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.439692][ T9937] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 583.449412][ T9937] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 583.458212][ T9937] usb 2-1: Product: syz [ 583.462602][ T9937] usb 2-1: Manufacturer: syz [ 583.467172][ T9937] usb 2-1: SerialNumber: syz [ 583.474163][ T9937] usb 2-1: config 0 descriptor?? [ 583.482253][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.493989][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.539685][ T48] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 583.589733][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.600756][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.700034][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.712912][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.713791][ T9937] usb 2-1: USB disconnect, device number 108 [ 583.809628][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 583.829689][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.842424][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.852419][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 583.939919][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.954814][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.965003][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.978032][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.059928][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.070927][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.081174][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.094238][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.199963][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.210125][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.289887][ T3895] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 584.299133][ T3895] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 584.308008][ T3895] usb 5-1: Product: syz [ 584.312680][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.322837][ T3895] usb 5-1: Manufacturer: syz [ 584.327668][ T3895] usb 5-1: SerialNumber: syz [ 584.332876][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.346965][ T3895] usb 5-1: config 0 descriptor?? [ 584.401426][ T3895] hub 5-1:0.0: USB hub found [ 584.440034][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.450788][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.499587][ T9918] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 584.539984][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.550467][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.649985][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.660255][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.689953][ T3895] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 584.769657][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.780017][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 584.785630][ T3895] usb 5-1: USB disconnect, device number 60 [ 584.792460][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.820867][ T9918] usb 2-1: too many configurations: 27, using maximum allowed: 8 21:33:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000003c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) write$dsp(r3, &(0x7f00000000c0)="dbf3296462e18a9eb859e213496b38ef9a275e2d98d04a067bd40b734d3ab515111377ffc374f49eb3e6863ad1754d1375543db29c6cf4d46bed82024c45806702a7714b0245427117df556bb7a41502dfc09484e3c9d7513cd99e5b74f5e260f7cc3601e0ce66c025ee973d7a6a0ff73fa4e12ad55c45e9d8071f0e1c59dda21511d06657af01f37529b9a0f3b6b3ad49005bb4321c1f7995bcf1dffe0794b18477196fee4a0202e61a13f7c8aaefbc9a57af09589eebac415392270ddb0907b9fdaad653a2fc6e52c057916983", 0xce) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x2, 0x5, 0x2, 0xb100000000}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0xc0000000}, @sadb_address={0x2, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffc, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x68}}, 0x0) ioctl$sock_ifreq(r4, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', @ifru_flags=0x2}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r5, 0x300, 0x70bd31, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40082) 21:33:34 executing program 5 (fault-call:3 fault-nth:29): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 584.921069][ T9918] usb 2-1: config 0 has no interfaces? [ 584.935444][T22248] FAULT_INJECTION: forcing a failure. [ 584.935444][T22248] name failslab, interval 1, probability 0, space 0, times 0 [ 584.948118][T22248] CPU: 0 PID: 22248 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 584.956796][T22248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.966838][T22248] Call Trace: [ 584.970115][T22248] dump_stack+0x10f/0x19d [ 584.974441][T22248] should_fail+0x23c/0x250 [ 584.978942][T22248] __should_failslab+0x81/0x90 [ 584.983696][T22248] should_failslab+0x5/0x20 [ 584.988183][T22248] kmem_cache_alloc+0x29/0x2b0 [ 584.992933][T22248] ? __es_insert_extent+0x53a/0xe70 [ 584.998114][T22248] __es_insert_extent+0x53a/0xe70 [ 585.003132][T22248] ? should_fail+0xd6/0x250 [ 585.007642][T22248] ? check_preemption_disabled+0x51/0x140 [ 585.013344][T22248] ? debug_smp_processor_id+0x18/0x20 [ 585.018748][T22248] ext4_es_insert_extent+0x18b/0x1ad0 [ 585.024118][T22248] ? ext4_ext_convert_to_initialized+0x1060/0x1060 [ 585.030774][T22248] ext4_ext_map_blocks+0xd08/0x20c0 [ 585.036047][T22248] ? __brelse+0x2c/0x50 [ 585.040175][T22248] ? __this_cpu_preempt_check+0x18/0x20 [ 585.045885][T22248] ? percpu_counter_add_batch+0x112/0x130 [ 585.051653][T22248] ? _raw_read_unlock+0x13/0x30 [ 585.056588][T22248] ext4_map_blocks+0x2bd/0xf60 [ 585.061353][T22248] ? __brelse+0x2c/0x50 [ 585.065497][T22248] ext4_getblk+0x67/0x2e0 21:33:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10200, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1000, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e29, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 585.069799][T22248] ext4_bread+0x3a/0x1f0 [ 585.074108][T22248] ext4_append+0xda/0x1c0 [ 585.078424][T22248] ext4_mkdir+0x4b6/0xc90 [ 585.082725][T22248] ? generic_permission+0xe7/0x3e0 [ 585.087826][T22248] ? inode_permission+0x61/0x330 [ 585.092778][T22248] vfs_mkdir+0x288/0x370 [ 585.097016][T22248] do_mkdirat+0x132/0x220 [ 585.101348][T22248] __x64_sys_mkdir+0x32/0x40 [ 585.106040][T22248] do_syscall_64+0x51/0xb0 [ 585.110460][T22248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.116350][T22248] RIP: 0033:0x45bfa7 [ 585.120324][T22248] Code: Bad RIP value. [ 585.124384][T22248] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 585.132791][T22248] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 585.140927][T22248] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 585.148892][T22248] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 585.156856][T22248] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 585.164822][T22248] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 585.208391][T22248] hfsplus: unable to parse mount options [ 585.249506][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 585.258592][ T9918] usb 2-1: unable to read config index 1 descriptor/start: -71 [ 585.309507][ T9918] usb 2-1: can't read configurations, error -71 [ 585.315879][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 585.338288][ T48] usb 3-1: config 0 descriptor?? 21:33:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x7, 0x0, 0x1, 0x5, 0x3, 0x8, 0x1, 0x5}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) 21:33:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket(0x1e, 0x805, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r3}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0x90) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_ivalue=0x5}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r4) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f00000000c0)={{0x3b, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x20, 0x1f, 0x62}, {@local, 0x4e21, 0x10000, 0x1f, 0xfffffbff, 0x95}}, 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:34 executing program 5 (fault-call:3 fault-nth:30): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 585.359491][ T48] usb 3-1: can't set config #0, error -71 [ 585.373119][ T48] usb 3-1: USB disconnect, device number 124 [ 585.431892][T22279] FAULT_INJECTION: forcing a failure. [ 585.431892][T22279] name failslab, interval 1, probability 0, space 0, times 0 [ 585.456990][T22281] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20000 [ 585.476293][T22279] CPU: 0 PID: 22279 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 585.485068][T22279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.495187][T22279] Call Trace: [ 585.498647][T22279] dump_stack+0x10f/0x19d [ 585.503056][T22279] should_fail+0x23c/0x250 [ 585.507462][T22279] __should_failslab+0x81/0x90 [ 585.512243][T22279] should_failslab+0x5/0x20 [ 585.517089][T22279] kmem_cache_alloc+0x29/0x2b0 [ 585.521927][T22279] ? ext4_mb_new_blocks+0x1ef/0xcf0 [ 585.527116][T22279] ext4_mb_new_blocks+0x1ef/0xcf0 [ 585.532177][T22279] ext4_ext_map_blocks+0x164e/0x20c0 [ 585.537524][T22279] ext4_map_blocks+0x6d3/0xf60 [ 585.543282][T22279] ? __brelse+0x2c/0x50 [ 585.547428][T22279] ext4_getblk+0x67/0x2e0 [ 585.551792][T22279] ext4_bread+0x3a/0x1f0 [ 585.556043][T22279] ext4_append+0xda/0x1c0 [ 585.560618][T22279] ext4_mkdir+0x4b6/0xc90 [ 585.564954][T22279] ? generic_permission+0xe7/0x3e0 [ 585.570052][T22279] ? inode_permission+0x61/0x330 [ 585.574980][T22279] vfs_mkdir+0x288/0x370 [ 585.579211][T22279] do_mkdirat+0x132/0x220 [ 585.583539][T22279] __x64_sys_mkdir+0x32/0x40 [ 585.588116][T22279] do_syscall_64+0x51/0xb0 [ 585.592633][T22279] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.598509][T22279] RIP: 0033:0x45bfa7 [ 585.602456][T22279] Code: Bad RIP value. [ 585.606507][T22279] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 585.614902][T22279] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 585.622860][T22279] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 21:33:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x0, 0x10}, 0x18) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{}, {r2, r3/1000+60000}}, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:33:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 585.630885][T22279] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 585.638847][T22279] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 585.642459][T22281] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20000 [ 585.646800][T22279] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001980)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private2}}, &(0x7f0000001a80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001ac0)={'wg0\x00', r1}) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 585.819450][ T3895] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 585.909467][ T48] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 585.949435][ T9918] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 586.079440][ T3895] usb 5-1: Using ep0 maxpacket: 32 [ 586.119468][ T3895] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 586.179424][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 586.199445][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 586.229879][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.241413][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 586.249124][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.258985][ T9918] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 586.339426][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.349718][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.360691][ T9918] usb 2-1: config 0 has no interfaces? [ 586.366639][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.379822][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.479437][ T9918] usb 2-1: config 0 has no interfaces? [ 586.485063][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.495180][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.506188][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.520461][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.579860][ T9918] usb 2-1: config 0 has no interfaces? [ 586.639746][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.651045][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.662290][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.676135][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.686386][ T9918] usb 2-1: config 0 has no interfaces? [ 586.779433][ T9918] usb 2-1: config 0 has no interfaces? [ 586.785041][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.796653][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.808231][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.818647][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.869407][ T9918] usb 2-1: config 0 has no interfaces? [ 586.919650][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.930561][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.940668][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.951271][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.979675][ T9918] usb 2-1: config 0 has no interfaces? [ 587.049661][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.060577][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.070675][ T9918] usb 2-1: config 0 has no interfaces? [ 587.076138][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.087356][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.209391][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.221231][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.231618][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.242328][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.269446][ T9918] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 587.278587][ T9918] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 587.289625][ T9918] usb 2-1: Product: syz [ 587.293783][ T9918] usb 2-1: Manufacturer: syz [ 587.298384][ T9918] usb 2-1: SerialNumber: syz [ 587.306451][ T9918] usb 2-1: config 0 descriptor?? [ 587.330037][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.340185][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.409367][ T3895] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 587.418663][ T3895] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 587.427202][ T3895] usb 5-1: Product: syz [ 587.431456][ T3895] usb 5-1: Manufacturer: syz [ 587.436032][ T3895] usb 5-1: SerialNumber: syz [ 587.445022][ T3895] usb 5-1: config 0 descriptor?? [ 587.493235][ T3895] hub 5-1:0.0: USB hub found [ 587.510437][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 587.519580][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 587.527798][ T48] usb 3-1: Product: syz [ 587.533526][ T48] usb 3-1: Manufacturer: syz [ 587.538205][ T48] usb 3-1: SerialNumber: syz [ 587.543950][ T48] usb 3-1: config 0 descriptor?? [ 587.556981][ T9936] usb 2-1: USB disconnect, device number 110 [ 587.579518][ T48] hub 3-1:0.0: bad descriptor, ignoring hub [ 587.585542][ T48] hub: probe of 3-1:0.0 failed with error -5 [ 587.596935][ T48] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 587.769292][ T3895] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 587.849861][ T3895] usb 5-1: USB disconnect, device number 61 [ 588.339252][ T9936] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 588.589207][ T9936] usb 2-1: Using ep0 maxpacket: 32 [ 588.639262][ T9936] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 588.719575][ T9936] usb 2-1: config 0 has no interfaces? 21:33:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:38 executing program 5 (fault-call:3 fault-nth:31): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 588.804441][ T9936] usb 2-1: config 0 has no interfaces? [ 588.857479][T22344] FAULT_INJECTION: forcing a failure. [ 588.857479][T22344] name failslab, interval 1, probability 0, space 0, times 0 [ 588.887915][T22344] CPU: 0 PID: 22344 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 588.896603][T22344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.906643][T22344] Call Trace: [ 588.909954][T22344] dump_stack+0x10f/0x19d [ 588.914363][T22344] should_fail+0x23c/0x250 [ 588.918769][T22344] __should_failslab+0x81/0x90 [ 588.923555][T22344] should_failslab+0x5/0x20 [ 588.930731][T22344] kmem_cache_alloc+0x29/0x2b0 [ 588.935513][T22344] ? ext4_mb_new_blocks+0x1ef/0xcf0 [ 588.941049][T22344] ext4_mb_new_blocks+0x1ef/0xcf0 [ 588.946121][T22344] ext4_ext_map_blocks+0x164e/0x20c0 [ 588.951513][T22344] ext4_map_blocks+0x6d3/0xf60 [ 588.957481][T22344] ? __brelse+0x2c/0x50 [ 588.961680][T22344] ext4_getblk+0x67/0x2e0 [ 588.966001][T22344] ext4_bread+0x3a/0x1f0 [ 588.970239][T22344] ext4_append+0xda/0x1c0 [ 588.974826][T22344] ext4_mkdir+0x4b6/0xc90 [ 588.979306][T22344] ? generic_permission+0xe7/0x3e0 [ 588.984492][T22344] ? inode_permission+0x61/0x330 [ 588.989500][T22344] vfs_mkdir+0x288/0x370 [ 588.993768][T22344] do_mkdirat+0x132/0x220 [ 588.998922][T22344] __x64_sys_mkdir+0x32/0x40 [ 589.003532][T22344] do_syscall_64+0x51/0xb0 21:33:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x2df4, 0xfffffff9, 0x200c, 0x4, 0xc, 0x8, 0x1, 0x2}}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x30d, 0xff, 0xfd, 0xab, 0x5, @remote}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) write$6lowpan_enable(r4, &(0x7f0000000100)='1', 0x1) [ 589.007942][T22344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 589.014157][T22344] RIP: 0033:0x45bfa7 [ 589.018029][T22344] Code: Bad RIP value. [ 589.022530][T22344] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 589.031044][T22344] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 589.039237][T22344] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 589.047208][T22344] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 21:33:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {r2, r3/1000+60000}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x90040, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400800, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) [ 589.055266][T22344] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 589.063445][T22344] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:38 executing program 5 (fault-call:3 fault-nth:32): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 589.109159][ T9936] usb 2-1: unable to read config index 2 descriptor/all [ 589.116486][ T9936] usb 2-1: can't read configurations, error -71 21:33:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) get_robust_list(r3, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f00000002c0)={&(0x7f0000000280)}, 0x0, &(0x7f0000000300)}, &(0x7f00000003c0)=0x18) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000000c0)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) 21:33:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000040)=0x100000001, 0x2d) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) ioctl(r1, 0x3, &(0x7f0000000080)="7b591819925ebbe13fb140e88af6ddb1f439b9f589ed4fc0c17a072a8331655e6be02bfac1fc44984ac6af7421c794452545cf7b9dd5128602698b712e564d86ca322a3da61b946ef1b88d965a7eaa001a22478e8874a83aba2ddbc557eb649bce4cc74fa52a5a5f117c16060a7b0ef4721f71b22a1893162d5d82c9ee035b5cfd570508268908fd4182f31ac9d9c85efe00cd239b300774401348d897effe00c8a79f1337a4eb8a01805e83c6b4633f27bc0906be632e9d0c7ec4fc456181d67d6a8acfb1") setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000540)="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", 0x308, 0x40010, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 589.209624][T22374] FAULT_INJECTION: forcing a failure. [ 589.209624][T22374] name failslab, interval 1, probability 0, space 0, times 0 [ 589.222784][T22374] CPU: 0 PID: 22374 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 589.231730][T22374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.241940][T22374] Call Trace: [ 589.245233][T22374] dump_stack+0x10f/0x19d [ 589.249597][T22374] should_fail+0x23c/0x250 [ 589.254047][T22374] __should_failslab+0x81/0x90 [ 589.258902][T22374] should_failslab+0x5/0x20 [ 589.263401][T22374] kmem_cache_alloc+0x29/0x2b0 [ 589.268158][T22374] ? ext4_mb_new_blocks+0x2bd/0xcf0 [ 589.273360][T22374] ext4_mb_new_blocks+0x2bd/0xcf0 [ 589.278391][T22374] ext4_ext_map_blocks+0x164e/0x20c0 [ 589.283744][T22374] ext4_map_blocks+0x6d3/0xf60 [ 589.288778][T22374] ? __brelse+0x2c/0x50 [ 589.292934][T22374] ext4_getblk+0x67/0x2e0 [ 589.297261][T22374] ext4_bread+0x3a/0x1f0 [ 589.301499][T22374] ext4_append+0xda/0x1c0 21:33:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0x73, 0x41414770, 0x5, 0x3d, 0x3, @stepwise={{0x5, 0x10001}, {0x9, 0x1ff}, {0x9, 0x1a}}}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xd47, 0x4240) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 589.305821][T22374] ext4_mkdir+0x4b6/0xc90 [ 589.310869][T22374] ? generic_permission+0xe7/0x3e0 [ 589.317505][T22374] ? inode_permission+0x61/0x330 [ 589.322613][T22374] vfs_mkdir+0x288/0x370 [ 589.327471][T22374] do_mkdirat+0x132/0x220 [ 589.331813][T22374] __x64_sys_mkdir+0x32/0x40 [ 589.336403][T22374] do_syscall_64+0x51/0xb0 [ 589.340819][T22374] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 589.346705][T22374] RIP: 0033:0x45bfa7 [ 589.350583][T22374] Code: Bad RIP value. [ 589.354985][T22374] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 589.363646][T22374] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045bfa7 [ 589.373099][T22374] RDX: 0000000000000007 RSI: 00000000000001ff RDI: 0000000020000280 [ 589.381264][T22374] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 589.389589][T22374] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 589.397549][T22374] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 589.409124][ T5] usb 3-1: reset high-speed USB device number 125 using dummy_hcd [ 589.409299][ T3895] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 589.499131][ T9936] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 589.659220][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 589.699466][ T5] usb 3-1: device firmware changed [ 589.704813][ T5] usb 3-1: USB disconnect, device number 125 [ 589.729105][ T3895] usb 5-1: Using ep0 maxpacket: 32 [ 589.739222][ T9936] usb 2-1: Using ep0 maxpacket: 32 [ 589.770651][ T3895] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 589.779698][ T9936] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 589.860455][ T9936] usb 2-1: config 0 has no interfaces? [ 589.880938][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.892522][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.939606][ T9936] usb 2-1: config 0 has no interfaces? [ 589.989539][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.000849][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.019200][ T9936] usb 2-1: config 0 has no interfaces? [ 590.059504][ T5] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 590.089481][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.099469][ T9936] usb 2-1: config 0 has no interfaces? [ 590.100769][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.179367][ T9936] usb 2-1: config 0 has no interfaces? [ 590.219523][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.231784][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.259438][ T9936] usb 2-1: config 0 has no interfaces? [ 590.300433][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 590.319889][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.330915][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.339509][ T5] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 590.348320][ T9936] usb 2-1: config 0 has no interfaces? [ 590.429455][ T9936] usb 2-1: config 0 has no interfaces? [ 590.429748][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.435095][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.446247][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.539361][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.559847][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.570771][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.599307][ T9936] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 590.608556][ T9936] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 590.617457][ T9936] usb 2-1: Product: syz [ 590.621709][ T9936] usb 2-1: Manufacturer: syz [ 590.626316][ T9936] usb 2-1: SerialNumber: syz [ 590.631499][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.646383][ T9936] usb 2-1: config 0 descriptor?? [ 590.659279][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.670701][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.719132][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.809359][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.859071][ T3895] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 590.868173][ T3895] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 590.877099][ T3895] usb 5-1: Product: syz [ 590.881647][ T3895] usb 5-1: Manufacturer: syz [ 590.886218][ T3895] usb 5-1: SerialNumber: syz [ 590.893937][ T9047] usb 2-1: USB disconnect, device number 112 [ 590.895240][ T3895] usb 5-1: config 0 descriptor?? [ 590.902302][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.959333][ T3895] hub 5-1:0.0: USB hub found [ 590.999042][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.089327][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.239056][ T3895] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 591.259077][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 591.268297][ T5] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 591.276912][ T5] usb 3-1: Product: syz [ 591.281287][ T5] usb 3-1: Manufacturer: syz [ 591.285893][ T5] usb 3-1: SerialNumber: syz [ 591.293316][ T5] usb 3-1: config 0 descriptor?? [ 591.310357][ T3895] usb 5-1: USB disconnect, device number 62 [ 591.329286][ T5] hub 3-1:0.0: bad descriptor, ignoring hub [ 591.335205][ T5] hub: probe of 3-1:0.0 failed with error -5 [ 591.343567][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:33:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:42 executing program 5 (fault-call:3 fault-nth:33): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000080)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000280)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8bec6fd22d25b523c576a20d3c0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a12d1bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc6ac569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc940600000078548299340d8fdef8", 0x25c, 0x40010, 0x0, 0x0) 21:33:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x13, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = gettid() tkill(r5, 0x1004000000013) fcntl$setown(r4, 0x8, r5) 21:33:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 592.604063][T22433] FAULT_INJECTION: forcing a failure. [ 592.604063][T22433] name failslab, interval 1, probability 0, space 0, times 0 [ 592.616903][T22433] CPU: 0 PID: 22433 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 592.625737][T22433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.635862][T22433] Call Trace: [ 592.639231][T22433] dump_stack+0x10f/0x19d [ 592.643552][T22433] should_fail+0x23c/0x250 [ 592.648004][T22433] __should_failslab+0x81/0x90 [ 592.652839][T22433] ? __se_sys_mount+0x3a/0x100 [ 592.657616][T22433] should_failslab+0x5/0x20 [ 592.662207][T22433] __kmalloc_track_caller+0x41/0x2d0 [ 592.667565][T22433] ? strnlen_user+0x166/0x1f0 [ 592.672256][T22433] strndup_user+0x73/0x120 [ 592.676800][T22433] __se_sys_mount+0x3a/0x100 [ 592.681378][T22433] __x64_sys_mount+0x63/0x70 [ 592.685974][T22433] do_syscall_64+0x51/0xb0 [ 592.690989][T22433] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 592.696894][T22433] RIP: 0033:0x45f57a 21:33:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x103300, 0x0) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) 21:33:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="f1100ee4de666520506ec5404c88dacb986c65438c2e9f7e4234d9074b4d92e8ee4ddd976781d864258a00138ef2578107bb71966e263a5ea5ce80bcea47b0b8e7eef45e10c9a92fef11c0a7758aed0ed4247ee3c80ec0f2e5c36bba8dce16cadd501ca909cbbbce70d299bd273bf89aa4b76035da98b5dd3a87ea5bbae5b1a9a5963e7a51dd6a2b116fbdabdc84316f7d71eeb0fa76fcb8786908fc1a998fb0770aec93fd7fde3ef916af5ff358c424c307390f6babcd83fcf59d731f4ae334eb8e890fe59d1b1e6e903579b5c2896a4be9e1a17a18bdbebf948fbb719ead6f839317524126c62350f7") r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 592.700765][T22433] Code: Bad RIP value. [ 592.704827][T22433] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 592.713260][T22433] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 592.721309][T22433] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 592.729270][T22433] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 592.737228][T22433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 592.745204][T22433] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000100)={0x3, 0x2}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r1) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000140)={0xb6a, 0x6, 0x0, 0xff, 0x40, 0xd, 0x24, "887b6431caea83b3d508f62d709b7b9f8c3bb1d9", "467e6a2b06a791eea4625dcfb6c27118b1d8ad51"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$ax25(r4, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:33:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0xa10a00) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e25, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r4 = pidfd_getfd(r2, r3, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000140)={0x9, 0x1, &(0x7f0000000000)=[0x1], &(0x7f00000000c0)=[0x401, 0x7f, 0x9579, 0x1, 0x7], &(0x7f0000000100)=[0x8001, 0x9, 0xc8b8, 0xffff, 0x2]}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f00000008c0)=""/246, 0xf6}], 0x6, &(0x7f00000009c0)=""/162, 0xa2}, 0x100) sendto$inet(r4, &(0x7f0000000640)="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", 0xfffffffffffffebe, 0x44090, 0x0, 0x0) [ 592.908857][ T5] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 593.078891][T19955] usb 3-1: reset high-speed USB device number 126 using dummy_hcd [ 593.086939][ T9918] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 593.158815][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 593.199164][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 593.288827][ T5] usb 2-1: config 0 has no interfaces? [ 593.368802][T19955] usb 3-1: Using ep0 maxpacket: 32 [ 593.369164][ T5] usb 2-1: config 0 has no interfaces? [ 593.373984][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 593.429582][T19955] usb 3-1: device firmware changed [ 593.434907][ T9918] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 593.442684][T19955] usb 3-1: USB disconnect, device number 126 [ 593.459369][ T5] usb 2-1: config 0 has no interfaces? [ 593.539157][ T5] usb 2-1: config 0 has no interfaces? [ 593.548862][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.560057][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.619209][ T5] usb 2-1: config 0 has no interfaces? [ 593.649363][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.660546][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.699513][ T5] usb 2-1: config 0 has no interfaces? [ 593.769182][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.779259][ T5] usb 2-1: config 0 has no interfaces? [ 593.780199][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.819654][T19955] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 593.859046][ T5] usb 2-1: config 0 has no interfaces? [ 593.878801][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.889714][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.998803][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.009703][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.018819][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 594.028526][ T5] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 594.036795][ T5] usb 2-1: Product: syz [ 594.041153][ T5] usb 2-1: Manufacturer: syz [ 594.045730][ T5] usb 2-1: SerialNumber: syz [ 594.054122][ T5] usb 2-1: config 0 descriptor?? [ 594.068922][T19955] usb 3-1: Using ep0 maxpacket: 32 [ 594.118845][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.129794][T19955] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 594.137519][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.208775][T19955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.228838][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.239798][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.298756][T19955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.339169][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.350217][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.398869][T19955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.509353][T19955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.558746][ T9918] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 594.567939][ T9918] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 594.576366][ T9918] usb 5-1: Product: syz [ 594.580614][ T9918] usb 5-1: Manufacturer: syz [ 594.585359][ T9918] usb 5-1: SerialNumber: syz [ 594.591936][ T9918] usb 5-1: config 0 descriptor?? [ 594.609003][T19955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.639310][ T9918] hub 5-1:0.0: USB hub found [ 594.720101][T19955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.828725][T19955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.919192][T19955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.078692][ T9918] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 595.108713][T19955] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 595.117769][T19955] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 595.127436][T19955] usb 3-1: Product: syz [ 595.131621][T19955] usb 3-1: Manufacturer: syz [ 595.136190][T19955] usb 3-1: SerialNumber: syz [ 595.143470][T19955] usb 3-1: config 0 descriptor?? [ 595.169324][ T9918] usb 5-1: USB disconnect, device number 63 [ 595.180458][T19955] hub 3-1:0.0: bad descriptor, ignoring hub [ 595.186385][T19955] hub: probe of 3-1:0.0 failed with error -5 [ 595.197744][T19955] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 595.562736][ T9918] usb 2-1: USB disconnect, device number 113 21:33:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:45 executing program 5 (fault-call:3 fault-nth:34): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0xdc, 0xfffffff8, 0xfffeffff, 0x6, 0x6}) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) [ 596.447275][T22516] FAULT_INJECTION: forcing a failure. [ 596.447275][T22516] name failslab, interval 1, probability 0, space 0, times 0 [ 596.464167][T22516] CPU: 0 PID: 22516 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 596.472838][T22516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.482962][T22516] Call Trace: [ 596.486242][T22516] dump_stack+0x10f/0x19d [ 596.490576][T22516] should_fail+0x23c/0x250 [ 596.494985][T22516] __should_failslab+0x81/0x90 [ 596.500084][T22516] ? __se_sys_mount+0x7d/0x100 [ 596.504836][T22516] should_failslab+0x5/0x20 [ 596.509379][T22516] __kmalloc_track_caller+0x41/0x2d0 [ 596.514662][T22516] ? strnlen_user+0x166/0x1f0 [ 596.519330][T22516] strndup_user+0x73/0x120 [ 596.523876][T22516] __se_sys_mount+0x7d/0x100 [ 596.528454][T22516] __x64_sys_mount+0x63/0x70 [ 596.533046][T22516] do_syscall_64+0x51/0xb0 [ 596.537456][T22516] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 596.543398][T22516] RIP: 0033:0x45f57a [ 596.547270][T22516] Code: Bad RIP value. [ 596.551306][T22516] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 596.559804][T22516] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 596.567852][T22516] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 596.575921][T22516] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 596.583916][T22516] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 21:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="02eeff000e00000000000000000000000500fc6f6427610600000000000a00000000000000000000000000000000000000000000010000000000000000020001000000000000000000000000000500050000003e369d14fe3200000a00000000000000fe8000000000000000000000000000ff0000000000000000910d8a995a7be833ae5f15c1281115c9b95ff12a4539cd757e291eb8ea2b474c0736aafbcb945070435bddce8f51fd9cc94a8952af76e74c1f06889a4340c29aef600727f2eadb8178441f"], 0x70}}, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r2}, 0x9, 0xfff, 0x30}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x1004000000013) process_vm_readv(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/177, 0xb1}], 0x5, &(0x7f0000000000)=[{&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/100, 0x64}], 0x3, 0x0) [ 596.591874][T22516] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:46 executing program 5 (fault-call:3 fault-nth:35): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 596.686827][T22539] FAULT_INJECTION: forcing a failure. [ 596.686827][T22539] name failslab, interval 1, probability 0, space 0, times 0 [ 596.700161][T22539] CPU: 1 PID: 22539 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 596.708889][T22539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.719040][T22539] Call Trace: [ 596.722324][T22539] dump_stack+0x10f/0x19d [ 596.726636][T22539] should_fail+0x23c/0x250 [ 596.731058][T22539] __should_failslab+0x81/0x90 [ 596.735938][T22539] should_failslab+0x5/0x20 [ 596.740514][T22539] kmem_cache_alloc_trace+0x32/0x2c0 [ 596.747361][T22539] ? copy_mount_options+0x43/0x130 [ 596.752556][T22539] copy_mount_options+0x43/0x130 [ 596.757533][T22539] __se_sys_mount+0xa8/0x100 [ 596.760300][ T9936] usb 3-1: reset high-speed USB device number 127 using dummy_hcd [ 596.762452][T22539] __x64_sys_mount+0x63/0x70 [ 596.770240][ T5] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 596.774815][T22539] do_syscall_64+0x51/0xb0 [ 596.786671][T22539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 596.792546][T22539] RIP: 0033:0x45f57a [ 596.796417][T22539] Code: Bad RIP value. [ 596.800476][T22539] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 596.809194][T22539] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 596.817198][T22539] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 596.826012][T22539] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 596.833966][T22539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 596.841999][T22539] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 596.850642][ T9918] usb 2-1: new high-speed USB device number 114 using dummy_hcd 21:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$isdn(0x22, 0x3, 0x25) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) 21:33:46 executing program 5 (fault-call:3 fault-nth:36): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 596.956219][T22549] FAULT_INJECTION: forcing a failure. [ 596.956219][T22549] name failslab, interval 1, probability 0, space 0, times 0 [ 596.975743][T22549] CPU: 1 PID: 22549 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 596.984423][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.995007][T22549] Call Trace: [ 596.998322][T22549] dump_stack+0x10f/0x19d [ 597.002646][T22549] should_fail+0x23c/0x250 [ 597.007047][T22549] __should_failslab+0x81/0x90 [ 597.012066][T22549] should_failslab+0x5/0x20 [ 597.016571][T22549] kmem_cache_alloc+0x29/0x2b0 [ 597.021328][T22549] ? getname_flags+0x84/0x3d0 [ 597.026000][T22549] getname_flags+0x84/0x3d0 [ 597.030063][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 597.030583][T22549] ? __list_add_valid+0x28/0x90 [ 597.035690][ T9936] usb 3-1: Using ep0 maxpacket: 32 [ 597.040594][T22549] user_path_at_empty+0x28/0x50 [ 597.040604][T22549] do_mount+0xbf/0x1bd0 [ 597.040614][T22549] ? __check_object_size+0x253/0x310 [ 597.040625][T22549] ? _copy_from_user+0x93/0xd0 [ 597.040638][T22549] __se_sys_mount+0xd3/0x100 [ 597.069344][T22549] __x64_sys_mount+0x63/0x70 [ 597.070759][ T5] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 597.073919][T22549] do_syscall_64+0x51/0xb0 [ 597.086001][T22549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 597.091216][ T9936] usb 3-1: device firmware changed [ 597.091875][T22549] RIP: 0033:0x45f57a [ 597.097221][ T9936] usb 3-1: USB disconnect, device number 127 [ 597.100862][T22549] Code: Bad RIP value. [ 597.100868][T22549] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 597.100902][T22549] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 597.100908][T22549] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 597.100924][T22549] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 597.100935][T22549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 21:33:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 597.151111][T22549] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 597.158503][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.176758][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.258479][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.278532][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.348558][ T9918] usb 2-1: device descriptor read/64, error 18 [ 597.358589][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.369551][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.458512][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.469487][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.480044][ T9936] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 597.558497][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.569522][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.658775][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.670936][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.718468][ T9936] usb 3-1: Using ep0 maxpacket: 32 [ 597.758906][ T9936] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 597.766738][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.768399][ T9918] usb 2-1: device descriptor read/64, error 18 [ 597.779473][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.858446][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.871399][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.882292][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.958484][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.048405][ T9918] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 598.048644][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 598.067650][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.080510][ T5] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 598.088947][ T5] usb 5-1: Product: syz [ 598.093198][ T5] usb 5-1: Manufacturer: syz [ 598.097773][ T5] usb 5-1: SerialNumber: syz [ 598.104611][ T5] usb 5-1: config 0 descriptor?? [ 598.149968][ T5] hub 5-1:0.0: USB hub found [ 598.163131][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.248444][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.338750][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.358459][ T9918] usb 2-1: device descriptor read/64, error 18 [ 598.428740][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.518711][ T9936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.588379][ T5] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 598.660608][ T5] usb 5-1: USB disconnect, device number 64 [ 598.688378][ T9936] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 598.697440][ T9936] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 598.706006][ T9936] usb 3-1: Product: syz [ 598.710281][ T9936] usb 3-1: Manufacturer: syz [ 598.714900][ T9936] usb 3-1: SerialNumber: syz [ 598.721914][ T9936] usb 3-1: config 0 descriptor?? [ 598.749633][ T9918] usb 2-1: device descriptor read/64, error 18 [ 598.760267][ T9936] hub 3-1:0.0: bad descriptor, ignoring hub [ 598.766227][ T9936] hub: probe of 3-1:0.0 failed with error -5 [ 598.775461][ T9936] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 598.868352][ T9918] usb usb2-port1: attempt power cycle 21:33:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db00090400000103010100092500000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x805, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01009fcd77f200022c5f69bac2d73f6d235dbce0a66d88e33260544889f37b21ad7c35232ff4d9b3988a56f53fe887d955bf4604f3fbd02b82ccd2f876be4b9dd0126e3ac416c725dc37e2c524b9525112cc6744f5396070f45d783ef22a7a43a0488386a70a15b2f5ad23bb69c2225a1ab5bf5311c863f5bd781baf8b06bad2274e28a6a4c818f868b562ef2274aaf54a8f0eed0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e21, 0x6, @remote}}, 0x1f}, 0x90) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0_to_batadv\x00') setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:49 executing program 5 (fault-call:3 fault-nth:37): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x6, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "300a72a49cb938b1f89d1793fea7bb60"}, 0x11, 0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x2000, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x5, 0x3, 0x4, 0x2000, 0xd1, {r6, r7/1000+10000}, {0x3, 0x1, 0x8, 0x20, 0x6, 0x1c, "53bb9992"}, 0x0, 0x4, @userptr=0x100000000, 0x10001, 0x0, r1}) 21:33:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_map={0x0, 0x1, 0x400, 0x5, 0x7, 0x2}}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000540)=0x2) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat2(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0xc0, 0x80, 0x1}, 0x18) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7748d8c54112068e6cc1e2e4a40e3fb39eb1d8ca23bcc0cb4687f7495203b054eb312fbe42c1f5e62bbfd9c6f06516bd8f677c5dac8a1588b26427f6b3c83cd9a6c8456a7f20183d4ced476904c9fb34122c71fa10ffffa35e047f5c6f4c958be391ac8d2631164f0fa43758ddc0929328eb89442f5344031fd13f9e4f72", @ANYRES16=r7, @ANYBLOB="0101000000000000000002000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x800, 0x1, 0xffe0000, 0x4, 0x81]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000}, 0x4) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 600.032489][T22592] FAULT_INJECTION: forcing a failure. [ 600.032489][T22592] name failslab, interval 1, probability 0, space 0, times 0 [ 600.063840][T22592] CPU: 0 PID: 22592 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 600.072528][T22592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:33:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000080)=""/191, 0xbf, 0x2020, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONCLEX(r1, 0x5450) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x91, 0x1, 0x0, 0xe1b}) [ 600.082566][T22592] Call Trace: [ 600.085851][T22592] dump_stack+0x10f/0x19d [ 600.090434][T22592] should_fail+0x23c/0x250 [ 600.094842][T22592] __should_failslab+0x81/0x90 [ 600.099596][T22592] ? tomoyo_encode2+0x1e2/0x350 [ 600.104581][T22592] should_failslab+0x5/0x20 [ 600.109067][T22592] __kmalloc+0x43/0x2d0 [ 600.113217][T22592] tomoyo_encode2+0x1e2/0x350 [ 600.117881][T22592] tomoyo_encode+0x25/0x30 [ 600.122288][T22592] tomoyo_mount_permission+0x1e5/0x740 [ 600.127739][T22592] ? debug_smp_processor_id+0x18/0x20 [ 600.133128][T22592] ? ___cache_free+0x2a/0x510 [ 600.137797][T22592] ? filename_lookup+0x2b6/0x380 [ 600.142815][T22592] tomoyo_sb_mount+0x31/0x40 [ 600.147399][T22592] security_sb_mount+0x5c/0xb0 [ 600.152155][T22592] do_mount+0xf1/0x1bd0 [ 600.156300][T22592] ? __check_object_size+0x253/0x310 [ 600.161578][T22592] ? _copy_from_user+0x93/0xd0 [ 600.166369][T22592] __se_sys_mount+0xd3/0x100 [ 600.171071][T22592] __x64_sys_mount+0x63/0x70 [ 600.175748][T22592] do_syscall_64+0x51/0xb0 21:33:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x6e, 0x0}}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101002, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x6d, 0x40, &(0x7f00000000c0)="9c7a0497fcd52825dc5177b006a86691b22f6c01c9235f903a31309cb8d8a2c811c09bab2bb3cff18b257609abc872fc610015e51fefac96b45bf9bc86c35edf79a95dbb247621b097c2145c585454347e6d7175aebf6c436176bcfc4db3864d6bc5df3ac0fc8c10ec460954f5"}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 600.180360][T22592] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 600.186384][T22592] RIP: 0033:0x45f57a [ 600.190286][T22592] Code: Bad RIP value. [ 600.194440][T22592] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 600.202924][T22592] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 600.211141][T22592] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 600.220029][T22592] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 21:33:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 21:33:49 executing program 5 (fault-call:3 fault-nth:38): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 600.228074][T22592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 600.236123][T22592] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 600.259996][ T3895] usb 3-1: reset high-speed USB device number 2 using dummy_hcd 21:33:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x40, 0x9, {}, {0x3, 0x8, 0x7f, 0x0, 0x8, 0xb1, "3af812c1"}, 0x40, 0x1, @offset=0x2150, 0x401, 0x0, r5}) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) [ 600.331077][T22618] FAULT_INJECTION: forcing a failure. [ 600.331077][T22618] name failslab, interval 1, probability 0, space 0, times 0 [ 600.372967][T22618] CPU: 1 PID: 22618 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 600.381938][T22618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.391981][T22618] Call Trace: [ 600.395311][T22618] dump_stack+0x10f/0x19d [ 600.399726][T22618] should_fail+0x23c/0x250 [ 600.404135][T22618] __should_failslab+0x81/0x90 [ 600.410108][T22618] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 600.415829][T22618] should_failslab+0x5/0x20 [ 600.420464][T22618] __kmalloc+0x43/0x2d0 [ 600.424729][T22618] ? tomoyo_encode2+0x1e2/0x350 [ 600.429672][T22618] tomoyo_realpath_from_path+0x98/0x3c0 [ 600.437256][T22618] tomoyo_mount_permission+0x228/0x740 [ 600.442761][T22618] ? debug_smp_processor_id+0x18/0x20 [ 600.448300][T22618] ? ___cache_free+0x2a/0x510 [ 600.452966][T22618] ? filename_lookup+0x2b6/0x380 [ 600.457901][T22618] tomoyo_sb_mount+0x31/0x40 [ 600.462544][T22618] security_sb_mount+0x5c/0xb0 [ 600.467328][T22618] do_mount+0xf1/0x1bd0 [ 600.471483][T22618] ? __check_object_size+0x253/0x310 [ 600.476762][T22618] ? _copy_from_user+0x93/0xd0 [ 600.481702][T22618] __se_sys_mount+0xd3/0x100 [ 600.486375][T22618] __x64_sys_mount+0x63/0x70 [ 600.491037][T22618] do_syscall_64+0x51/0xb0 [ 600.495452][T22618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 600.501447][T22618] RIP: 0033:0x45f57a [ 600.505350][T22618] Code: Bad RIP value. [ 600.509413][T22618] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 600.517810][T22618] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 600.525802][T22618] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 600.533952][T22618] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 600.543129][T22618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 600.554136][T22618] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 600.568786][ T5] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 600.579462][T22618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.628280][ T9918] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 600.678210][ T3895] usb 3-1: Using ep0 maxpacket: 32 [ 600.718512][ T3895] usb 3-1: device firmware changed [ 600.723713][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 600.729045][ T3895] usb 3-1: USB disconnect, device number 2 [ 600.768201][ T9918] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 600.818181][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 600.848236][ T9918] usb 2-1: config 0 has no interfaces? [ 600.868489][ T5] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 600.928268][ T9918] usb 2-1: config 0 has no interfaces? [ 600.948541][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.959496][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.008580][ T9918] usb 2-1: config 0 has no interfaces? [ 601.078463][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.088578][ T9918] usb 2-1: config 0 has no interfaces? [ 601.089554][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.098242][ T3895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 601.168183][ T9918] usb 2-1: config 0 has no interfaces? [ 601.198714][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.209685][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.248274][ T9918] usb 2-1: config 0 has no interfaces? [ 601.318565][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.330438][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.330507][ T9918] usb 2-1: config 0 has no interfaces? [ 601.348169][ T3895] usb 3-1: Using ep0 maxpacket: 32 [ 601.388449][ T3895] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 601.418148][ T9918] usb 2-1: config 0 has no interfaces? [ 601.419009][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.434895][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.468485][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.538862][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.550801][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.558803][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.578648][ T9918] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 601.587697][ T9918] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 601.596856][ T9918] usb 2-1: Product: syz [ 601.601381][ T9918] usb 2-1: Manufacturer: syz [ 601.606501][ T9918] usb 2-1: SerialNumber: syz [ 601.613475][ T9918] usb 2-1: config 0 descriptor?? [ 601.648410][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.658134][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.669393][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.738500][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.778193][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.789319][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.828400][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.870444][ T9936] usb 2-1: USB disconnect, device number 116 [ 601.918158][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.978160][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 601.987364][ T5] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 601.996072][ T5] usb 5-1: Product: syz [ 602.000529][ T5] usb 5-1: Manufacturer: syz [ 602.005454][ T5] usb 5-1: SerialNumber: syz [ 602.008539][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.011515][ T5] usb 5-1: config 0 descriptor?? [ 602.078397][ T5] hub 5-1:0.0: USB hub found [ 602.099511][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.268383][ T3895] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 602.277499][ T3895] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 602.287205][ T3895] usb 3-1: Product: syz [ 602.291417][ T3895] usb 3-1: Manufacturer: syz [ 602.296086][ T3895] usb 3-1: SerialNumber: syz [ 602.303132][ T3895] usb 3-1: config 0 descriptor?? [ 602.348328][ T3895] hub 3-1:0.0: bad descriptor, ignoring hub [ 602.354282][ T3895] hub: probe of 3-1:0.0 failed with error -5 [ 602.364143][ T3895] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 602.528092][ T5] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 602.618616][ T5] usb 5-1: USB disconnect, device number 65 21:33:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0x2710}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 21:33:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8927, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_data=&(0x7f0000000000)="1f048d822de4152222fe9f6d5c359a987ff77d72d2e297bd6353acd44a9fdaee"}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) 21:33:53 executing program 5 (fault-call:3 fault-nth:39): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x24000, 0x0) r3 = socket(0x11, 0x800000003, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r6, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000100)) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pfifo={{0xa, 0x1, 'pfifo\x00'}, {0x5}}]}, 0x5c}}, 0x0) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x3, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) 21:33:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db00090400000103010100092500000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x11, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r3}, 0x8) r4 = socket(0x1e, 0x805, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r3, 0x80, 0x0, 0xffff, 0x3, 0x2, 0xff, 0x101, {r6, @in6={{0xa, 0x4e23, 0x7707, @mcast1, 0x80}}, 0x0, 0x1000, 0xe435, 0x4, 0x3f}}, &(0x7f0000000000)=0xb0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 603.636354][T22681] FAULT_INJECTION: forcing a failure. [ 603.636354][T22681] name failslab, interval 1, probability 0, space 0, times 0 [ 603.677924][T22681] CPU: 0 PID: 22681 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 603.686655][T22681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.697159][T22681] Call Trace: [ 603.700457][T22681] dump_stack+0x10f/0x19d [ 603.704884][T22681] should_fail+0x23c/0x250 [ 603.709283][T22681] __should_failslab+0x81/0x90 [ 603.714026][T22681] ? tomoyo_encode2+0x1e2/0x350 [ 603.718936][T22681] should_failslab+0x5/0x20 [ 603.723413][T22681] __kmalloc+0x43/0x2d0 [ 603.727556][T22681] tomoyo_encode2+0x1e2/0x350 [ 603.732247][T22681] tomoyo_realpath_from_path+0x36e/0x3c0 [ 603.737931][T22681] tomoyo_mount_permission+0x228/0x740 [ 603.743460][T22681] ? debug_smp_processor_id+0x18/0x20 [ 603.748820][T22681] ? ___cache_free+0x2a/0x510 [ 603.753488][T22681] ? filename_lookup+0x2b6/0x380 [ 603.758418][T22681] tomoyo_sb_mount+0x31/0x40 [ 603.762999][T22681] security_sb_mount+0x5c/0xb0 [ 603.767827][T22681] do_mount+0xf1/0x1bd0 [ 603.771965][T22681] ? __check_object_size+0x253/0x310 [ 603.777236][T22681] ? _copy_from_user+0x93/0xd0 [ 603.782040][T22681] __se_sys_mount+0xd3/0x100 [ 603.786632][T22681] __x64_sys_mount+0x63/0x70 [ 603.791213][T22681] do_syscall_64+0x51/0xb0 [ 603.795982][T22681] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 603.801859][T22681] RIP: 0033:0x45f57a [ 603.805735][T22681] Code: Bad RIP value. [ 603.809784][T22681] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 603.818274][T22681] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a 21:33:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) fcntl$setsig(r2, 0xa, 0x17) [ 603.826231][T22681] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 603.836443][T22681] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 603.846959][T22681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 603.854941][T22681] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}]) io_getevents(0x0, 0x10001, 0x3, &(0x7f0000000380)=[{}, {}, {}], 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0203000005000000000000000000000005000600000000000a0000000000003f0000f90800000000000000000100000000000000efffffff000005000500000000000ac50300000009009610900000005500008000000000000000000000000000ff00000015000000000000000000003fb7f720edf3854e0c7efdfd02546528d57f9f907eec"], 0x70}}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f00000001c0)=""/44, &(0x7f0000000300)=0x2c) sendto(r4, &(0x7f0000000080)="b3baaee74ac4bc23e61a9afff112a0fbe2128ff145e2074c29be2d0c07788d22b63fb685c348d7d735eed050f2097113c3d3e38d1931b73a37585a49390d894121cbeca3686adfd4631150ccea70f9cadb2e2541fbf4438af6c17fcfb16cefb5d01ec5773bcfe564c1811936a50d63477a1462a7bbde315f1dfe912cfe0889543f35eb0b8475e0bf70d116a24c8fae8a8281dfe5bcb434f353c98b0d572bcc013a704b624719a62aa4d7d8ad3991ab64194e21c49447984b44a630d362195d66b2ed277796cf5caf6e30fb388cd8c1e66400742c1bf17027", 0xd8, 0x0, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:53 executing program 5 (fault-call:3 fault-nth:40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 603.907557][T22681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 604.015624][T22713] FAULT_INJECTION: forcing a failure. [ 604.015624][T22713] name failslab, interval 1, probability 0, space 0, times 0 [ 604.030023][T22713] CPU: 0 PID: 22713 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 604.038687][T22713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.048816][T22713] Call Trace: [ 604.052101][T22713] dump_stack+0x10f/0x19d [ 604.056433][T22713] should_fail+0x23c/0x250 [ 604.060832][T22713] __should_failslab+0x81/0x90 [ 604.065576][T22713] ? tomoyo_encode2+0x1e2/0x350 [ 604.070633][T22713] should_failslab+0x5/0x20 [ 604.075203][T22713] __kmalloc+0x43/0x2d0 [ 604.079381][T22713] tomoyo_encode2+0x1e2/0x350 [ 604.084113][T22713] tomoyo_realpath_from_path+0x36e/0x3c0 [ 604.089745][T22713] tomoyo_mount_permission+0x228/0x740 [ 604.095205][T22713] ? debug_smp_processor_id+0x18/0x20 [ 604.100600][T22713] ? ___cache_free+0x2a/0x510 [ 604.105260][T22713] ? filename_lookup+0x2b6/0x380 [ 604.110177][T22713] tomoyo_sb_mount+0x31/0x40 [ 604.114736][T22713] security_sb_mount+0x5c/0xb0 [ 604.119474][T22713] do_mount+0xf1/0x1bd0 [ 604.123679][T22713] ? __check_object_size+0x253/0x310 [ 604.128954][T22713] ? _copy_from_user+0x93/0xd0 [ 604.133779][T22713] __se_sys_mount+0xd3/0x100 [ 604.140611][T22713] __x64_sys_mount+0x63/0x70 [ 604.145184][T22713] do_syscall_64+0x51/0xb0 [ 604.149731][T22713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 604.155605][T22713] RIP: 0033:0x45f57a [ 604.159471][T22713] Code: Bad RIP value. [ 604.163520][T22713] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 604.171908][T22713] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 604.179947][T22713] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 604.187890][T22713] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 604.195917][T22713] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 604.203860][T22713] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:33:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x7, 0x4) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:33:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) r5 = getgid() write$P9_RSTATu(r2, &(0x7f0000000080)={0x59, 0x7d, 0x2, {{0x0, 0x43, 0x20, 0x81, {0x1, 0x0, 0x8}, 0x2000000, 0x2, 0x1, 0x1f, 0x2, '(+', 0x7, '\\[$+/[%', 0x6, ',){:[.', 0x1, '('}, 0x1, '|', r4, r5}}, 0x59) 21:33:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000440)={0x4, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x9a0919, 0x4, [], @ptr=0x1000}}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000480)) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000000)) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_pfifo={{0xa, 0x1, 'pfifo\x00'}, {0x5}}]}, 0x5c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @broadcast}, 0x22, r5}) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 604.217921][ T3895] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 604.227937][ T48] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 604.235818][ T9918] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 604.245434][T22713] ERROR: Out of memory at tomoyo_realpath_from_path. 21:33:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@hyper}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x204100, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) clone(0x4000, &(0x7f00000000c0)="035dc17a7267fa3bfe1b19d9ac4cde5f09d45906e2fe639a7284538f93fc6c01716807cfa0066cdb23c8bc8a4b826f6dcb8f1562f24f4e5e1fe1af60bb56a13aa9c06a0c787c584632d5851084dd114e5bbf25bb30601578f257a01372f6a6482620e4a500c9a3ed581fe7db28d05fab84b72ac61ce206a42a0a596d", &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="62fcf68a25452102") [ 604.477921][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 604.483375][ T3895] usb 3-1: Using ep0 maxpacket: 32 [ 604.509411][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 604.528668][ T3895] usb 3-1: device firmware changed [ 604.533989][ T48] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 604.545769][ T3895] usb 3-1: USB disconnect, device number 3 [ 604.551681][ T9918] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 604.657911][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.668842][ T48] usb 2-1: config 0 has no interfaces? [ 604.674343][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.767955][ T48] usb 2-1: config 0 has no interfaces? [ 604.773626][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.784877][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.857916][ T48] usb 2-1: config 0 has no interfaces? [ 604.878261][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.890553][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.927913][ T3895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 604.957904][ T48] usb 2-1: config 0 has no interfaces? [ 605.007977][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.018932][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.067941][ T48] usb 2-1: config 0 has no interfaces? [ 605.107970][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.118897][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.148228][ T48] usb 2-1: config 0 has no interfaces? [ 605.188207][ T3895] usb 3-1: Using ep0 maxpacket: 32 [ 605.208263][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.220141][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.230125][ T3895] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 605.238002][ T48] usb 2-1: config 0 has no interfaces? [ 605.328023][ T48] usb 2-1: config 0 has no interfaces? [ 605.333588][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.344729][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.354484][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.438246][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.448723][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.459584][ T9918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.508270][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 605.517399][ T48] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 605.525839][ T48] usb 2-1: Product: syz [ 605.530268][ T48] usb 2-1: Manufacturer: syz [ 605.534884][ T48] usb 2-1: SerialNumber: syz [ 605.539533][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.550132][ T48] usb 2-1: config 0 descriptor?? [ 605.657843][ T9918] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 605.667058][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.677961][ T9918] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 605.686201][ T9918] usb 5-1: Product: syz [ 605.690524][ T9918] usb 5-1: Manufacturer: syz [ 605.695162][ T9918] usb 5-1: SerialNumber: syz [ 605.702278][ T9918] usb 5-1: config 0 descriptor?? [ 605.739662][ T9918] hub 5-1:0.0: USB hub found [ 605.797850][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.859545][ T9937] usb 2-1: USB disconnect, device number 117 [ 605.897813][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.998156][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.088128][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.187757][ T9918] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 606.288034][ T3895] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 606.297808][ T9918] usb 5-1: USB disconnect, device number 66 [ 606.303745][ T3895] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 606.317965][ T3895] usb 3-1: Product: syz [ 606.322139][ T3895] usb 3-1: Manufacturer: syz [ 606.326723][ T3895] usb 3-1: SerialNumber: syz [ 606.335590][ T3895] usb 3-1: config 0 descriptor?? 21:33:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='\\\',$]+\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000000)={{0x2, @name="8db3321596ff21a5fdfb4e6ddd5f122bebc3f12107c7f633a581176683e3e1df"}, "1af2226bc81c6def090b3c6b40ee852b0bd4282bcc6cd226c6367becab1e909e"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000770000000000000079540328a21b09022ac42e019f76e75c099af7b00c20ab3832b94a49d871e7537af140d66e34ca55abe94960f208f9b74c20ed194b73ac6342cf6025f865e3ae28b53f96cc606ab733b077683d4fc79a7c33d6244c5a"], 0x0) [ 606.388000][ T3895] hub 3-1:0.0: bad descriptor, ignoring hub [ 606.394150][ T3895] hub: probe of 3-1:0.0 failed with error -5 [ 606.430144][ T3895] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 606.837718][ T9937] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 607.107660][ T9937] usb 2-1: device descriptor read/64, error 18 [ 607.497630][ T9937] usb 2-1: device descriptor read/64, error 18 21:33:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db00090400000103010100092500000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:33:57 executing program 5 (fault-call:3 fault-nth:41): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_ivalue=0x63}) r3 = dup(r2) syz_usb_connect$cdc_ecm(0x1, 0x16b, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x159, 0x1, 0x1, 0x0, 0x10, 0xc5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "44473975a3"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x5, 0x3ff, 0x6}, [@obex={0x5}, @ncm={0x6, 0x24, 0x1a, 0x7}, @acm={0x4}, @mdlm_detail={0x28, 0x24, 0x13, 0x37, "6f2d3d85800d72353856cc8168c77dd08baa576c3e62202071e50db99f68ebf6cd3f5e38"}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x9, 0xfb, 0x8}, @network_terminal={0x0, 0x24, 0xa, 0x1f, 0x5, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x1f, 0xb9, 0x40, 0x1}, 0x130, &(0x7f0000000400)={0x5, 0xf, 0x130, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "bf2c5b6522a441a22d1ba52aa4677711"}, @generic={0xf9, 0x10, 0xb, "494534596929b2133b7cb78b994d620eb1fb6b67e63ca53d25f8a907715167b30cd813bbc1c76948af03d240211ee3357bbca8604785331034e6bcf50afeff29dd3ae21f8c4b60ddae8b5b612a5cb49b6e0c64871b68baa3fe801e93bf7d649f61e734ca9096adaf5d84e5ebe55cae98d54736f444c33d20451965789deff46bb593a855add43c2b6aaec45916ba7100b8a82d615a0a42f9361253435803b46dd101a85a1eb0426671821da2a0b66b34183c389128620eadf68716678f4c5c1ce876e7f57e4956e3e9b2b97b1273494207ca74393611d96d5806f7037936fcd9bf0aff07b8f3db620450e843d8cc445acdef43761f96"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf7, 0x9, 0xf800}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b57a701913b4cf8e58cfd6245b38f8fe"}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x860}}, {0x8b, &(0x7f0000000540)=@string={0xffffffffffffff1d, 0x3, "17c9865771a0dfa1c89712f81986d02fb8a870c44f0f0d529bceccbabff38059403f6ad7a21b0f692832985291a6620b0254d22c5bd88ded5714a948d1450d2b0e9de85cdd4060e8d877ffb5591e3bce3ea0ba5b1ff6db808bd9b228b7eaded37b3da7500bf29331c975f84dae82204998cb45db6742d4260cc4b3bda1cde3b22db7a1d97b7163bebe"}}, {0xda, &(0x7f0000000600)=@string={0xda, 0x3, "8aa4ceed814b34f853f7eb8df8b4d5d6914270935aa7ea0935d8c66626ebbe37d90ca1c0c40c75a164a83b5dbf4bb9e4e49e7d9bcecbf0b1042b896965fb0f855b0cc105cc88937efb391c11c17e5593e2dc2355ca9b7874f806f6f298033edb1fa3e1faebbcef05186bb409e89924648d76e864b8893467efb8888cf0652db2fe96eebaf7a2fc9c444618d9ec6478fa584cf560f1b5f8a8793605af0a49724b8ccebc4ef0664209024c0f655891fb9818b473b561aa3f169a54569fc3ad1b12662c0f4418a5043e87e61be9abe6724e293acd687df53d3e"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40b}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @cisco=&(0x7f0000000200)={0x5, 0x69}}}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f00000000c0)={0x1, 0x0, {0xfffffff8, 0x9, 0x3015, 0x9, 0x0, 0x8, 0x2}}) 21:33:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000280)={0x7, "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"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r2, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:33:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 607.662634][T22788] FAULT_INJECTION: forcing a failure. [ 607.662634][T22788] name failslab, interval 1, probability 0, space 0, times 0 [ 607.684166][T22788] CPU: 0 PID: 22788 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 607.693182][T22788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.703216][T22788] Call Trace: [ 607.706514][T22788] dump_stack+0x10f/0x19d [ 607.710828][T22788] should_fail+0x23c/0x250 [ 607.715283][T22788] __should_failslab+0x81/0x90 [ 607.720039][T22788] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 607.725775][T22788] should_failslab+0x5/0x20 [ 607.730264][T22788] __kmalloc+0x43/0x2d0 [ 607.734445][T22788] tomoyo_realpath_from_path+0x98/0x3c0 [ 607.739985][T22788] tomoyo_mount_permission+0x66e/0x740 [ 607.745519][T22788] tomoyo_sb_mount+0x31/0x40 [ 607.750177][T22788] security_sb_mount+0x5c/0xb0 [ 607.754987][T22788] do_mount+0xf1/0x1bd0 [ 607.759129][T22788] ? __check_object_size+0x253/0x310 [ 607.764578][T22788] ? _copy_from_user+0x93/0xd0 [ 607.769315][T22788] __se_sys_mount+0xd3/0x100 [ 607.773884][T22788] __x64_sys_mount+0x63/0x70 [ 607.778452][T22788] do_syscall_64+0x51/0xb0 [ 607.783216][T22788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 607.789129][T22788] RIP: 0033:0x45f57a [ 607.793004][T22788] Code: Bad RIP value. [ 607.797121][T22788] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 607.805500][T22788] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a 21:33:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000008c0)={{0x1, 0x3, 0x1, 0x800, '\x00', 0x7}, 0x1, [0x4, 0x100000001, 0xbc6, 0x2, 0x78, 0x8, 0x401, 0x80000000, 0x2, 0x5, 0x1976, 0x80000000, 0x2, 0xffffffffffffd98b, 0x8001, 0x6, 0x400, 0x1c24, 0xaf7, 0xf1, 0x6, 0x7fff, 0x5, 0x0, 0x9, 0x1, 0x6, 0x5fe, 0x3fb441da, 0x6, 0xfffffffffffffffb, 0x8, 0xfffffffffffffffd, 0x6, 0x8, 0x800, 0x8001, 0x19, 0x3, 0x7, 0x8, 0x6, 0xd75, 0x7, 0x0, 0x8000, 0x892, 0x678, 0x9, 0x8, 0x7, 0x7, 0x6, 0xb7b, 0x2, 0x401, 0x400, 0x100, 0x7fffffff, 0x1, 0x5, 0x3, 0x3f, 0x40, 0x71fe, 0x9, 0x80000001, 0x72fd, 0xa4287d2, 0x30000000000, 0x7, 0xe29d, 0x7ff, 0x8, 0x5, 0x0, 0x7, 0x48, 0xe70f, 0x4, 0x200, 0x3, 0x1, 0x100000001, 0x79, 0x3, 0x7, 0x8, 0x3, 0xfff, 0x8, 0x57, 0xe9d8, 0x80000001, 0x1, 0x5, 0x80000000, 0xe28, 0xfffffffffffffffa, 0x8000, 0x3ee43c2c, 0xa58, 0x0, 0x9, 0x9c, 0x100000000, 0x3, 0x7b0000000000000, 0x3, 0x0, 0x6, 0x8, 0x2, 0x8, 0x8, 0x400, 0x10000, 0x9, 0x79, 0xc295, 0x7, 0x4, 0x8001, 0x8, 0x3, 0x58, 0x2, 0x37cb]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 607.813454][T22788] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 607.821398][T22788] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 607.829342][T22788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 607.837290][T22788] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 607.847706][T22788] ERROR: Out of memory at tomoyo_realpath_from_path. 21:33:57 executing program 5 (fault-call:3 fault-nth:42): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 607.917637][ T9937] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 607.939036][T22804] FAULT_INJECTION: forcing a failure. [ 607.939036][T22804] name failslab, interval 1, probability 0, space 0, times 0 [ 607.951773][T22804] CPU: 1 PID: 22804 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 607.960429][T22804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.970558][T22804] Call Trace: [ 607.973839][T22804] dump_stack+0x10f/0x19d [ 607.978151][T22804] should_fail+0x23c/0x250 [ 607.982550][T22804] __should_failslab+0x81/0x90 [ 607.987298][T22804] ? tomoyo_encode2+0x1e2/0x350 [ 607.992136][T22804] should_failslab+0x5/0x20 [ 607.996622][T22804] __kmalloc+0x43/0x2d0 [ 607.997803][ T5] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 608.000882][T22804] tomoyo_encode2+0x1e2/0x350 [ 608.000897][T22804] tomoyo_realpath_from_path+0x36e/0x3c0 [ 608.018975][T22804] tomoyo_mount_permission+0x66e/0x740 [ 608.024432][T22804] tomoyo_sb_mount+0x31/0x40 [ 608.029012][T22804] security_sb_mount+0x5c/0xb0 [ 608.033767][T22804] do_mount+0xf1/0x1bd0 [ 608.037912][T22804] ? __check_object_size+0x253/0x310 [ 608.043272][T22804] ? _copy_from_user+0x93/0xd0 [ 608.048022][T22804] __se_sys_mount+0xd3/0x100 [ 608.052809][T22804] __x64_sys_mount+0x63/0x70 [ 608.057859][T22804] do_syscall_64+0x51/0xb0 [ 608.062272][T22804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 608.068169][T22804] RIP: 0033:0x45f57a [ 608.072134][T22804] Code: Bad RIP value. [ 608.076185][T22804] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 608.084578][T22804] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 608.092731][T22804] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 608.100718][T22804] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 608.108783][T22804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 21:33:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000140)={0x500, 0xa, &(0x7f0000000000)=[0x4, 0x4, 0x8, 0x1, 0x1, 0x9, 0x80000001, 0x9, 0x100, 0x2], &(0x7f0000000080)=[0x3, 0x9b6, 0x6, 0x2, 0x800, 0x0, 0x5, 0x5], &(0x7f00000000c0)=[0x1, 0x7c, 0x0, 0x3ff, 0xffffffff, 0x80000000, 0x80000000, 0x100, 0x7fffffff], &(0x7f0000000100)=[0xfff, 0x3, 0xfffffffc, 0x4, 0x9, 0x80000001, 0x2, 0xbe81], 0x0, 0x3f}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 608.116742][T22804] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 608.128145][T19955] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 608.135824][ T3895] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 608.143920][T22804] ERROR: Out of memory at tomoyo_realpath_from_path. 21:33:57 executing program 5 (fault-call:3 fault-nth:43): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:33:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0xa, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004010}, 0x40) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 608.197869][ T9937] usb 2-1: device descriptor read/64, error 18 [ 608.247551][ T5] usb 5-1: Using ep0 maxpacket: 32 21:33:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) modify_ldt$write(0x1, &(0x7f0000000000)={0x3f, 0x1000, 0x2000, 0x1, 0x2, 0x0, 0x1}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 608.269550][T22814] FAULT_INJECTION: forcing a failure. [ 608.269550][T22814] name failslab, interval 1, probability 0, space 0, times 0 [ 608.288083][ T5] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 608.305305][T22814] CPU: 1 PID: 22814 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 608.313984][T22814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.324023][T22814] Call Trace: [ 608.327301][T22814] dump_stack+0x10f/0x19d [ 608.331656][T22814] should_fail+0x23c/0x250 [ 608.337452][T22814] __should_failslab+0x81/0x90 [ 608.342313][T22814] should_failslab+0x5/0x20 [ 608.346806][T22814] kmem_cache_alloc_trace+0x32/0x2c0 [ 608.352074][T22814] ? aa_get_newest_label+0x71/0x250 [ 608.357253][T22814] ? alloc_fs_context+0x46/0x3e0 [ 608.362260][T22814] alloc_fs_context+0x46/0x3e0 [ 608.367002][T22814] ? strncmp+0x34/0x70 [ 608.367867][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.371086][T22814] fs_context_for_mount+0x1d/0x20 [ 608.386938][T22814] do_mount+0xd4c/0x1bd0 [ 608.391215][T22814] ? _copy_from_user+0x93/0xd0 [ 608.396091][T22814] __se_sys_mount+0xd3/0x100 [ 608.400673][T22814] __x64_sys_mount+0x63/0x70 [ 608.405281][T22814] do_syscall_64+0x51/0xb0 [ 608.407954][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.409702][T22814] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 608.409709][T22814] RIP: 0033:0x45f57a [ 608.409718][T22814] Code: Bad RIP value. [ 608.433209][T22814] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 608.442398][T22814] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 608.450448][T22814] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 608.458415][T22814] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 608.466783][T22814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 608.474796][T22814] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 608.507626][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.527534][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.548835][ T3895] usb 1-1: Invalid ep0 maxpacket: 16 [ 608.554266][T19955] usb 3-1: Using ep0 maxpacket: 32 [ 608.587580][ T9937] usb 2-1: device descriptor read/64, error 18 [ 608.597987][T19955] usb 3-1: device firmware changed [ 608.604732][T19955] usb 3-1: USB disconnect, device number 4 [ 608.627800][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.638816][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.707562][ T9937] usb usb2-port1: attempt power cycle [ 608.707588][ T3895] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 608.727994][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.739171][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.827965][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.839555][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.928125][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.939070][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.977536][T19955] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 608.988094][ T3895] usb 1-1: Invalid ep0 maxpacket: 16 [ 608.993538][ T3895] usb usb1-port1: attempt power cycle [ 609.027867][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.040049][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.128081][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.139102][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.217506][T19955] usb 3-1: Using ep0 maxpacket: 32 [ 609.257940][T19955] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 609.307589][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 609.316986][ T5] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 609.327255][ T5] usb 5-1: Product: syz [ 609.331626][ T5] usb 5-1: Manufacturer: syz [ 609.336259][ T5] usb 5-1: SerialNumber: syz [ 609.343058][ T5] usb 5-1: config 0 descriptor?? [ 609.347931][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.387813][ T5] hub 5-1:0.0: USB hub found 21:33:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) [ 609.417491][ T9937] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 609.459068][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.527571][ T9937] usb 2-1: device descriptor read/8, error -71 [ 609.557484][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.638212][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.737447][ T3895] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 609.737474][ T9937] usb 2-1: device descriptor read/8, error -71 [ 609.757821][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.847499][ T3895] usb 1-1: Invalid ep0 maxpacket: 16 [ 609.847520][ T5] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 609.861371][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.918099][ T5] usb 5-1: USB disconnect, device number 67 [ 609.967592][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.027482][ T3895] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 610.057452][T19955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.137452][ T3895] usb 1-1: Invalid ep0 maxpacket: 16 [ 610.142848][ T3895] usb usb1-port1: unable to enumerate USB device [ 610.237427][ T9937] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 610.257903][T19955] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 610.266940][T19955] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 610.275664][T19955] usb 3-1: Product: syz [ 610.280206][T19955] usb 3-1: Manufacturer: syz [ 610.284832][T19955] usb 3-1: SerialNumber: syz [ 610.290676][T19955] usb 3-1: config 0 descriptor?? [ 610.327709][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 610.329077][T19955] hub 3-1:0.0: bad descriptor, ignoring hub [ 610.343932][T19955] hub: probe of 3-1:0.0 failed with error -5 [ 610.351926][T19955] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 610.367555][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 610.448712][ T9937] usb 2-1: config 0 has no interfaces? [ 610.530570][ T9937] usb 2-1: config 0 has no interfaces? [ 610.607447][ T9937] usb 2-1: config 0 has no interfaces? [ 610.687408][ T9937] usb 2-1: config 0 has no interfaces? [ 610.767755][ T9937] usb 2-1: config 0 has no interfaces? [ 610.847385][ T9937] usb 2-1: config 0 has no interfaces? [ 610.927388][ T9937] usb 2-1: config 0 has no interfaces? [ 611.007395][ T9937] usb 2-1: config 0 has no interfaces? [ 611.167416][ T9937] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 611.176484][ T9937] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 611.185467][ T9937] usb 2-1: Product: syz [ 611.190075][ T9937] usb 2-1: Manufacturer: syz [ 611.194644][ T9937] usb 2-1: SerialNumber: syz [ 611.200180][ T9937] usb 2-1: config 0 descriptor?? [ 611.439790][ T3895] usb 2-1: USB disconnect, device number 121 21:34:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x990000, 0xff, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9a0912, 0x2, [], @p_u16=&(0x7f00000000c0)=0x5}}) r6 = accept4$x25(r5, 0x0, &(0x7f0000000000), 0x800) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0xfffffe57) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:01 executing program 5 (fault-call:3 fault-nth:44): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x2, 0x0, &(0x7f0000000080)) [ 611.582216][T22874] FAULT_INJECTION: forcing a failure. [ 611.582216][T22874] name failslab, interval 1, probability 0, space 0, times 0 [ 611.595189][T22874] CPU: 0 PID: 22874 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 611.603906][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.613952][T22874] Call Trace: [ 611.617415][T22874] dump_stack+0x10f/0x19d [ 611.621822][T22874] should_fail+0x23c/0x250 [ 611.626401][T22874] __should_failslab+0x81/0x90 [ 611.631173][T22874] should_failslab+0x5/0x20 [ 611.635704][T22874] kmem_cache_alloc_trace+0x32/0x2c0 [ 611.641000][T22874] ? alloc_fs_context+0x46/0x3e0 [ 611.645924][T22874] alloc_fs_context+0x46/0x3e0 [ 611.650802][T22874] ? strncmp+0x34/0x70 [ 611.654879][T22874] fs_context_for_mount+0x1d/0x20 [ 611.659893][T22874] do_mount+0xd4c/0x1bd0 [ 611.664307][T22874] ? _copy_from_user+0x93/0xd0 [ 611.669058][T22874] __se_sys_mount+0xd3/0x100 [ 611.673634][T22874] __x64_sys_mount+0x63/0x70 [ 611.678208][T22874] do_syscall_64+0x51/0xb0 [ 611.682615][T22874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 611.688500][T22874] RIP: 0033:0x45f57a [ 611.692435][T22874] Code: Bad RIP value. [ 611.696514][T22874] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 611.704912][T22874] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 611.712869][T22874] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 611.720836][T22874] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 21:34:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) getpeername(r2, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000000)=0x80) [ 611.728791][T22874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 611.736756][T22874] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:34:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prctl$PR_GET_DUMPABLE(0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x505, 0x680e80) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004891}, 0x880) syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x7, 0x100080) 21:34:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x2) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0xfffffffffffffd91) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 611.901920][ T9937] usb 3-1: reset high-speed USB device number 5 using dummy_hcd 21:34:01 executing program 5 (fault-call:3 fault-nth:45): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) [ 611.957273][T19955] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 612.012606][T22903] FAULT_INJECTION: forcing a failure. [ 612.012606][T22903] name failslab, interval 1, probability 0, space 0, times 0 [ 612.025517][T22903] CPU: 0 PID: 22903 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 612.034177][T22903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.044345][T22903] Call Trace: [ 612.047624][T22903] dump_stack+0x10f/0x19d [ 612.051949][T22903] should_fail+0x23c/0x250 [ 612.056409][T22903] __should_failslab+0x81/0x90 [ 612.061207][T22903] should_failslab+0x5/0x20 [ 612.065706][T22903] kmem_cache_alloc_trace+0x32/0x2c0 [ 612.071129][T22903] ? legacy_init_fs_context+0x2d/0x70 [ 612.076497][T22903] legacy_init_fs_context+0x2d/0x70 [ 612.081684][T22903] alloc_fs_context+0x355/0x3e0 [ 612.086616][T22903] fs_context_for_mount+0x1d/0x20 [ 612.091722][T22903] do_mount+0xd4c/0x1bd0 [ 612.095960][T22903] ? _copy_from_user+0x93/0xd0 [ 612.100815][T22903] __se_sys_mount+0xd3/0x100 [ 612.105385][T22903] __x64_sys_mount+0x63/0x70 [ 612.110025][T22903] do_syscall_64+0x51/0xb0 [ 612.114454][T22903] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 612.120421][T22903] RIP: 0033:0x45f57a [ 612.124478][T22903] Code: Bad RIP value. [ 612.128530][T22903] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 612.137015][T22903] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 612.145000][T22903] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 612.152958][T22903] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 21:34:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100e0ef69aa779932392f74bd52c40001a69fa57cc1b1f73b78b721ba22a3c775221eb4cd1571c72167bd23befe43f69575ae00000000000000000000000000000000000017000000000000", @ANYRES16=r3, @ANYBLOB="90002cbd7000fbdbdf250400000005000100010000001400020000000000000000000000000040000001080005000000000008000601800000000000000005000100000000467c555700000000000000000000000000000000f3ff00"/102], 0x3}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000054) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r3, 0x800, 0x59, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x7}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 612.160927][T22903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 612.168889][T22903] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 612.297240][ T9937] usb 3-1: Using ep0 maxpacket: 32 [ 612.318630][T19955] usb 5-1: Using ep0 maxpacket: 32 [ 612.339009][ T9937] usb 3-1: device firmware changed [ 612.344336][ T9937] usb 3-1: USB disconnect, device number 5 [ 612.357535][T19955] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 612.365993][ T48] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 612.467628][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.479595][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.567702][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.578826][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.637206][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 612.668094][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.679390][ T48] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 612.687898][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.697226][ T9937] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 612.787254][ T48] usb 2-1: config 0 has no interfaces? [ 612.793087][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.804335][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.867686][ T48] usb 2-1: config 0 has no interfaces? [ 612.897888][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.910367][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.937231][ T9937] usb 3-1: Using ep0 maxpacket: 32 [ 612.967222][ T48] usb 2-1: config 0 has no interfaces? [ 612.977623][ T9937] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 613.008774][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.019664][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.057216][ T48] usb 2-1: config 0 has no interfaces? [ 613.059085][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.073598][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.128577][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.139660][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.150900][ T48] usb 2-1: config 0 has no interfaces? [ 613.157677][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.168588][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.238915][ T48] usb 2-1: config 0 has no interfaces? [ 613.244583][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.255770][T19955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.257513][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.276597][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.337658][ T48] usb 2-1: config 0 has no interfaces? [ 613.357984][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.369021][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.427232][ T48] usb 2-1: config 0 has no interfaces? [ 613.457191][T19955] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 613.457837][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.466609][T19955] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 613.479570][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.485610][T19955] usb 5-1: Product: syz [ 613.499920][T19955] usb 5-1: Manufacturer: syz [ 613.504487][T19955] usb 5-1: SerialNumber: syz [ 613.512033][T19955] usb 5-1: config 0 descriptor?? [ 613.567473][T19955] hub 5-1:0.0: USB hub found [ 613.569156][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.587358][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.607212][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 613.616413][ T48] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 613.625275][ T48] usb 2-1: Product: syz [ 613.630056][ T48] usb 2-1: Manufacturer: syz [ 613.634633][ T48] usb 2-1: SerialNumber: syz [ 613.642391][ T48] usb 2-1: config 0 descriptor?? [ 613.677922][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.688966][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.777502][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.788616][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.909343][ T9918] usb 2-1: USB disconnect, device number 122 [ 613.957189][ T9937] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 613.966318][ T9937] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 613.974988][ T9937] usb 3-1: Product: syz [ 613.979257][ T9937] usb 3-1: Manufacturer: syz [ 613.984073][ T9937] usb 3-1: SerialNumber: syz [ 613.994362][ T9937] usb 3-1: config 0 descriptor?? [ 614.027161][T19955] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 614.037615][ T9937] hub 3-1:0.0: USB hub found [ 614.107808][T19955] usb 5-1: USB disconnect, device number 68 [ 614.297133][ T9937] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 614.377618][ T9937] usb 3-1: USB disconnect, device number 6 [ 614.697094][T19955] usb 2-1: new high-speed USB device number 123 using dummy_hcd 21:34:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) getpeername(r3, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) 21:34:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x77359400}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x10, @time={0x6, 0x6}, 0x3, {0x80, 0x3}, 0x8, 0x2, 0x8}) 21:34:04 executing program 5 (fault-call:3 fault-nth:46): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20a00, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 614.833631][T22962] FAULT_INJECTION: forcing a failure. [ 614.833631][T22962] name failslab, interval 1, probability 0, space 0, times 0 [ 614.871132][T22962] CPU: 0 PID: 22962 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 614.880691][T22962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.890737][T22962] Call Trace: [ 614.894073][T22962] dump_stack+0x10f/0x19d [ 614.898483][T22962] should_fail+0x23c/0x250 [ 614.903079][T22962] __should_failslab+0x81/0x90 [ 614.907934][T22962] ? vfs_parse_fs_string+0x5e/0xc0 [ 614.914136][T22962] should_failslab+0x5/0x20 [ 614.918735][T22962] __kmalloc_track_caller+0x41/0x2d0 [ 614.924183][T22962] kmemdup_nul+0x27/0x70 [ 614.928420][T22962] vfs_parse_fs_string+0x5e/0xc0 [ 614.933383][T22962] do_mount+0xe84/0x1bd0 [ 614.937628][T22962] ? _copy_from_user+0x93/0xd0 [ 614.942475][T22962] __se_sys_mount+0xd3/0x100 [ 614.947225][T22962] __x64_sys_mount+0x63/0x70 [ 614.951812][T22962] do_syscall_64+0x51/0xb0 [ 614.956395][T22962] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 614.962800][T22962] RIP: 0033:0x45f57a [ 614.966888][T22962] Code: Bad RIP value. [ 614.970947][T22962] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 614.979355][T22962] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 614.987330][T22962] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 614.995384][T22962] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 615.003526][T22962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 615.011710][T22962] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:34:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, [], [{0x8, 0x3, 0xfffffffffffffe00, 0x3f, 0x0, 0x5}, {0x1, 0xf819, 0xff, 0x7, 0x70, 0x80000000}], [[]]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) sendfile(r0, r4, &(0x7f0000000000)=0x9, 0x5) r5 = gettid() tkill(r5, 0x1004000000013) ptrace$peekuser(0x3, r5, 0x1) r6 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)="bf579a553d3e88c3f7f2076d9d6f3231a4a864790ead7fe9987c8c01021e9f5acd568d0f67ad786b1a5a7e32fecf569f9e0bb36cd57d9ad41b6a9e6c6c3eb6d70c3957b07ec26dba823a44169b7be3a442407d9961a4267513924dba51ee71562cb298b9740b3f898bdedebc4c54baba252ee4e3f1aab996cfa277e4259213374c79e7a9d6d10d2082cc337a1fa80d2066", 0x91, 0xfffffffffffffff9) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r7, 0x0) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000640)=[{&(0x7f0000000340)="9860017e7b2817bc9aa58ddb9b37ffd8588a3845eef76b70e7c71fac7fedc9bcc607b3b7ee464e2d758e1c3c20425affcefee8516b27334b2eba1aaaee506d0069ac689cb1a88d1656e494b98178fb4bac093d9d0a7df25d2e", 0x59}, {&(0x7f00000003c0)="57b55932e7e7121e7f0a7489e7a5526b67859ae1baa857e88d62fded7a74b0b64b87cb46fe8681f049f20d47f8c94b3f8f9b008d98a43b3baf8ac6550a222c319091df2d58abe4e6d1af1c7e5aaa41aa08bcf2a0660177ec81060fb2f1580c454ef470514678fbff2799f89e66e99d4f513f439b70c02f5e7e955953aef8007100cb1b608749a6123f724228efae38cef37102c73b2d9040cc546fb9fc8106f57898cbd6e2f5d4bbab5297492e7e22bc3aca65bacc7fd58bf78c779bade14ccd056f4d98d0fa3084d69706e83d1ff0e23760d4abeea00114870fbf621227cbb0ddfa12779c5f92", 0xe7}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="394abbfe9dbefe7ddeab177e3ad2546498961618e45878527fbc0b59beee08cfcfbdfe99cd3b45233ad72f253f720cbe6025d11cb01928d8dd5bc9aa735be8718292c5e4d8f640d7b327d20290f7f89d13f18911394db4ef4324cdb4", 0x5c}], 0x4, r7) [ 615.087074][T19955] usb 2-1: Using ep0 maxpacket: 32 21:34:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2ad05e133b795ad9) 21:34:04 executing program 5 (fault-call:3 fault-nth:47): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 615.167019][ T9937] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 615.187032][ T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 615.197484][T19955] usb 2-1: device descriptor read/all, error -71 [ 615.222107][T22990] FAULT_INJECTION: forcing a failure. [ 615.222107][T22990] name failslab, interval 1, probability 0, space 0, times 0 [ 615.236086][T22990] CPU: 1 PID: 22990 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 615.244948][T22990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.254999][T22990] Call Trace: [ 615.258492][T22990] dump_stack+0x10f/0x19d [ 615.263616][T22990] should_fail+0x23c/0x250 [ 615.268042][T22990] ? hfsplus_mount+0x40/0x40 [ 615.273672][T22990] __should_failslab+0x81/0x90 [ 615.278509][T22990] should_failslab+0x5/0x20 [ 615.283016][T22990] kmem_cache_alloc+0x29/0x2b0 [ 615.287786][T22990] ? getname_kernel+0x37/0x1d0 [ 615.292545][T22990] ? hfsplus_mount+0x40/0x40 [ 615.297310][T22990] getname_kernel+0x37/0x1d0 [ 615.301939][T22990] ? hfsplus_mount+0x40/0x40 [ 615.306540][T22990] kern_path+0x19/0x40 [ 615.310696][T22990] blkdev_get_by_path+0x54/0x1e0 [ 615.315953][T22990] ? legacy_parse_param+0x2b7/0x4d0 [ 615.321150][T22990] mount_bdev+0x49/0x270 [ 615.325601][T22990] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 615.331339][T22990] hfsplus_mount+0x2d/0x40 [ 615.336001][T22990] legacy_get_tree+0x70/0xc0 [ 615.340738][T22990] vfs_get_tree+0x4d/0x1a0 [ 615.345222][T22990] do_mount+0x115c/0x1bd0 [ 615.349652][T22990] ? _copy_from_user+0x93/0xd0 [ 615.354423][T22990] __se_sys_mount+0xd3/0x100 [ 615.359021][T22990] __x64_sys_mount+0x63/0x70 [ 615.364564][T22990] do_syscall_64+0x51/0xb0 [ 615.369256][T22990] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 615.375423][T22990] RIP: 0033:0x45f57a [ 615.379338][T22990] Code: Bad RIP value. [ 615.383401][T22990] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 615.391809][T22990] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 615.400123][T22990] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 615.407107][ T9937] usb 5-1: Using ep0 maxpacket: 32 [ 615.408170][T22990] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 615.421246][T22990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 615.429475][T22990] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 615.447371][ T9937] usb 5-1: too many configurations: 27, using maximum allowed: 8 21:34:05 executing program 5 (fault-call:3 fault-nth:48): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 615.527357][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.555002][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.593958][T22995] FAULT_INJECTION: forcing a failure. [ 615.593958][T22995] name failslab, interval 1, probability 0, space 0, times 0 [ 615.644597][T22995] CPU: 0 PID: 22995 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 615.653536][T22995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.664626][T22995] Call Trace: [ 615.668128][T22995] dump_stack+0x10f/0x19d [ 615.672736][T22995] should_fail+0x23c/0x250 [ 615.677240][T22995] __should_failslab+0x81/0x90 [ 615.682054][T22995] should_failslab+0x5/0x20 [ 615.686592][T22995] kmem_cache_alloc_trace+0x32/0x2c0 [ 615.691869][T22995] ? iput+0x1fe/0x550 [ 615.696140][T22995] ? alloc_super+0x3a/0x4c0 [ 615.702776][T22995] ? mount_bdev+0x270/0x270 [ 615.707275][T22995] alloc_super+0x3a/0x4c0 [ 615.711618][T22995] ? mount_bdev+0x270/0x270 [ 615.716114][T22995] sget+0x189/0x370 [ 615.719934][T22995] ? test_bdev_super+0x30/0x30 [ 615.724690][T22995] mount_bdev+0xd1/0x270 [ 615.728929][T22995] ? hfsplus_mount+0x40/0x40 [ 615.733608][T22995] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 615.738982][T22995] hfsplus_mount+0x2d/0x40 [ 615.743398][T22995] legacy_get_tree+0x70/0xc0 [ 615.748513][T22995] vfs_get_tree+0x4d/0x1a0 [ 615.753010][T22995] do_mount+0x115c/0x1bd0 [ 615.757412][T22995] ? _copy_from_user+0x93/0xd0 [ 615.762440][T22995] __se_sys_mount+0xd3/0x100 [ 615.767025][T22995] __x64_sys_mount+0x63/0x70 [ 615.771668][T22995] do_syscall_64+0x51/0xb0 [ 615.776275][T22995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 615.782159][T22995] RIP: 0033:0x45f57a [ 615.786064][T22995] Code: Bad RIP value. [ 615.790119][T22995] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 615.798662][T22995] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 615.807133][T22995] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 615.816066][T22995] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 615.824246][T22995] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 615.832404][T22995] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 615.847266][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.849675][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 615.859480][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.927428][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 615.947072][T19955] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 615.957384][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:34:05 executing program 5 (fault-call:3 fault-nth:49): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 615.977295][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.017377][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.030409][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.051617][T23002] FAULT_INJECTION: forcing a failure. [ 616.051617][T23002] name failslab, interval 1, probability 0, space 0, times 0 [ 616.065191][T23002] CPU: 1 PID: 23002 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 616.074036][T23002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.084095][T23002] Call Trace: [ 616.087492][T23002] dump_stack+0x10f/0x19d [ 616.091827][T23002] should_fail+0x23c/0x250 [ 616.096275][T23002] __should_failslab+0x81/0x90 [ 616.099033][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.101143][T23002] should_failslab+0x5/0x20 [ 616.116395][T23002] kmem_cache_alloc_trace+0x32/0x2c0 [ 616.121685][T23002] ? iput+0x1fe/0x550 [ 616.125669][T23002] ? alloc_super+0x3a/0x4c0 [ 616.128371][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.130253][T23002] ? mount_bdev+0x270/0x270 [ 616.130269][T23002] alloc_super+0x3a/0x4c0 [ 616.148865][T23002] ? mount_bdev+0x270/0x270 [ 616.153393][T23002] sget+0x189/0x370 [ 616.157205][T23002] ? test_bdev_super+0x30/0x30 [ 616.162028][T23002] mount_bdev+0xd1/0x270 [ 616.166279][T23002] ? hfsplus_mount+0x40/0x40 [ 616.170875][T23002] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 616.176282][T23002] hfsplus_mount+0x2d/0x40 [ 616.180702][T23002] legacy_get_tree+0x70/0xc0 [ 616.185321][T23002] vfs_get_tree+0x4d/0x1a0 [ 616.189736][T23002] do_mount+0x115c/0x1bd0 [ 616.194070][T23002] ? _copy_from_user+0x93/0xd0 [ 616.198837][T23002] __se_sys_mount+0xd3/0x100 [ 616.203472][T23002] __x64_sys_mount+0x63/0x70 [ 616.208151][T23002] do_syscall_64+0x51/0xb0 [ 616.213137][T23002] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 616.219038][T23002] RIP: 0033:0x45f57a [ 616.222925][T23002] Code: Bad RIP value. [ 616.227872][T23002] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 616.237192][T23002] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 616.245568][T23002] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 616.247246][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.253540][T23002] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 616.272618][T23002] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 616.280640][T23002] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 616.293665][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:34:05 executing program 5 (fault-call:3 fault-nth:50): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 616.327335][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.387336][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.391654][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.412099][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.426923][T19955] usb 2-1: Using ep0 maxpacket: 32 [ 616.445271][T23007] FAULT_INJECTION: forcing a failure. [ 616.445271][T23007] name failslab, interval 1, probability 0, space 0, times 0 [ 616.472949][T23007] CPU: 0 PID: 23007 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 616.487472][T23007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.497944][T23007] Call Trace: [ 616.501220][T23007] dump_stack+0x10f/0x19d [ 616.505821][T23007] should_fail+0x23c/0x250 [ 616.510213][T23007] __should_failslab+0x81/0x90 [ 616.514956][T23007] ? prealloc_shrinker+0x5e/0x1b0 [ 616.520064][T23007] should_failslab+0x5/0x20 [ 616.524622][T23007] __kmalloc+0x43/0x2d0 [ 616.528955][T23007] prealloc_shrinker+0x5e/0x1b0 [ 616.533794][T23007] alloc_super+0x424/0x4c0 [ 616.538647][T23007] ? mount_bdev+0x270/0x270 [ 616.543728][T23007] sget+0x189/0x370 [ 616.547543][T23007] ? test_bdev_super+0x30/0x30 [ 616.552311][T23007] mount_bdev+0xd1/0x270 [ 616.557871][T23007] ? hfsplus_mount+0x40/0x40 [ 616.563168][T23007] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 616.576915][T23007] hfsplus_mount+0x2d/0x40 [ 616.588349][T23007] legacy_get_tree+0x70/0xc0 [ 616.593171][T23007] vfs_get_tree+0x4d/0x1a0 [ 616.598029][T23007] do_mount+0x115c/0x1bd0 [ 616.602936][T23007] ? _copy_from_user+0x93/0xd0 [ 616.608443][T23007] __se_sys_mount+0xd3/0x100 [ 616.613561][T23007] __x64_sys_mount+0x63/0x70 [ 616.618411][T23007] do_syscall_64+0x51/0xb0 [ 616.623518][T23007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 616.630348][T23007] RIP: 0033:0x45f57a [ 616.634232][T23007] Code: Bad RIP value. [ 616.638337][T23007] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 616.646829][T23007] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 616.655136][T23007] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 616.663087][T23007] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 616.671062][T23007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 616.679213][T23007] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 616.697272][T19955] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 616.727446][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.744104][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.747281][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.777221][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.807251][T19955] usb 2-1: config 0 has no interfaces? [ 616.826942][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.841243][ T9937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.887523][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.899126][T19955] usb 2-1: config 0 has no interfaces? [ 616.905513][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.006903][T19955] usb 2-1: config 0 has no interfaces? [ 617.007194][ T9937] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 617.013103][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.023361][ T9937] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 617.034019][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.042911][ T9937] usb 5-1: Product: syz [ 617.055096][ T9937] usb 5-1: Manufacturer: syz [ 617.060309][ T9937] usb 5-1: SerialNumber: syz [ 617.070373][ T9937] usb 5-1: config 0 descriptor?? [ 617.086953][T19955] usb 2-1: config 0 has no interfaces? [ 617.109307][ T9937] hub 5-1:0.0: USB hub found [ 617.136969][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.148818][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.186920][T19955] usb 2-1: config 0 has no interfaces? [ 617.237398][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.248514][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.277179][T19955] usb 2-1: config 0 has no interfaces? [ 617.326907][ T9937] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 617.357536][T19955] usb 2-1: config 0 has no interfaces? [ 617.363528][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.374591][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.466877][T19955] usb 2-1: config 0 has no interfaces? [ 617.567597][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 617.577566][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 617.585815][ T48] usb 3-1: Product: syz [ 617.587423][ T9937] usb 5-1: USB disconnect, device number 69 [ 617.595035][ T48] usb 3-1: Manufacturer: syz [ 617.602975][ T48] usb 3-1: SerialNumber: syz [ 617.609052][ T48] usb 3-1: config 0 descriptor?? [ 617.666937][T19955] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 617.676530][ T48] hub 3-1:0.0: USB hub found [ 617.681179][T19955] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 617.694024][T19955] usb 2-1: Product: syz [ 617.698635][T19955] usb 2-1: Manufacturer: syz [ 617.703232][T19955] usb 2-1: SerialNumber: syz [ 617.708845][T19955] usb 2-1: config 0 descriptor?? 21:34:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x9a0000, 0x800, 0x8, r0, 0x0, &(0x7f0000000000)={0x9909d7, 0x3, [], @value64=0xffffffffffffffff}}) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000280)) 21:34:07 executing program 5 (fault-call:3 fault-nth:51): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 617.833448][T23037] FAULT_INJECTION: forcing a failure. [ 617.833448][T23037] name failslab, interval 1, probability 0, space 0, times 0 [ 617.847984][ T48] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 617.858307][T23037] CPU: 0 PID: 23037 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 617.867381][T23037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.877527][T23037] Call Trace: [ 617.880832][T23037] dump_stack+0x10f/0x19d [ 617.885181][T23037] should_fail+0x23c/0x250 [ 617.889593][T23037] __should_failslab+0x81/0x90 [ 617.894412][T23037] should_failslab+0x5/0x20 [ 617.898905][T23037] kmem_cache_alloc_node_trace+0x3b/0x260 [ 617.904614][T23037] ? __kmalloc_node+0x30/0x40 [ 617.909282][T23037] __kmalloc_node+0x30/0x40 [ 617.913942][T23037] kvmalloc_node+0x81/0xf0 [ 617.918359][T23037] __list_lru_init+0x1dd/0x520 [ 617.923197][T23037] alloc_super+0x450/0x4c0 [ 617.927611][T23037] ? mount_bdev+0x270/0x270 [ 617.933345][T23037] sget+0x189/0x370 [ 617.937232][T23037] ? test_bdev_super+0x30/0x30 [ 617.941992][T23037] mount_bdev+0xd1/0x270 [ 617.946237][T23037] ? hfsplus_mount+0x40/0x40 [ 617.950848][T23037] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 617.956332][T23037] hfsplus_mount+0x2d/0x40 [ 617.960759][T23037] legacy_get_tree+0x70/0xc0 [ 617.965341][T23037] vfs_get_tree+0x4d/0x1a0 [ 617.969753][T23037] do_mount+0x115c/0x1bd0 [ 617.974081][T23037] ? _copy_from_user+0x93/0xd0 [ 617.978839][T23037] __se_sys_mount+0xd3/0x100 [ 617.983464][T23037] __x64_sys_mount+0x63/0x70 [ 617.988046][T23037] do_syscall_64+0x51/0xb0 [ 617.992464][T23037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.998344][T23037] RIP: 0033:0x45f57a [ 618.002310][T23037] Code: Bad RIP value. [ 618.006366][T23037] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 618.014769][T23037] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 618.022740][T23037] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 618.030817][T23037] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 618.038786][T23037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 618.046999][T23037] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 618.047040][T19955] usb 2-1: USB disconnect, device number 124 21:34:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) 21:34:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) dup(r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x102) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x1, 0x2, 0x1d3a14f5ab3e9efb, "8a9a42b281f83bc19c4a01ea0eb2a9c25cc327d8b1f069b7a649fb53182b3e57", 0x3131354f}) syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201012ff50000206d043d2179540328a21b0902a8f43e6eee42d993f4836842b11dc71bfb5ecae4061843"], 0x0) 21:34:07 executing program 5 (fault-call:3 fault-nth:52): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r5 = dup2(r0, r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r6, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000280)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @adapter={0x4, 0x2, 0x2, 0x1000, 0xffffffff}}, {0x9, 0x4, 0x0, 0x0, @adapter={0x7d67, 0x3, 0xa76, 0x4b, 0x5}}, {0x5, 0x0, 0x0, 0x0, @adapter={0x1, 0xfff, 0x6, 0x970e, 0x9}}, {0x2, 0x2, 0x0, 0x0, @adapter={0x9, 0x3, 0x7, 0x2, 0xffffffff}}, {0x5, 0x4, 0x0, 0x0, @msi={0x9, 0x1f, 0x3}}, {0x20, 0x3, 0x0, 0x0, @msi={0x4, 0x3ff, 0x9, 0x6}}, {0x5c4, 0x3, 0x0, 0x0, @irqchip={0x1, 0xc794}}, {0x101, 0x2, 0x0, 0x0, @irqchip={0xc2, 0x20}}]}) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 618.218207][T23060] Unknown ioctl -1069525502 [ 618.253446][T23062] FAULT_INJECTION: forcing a failure. [ 618.253446][T23062] name failslab, interval 1, probability 0, space 0, times 0 [ 618.270641][T23062] CPU: 1 PID: 23062 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 618.279338][T23062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.289468][T23062] Call Trace: [ 618.292743][T23062] dump_stack+0x10f/0x19d [ 618.297062][T23062] should_fail+0x23c/0x250 [ 618.301707][T23062] __should_failslab+0x81/0x90 [ 618.306507][T23062] ? __list_lru_init+0x70/0x520 [ 618.311460][T23062] should_failslab+0x5/0x20 [ 618.315954][T23062] __kmalloc+0x43/0x2d0 [ 618.320101][T23062] __list_lru_init+0x70/0x520 [ 618.324768][T23062] alloc_super+0x47f/0x4c0 [ 618.329173][T23062] ? mount_bdev+0x270/0x270 [ 618.333664][T23062] sget+0x189/0x370 [ 618.337570][T23062] ? test_bdev_super+0x30/0x30 [ 618.342321][T23062] mount_bdev+0xd1/0x270 [ 618.346603][T23062] ? hfsplus_mount+0x40/0x40 [ 618.351175][T23062] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 618.356558][T23062] hfsplus_mount+0x2d/0x40 [ 618.360970][T23062] legacy_get_tree+0x70/0xc0 [ 618.365629][T23062] vfs_get_tree+0x4d/0x1a0 [ 618.370158][T23062] do_mount+0x115c/0x1bd0 [ 618.374524][T23062] ? _copy_from_user+0x93/0xd0 [ 618.379371][T23062] __se_sys_mount+0xd3/0x100 [ 618.383955][T23062] __x64_sys_mount+0x63/0x70 [ 618.388542][T23062] do_syscall_64+0x51/0xb0 [ 618.392953][T23062] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 618.398855][T23062] RIP: 0033:0x45f57a [ 618.402737][T23062] Code: Bad RIP value. [ 618.406793][T23062] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 618.415242][T23062] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 618.423206][T23062] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 618.431167][T23062] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 618.439465][T23062] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 21:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x11, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 618.447458][T23062] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 618.467208][ T48] usb 3-1: reset high-speed USB device number 7 using dummy_hcd 21:34:08 executing program 5 (fault-call:3 fault-nth:53): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 618.578436][T23084] FAULT_INJECTION: forcing a failure. [ 618.578436][T23084] name failslab, interval 1, probability 0, space 0, times 0 [ 618.591157][T23084] CPU: 1 PID: 23084 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 618.599998][T23084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.610071][T23084] Call Trace: [ 618.614052][T23084] dump_stack+0x10f/0x19d [ 618.618454][T23084] should_fail+0x23c/0x250 [ 618.622864][T23084] __should_failslab+0x81/0x90 [ 618.627619][T23084] should_failslab+0x5/0x20 [ 618.632107][T23084] kmem_cache_alloc_node_trace+0x3b/0x260 [ 618.637228][ T5] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 618.637811][T23084] ? __kmalloc_node+0x30/0x40 [ 618.637823][T23084] ? check_preemption_disabled+0x51/0x140 [ 618.637837][T23084] __kmalloc_node+0x30/0x40 [ 618.660189][T23084] kvmalloc_node+0x81/0xf0 [ 618.664725][T23084] __list_lru_init+0x1dd/0x520 [ 618.669529][T23084] alloc_super+0x47f/0x4c0 [ 618.674262][T23084] ? mount_bdev+0x270/0x270 [ 618.678759][T23084] sget+0x189/0x370 [ 618.682654][T23084] ? test_bdev_super+0x30/0x30 [ 618.687411][T23084] mount_bdev+0xd1/0x270 [ 618.691638][T23084] ? hfsplus_mount+0x40/0x40 [ 618.696212][T23084] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 618.701653][T23084] hfsplus_mount+0x2d/0x40 [ 618.706121][T23084] legacy_get_tree+0x70/0xc0 [ 618.710695][T23084] vfs_get_tree+0x4d/0x1a0 [ 618.715160][T23084] do_mount+0x115c/0x1bd0 [ 618.719477][T23084] ? _copy_from_user+0x93/0xd0 [ 618.724321][T23084] __se_sys_mount+0xd3/0x100 [ 618.728906][T23084] __x64_sys_mount+0x63/0x70 [ 618.733500][T23084] do_syscall_64+0x51/0xb0 [ 618.735193][T23088] Unknown ioctl -1069525502 [ 618.737982][T23084] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 618.737996][T23084] RIP: 0033:0x45f57a [ 618.752229][T23084] Code: Bad RIP value. [ 618.756284][T23084] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 618.764773][T23084] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 618.772741][T23084] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 618.780701][T23084] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 618.788648][T23084] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 618.796834][T23084] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 618.876715][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 618.917134][ T5] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 618.936729][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 618.986777][ T48] usb 3-1: device firmware changed [ 618.992123][ T48] usb 3-1: USB disconnect, device number 7 [ 618.997075][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.010967][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.096757][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.109397][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.196885][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.211878][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.297088][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.310367][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.366722][ T48] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 619.396786][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.407959][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.496707][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.507655][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.596704][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.607850][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.626672][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 619.666767][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 619.698235][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.710097][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.747041][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.758175][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.857381][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.868735][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.877093][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 619.887967][ T5] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 619.896319][ T5] usb 5-1: Product: syz [ 619.900506][ T5] usb 5-1: Manufacturer: syz [ 619.905176][ T5] usb 5-1: SerialNumber: syz [ 619.910823][ T5] usb 5-1: config 0 descriptor?? [ 619.947015][ T5] hub 5-1:0.0: USB hub found [ 619.967056][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.977981][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.077205][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.088249][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.166764][ T5] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 620.187060][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.198051][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.307063][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.318215][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.407020][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.418040][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.427176][ T5] usb 5-1: USB disconnect, device number 70 [ 620.526669][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.537874][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.727029][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 620.736074][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 620.744837][ T48] usb 3-1: Product: syz [ 620.749479][ T48] usb 3-1: Manufacturer: syz [ 620.754403][ T48] usb 3-1: SerialNumber: syz [ 620.760316][ T48] usb 3-1: config 0 descriptor?? 21:34:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) connect$inet(r4, &(0x7f0000000180)={0x2, 0x5e1f, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0x6) 21:34:10 executing program 5 (fault-call:3 fault-nth:54): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 620.797065][ T48] hub 3-1:0.0: USB hub found 21:34:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000038c0)={0x38, r3, 0x11, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x38}}, 0x0) r4 = gettid() tkill(r4, 0x1004000000013) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r5, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x2c}}, 0x40001) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 620.877399][T23119] FAULT_INJECTION: forcing a failure. [ 620.877399][T23119] name failslab, interval 1, probability 0, space 0, times 0 [ 620.890112][ T48] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) 21:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7be2c9a828089903}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x4044000) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 620.948009][T23119] CPU: 1 PID: 23119 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 620.956791][T23119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.966978][T23119] Call Trace: [ 620.972436][T23119] dump_stack+0x10f/0x19d [ 620.976751][T23119] should_fail+0x23c/0x250 [ 620.981226][T23119] __should_failslab+0x81/0x90 [ 620.986074][T23119] should_failslab+0x5/0x20 [ 620.990571][T23119] kmem_cache_alloc_node_trace+0x3b/0x260 [ 620.996282][T23119] ? __kmalloc_node+0x30/0x40 [ 621.000958][T23119] __kmalloc_node+0x30/0x40 [ 621.007534][T23119] kvmalloc_node+0x81/0xf0 [ 621.011927][T23119] __list_lru_init+0x1dd/0x520 [ 621.016677][T23119] alloc_super+0x47f/0x4c0 [ 621.021083][T23119] ? mount_bdev+0x270/0x270 [ 621.025577][T23119] sget+0x189/0x370 [ 621.025593][T23119] ? test_bdev_super+0x30/0x30 [ 621.034240][T23119] mount_bdev+0xd1/0x270 [ 621.038514][T23119] ? hfsplus_mount+0x40/0x40 [ 621.043092][T23119] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 621.048449][T23119] hfsplus_mount+0x2d/0x40 [ 621.053734][T23119] legacy_get_tree+0x70/0xc0 [ 621.058322][T23119] vfs_get_tree+0x4d/0x1a0 [ 621.062723][T23119] do_mount+0x115c/0x1bd0 [ 621.067044][T23119] ? _copy_from_user+0x93/0xd0 [ 621.071790][T23119] __se_sys_mount+0xd3/0x100 [ 621.076463][T23119] __x64_sys_mount+0x63/0x70 [ 621.081039][T23119] do_syscall_64+0x51/0xb0 [ 621.085620][T23119] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 621.091628][T23119] RIP: 0033:0x45f57a 21:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r3, 0x1, 0x20, 0x6, 0x8}, &(0x7f0000000080)=0x18) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 621.095510][T23119] Code: Bad RIP value. [ 621.099564][T23119] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 621.107972][T23119] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 621.115940][T23119] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 621.123904][T23119] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 621.131972][T23119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 621.139938][T23119] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:34:10 executing program 5 (fault-call:3 fault-nth:55): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 621.265430][T23145] FAULT_INJECTION: forcing a failure. [ 621.265430][T23145] name failslab, interval 1, probability 0, space 0, times 0 [ 621.289927][T23145] CPU: 0 PID: 23145 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 621.299480][T23145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.309521][T23145] Call Trace: [ 621.312800][T23145] dump_stack+0x10f/0x19d [ 621.317116][T23145] should_fail+0x23c/0x250 [ 621.321564][T23145] __should_failslab+0x81/0x90 [ 621.326316][T23145] should_failslab+0x5/0x20 [ 621.330806][T23145] kmem_cache_alloc_trace+0x32/0x2c0 [ 621.336077][T23145] ? hfsplus_fill_super+0x52/0xc60 [ 621.336653][ T48] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 621.341308][T23145] hfsplus_fill_super+0x52/0xc60 [ 621.341323][T23145] ? pcpu_block_update_hint_alloc+0x6b6/0x6d0 [ 621.341338][T23145] ? widen_string+0x3a/0x280 [ 621.365572][T23145] ? string+0x1d4/0x210 [ 621.369720][T23145] ? string+0x1f9/0x210 [ 621.373868][T23145] ? bdev_name+0x1f1/0x260 [ 621.378274][T23145] ? pointer+0x256/0x7b0 [ 621.382502][T23145] ? format_decode+0x60b/0x8a0 [ 621.387390][T23145] ? vsnprintf+0xe8e/0xed0 [ 621.391872][T23145] ? snprintf+0x6f/0x90 [ 621.396082][T23145] ? register_shrinker_prepared+0xdf/0xf0 [ 621.401781][T23145] ? set_blocksize+0x15f/0x280 [ 621.406535][T23145] mount_bdev+0x1ca/0x270 [ 621.410967][T23145] ? hfsplus_mount+0x40/0x40 [ 621.415531][T23145] ? hfsplus_mark_mdb_dirty+0xf0/0xf0 [ 621.421202][T23145] hfsplus_mount+0x2d/0x40 [ 621.425637][T23145] legacy_get_tree+0x70/0xc0 [ 621.430203][T23145] vfs_get_tree+0x4d/0x1a0 [ 621.434594][T23145] do_mount+0x115c/0x1bd0 [ 621.439343][T23145] ? _copy_from_user+0x93/0xd0 [ 621.444111][T23145] __se_sys_mount+0xd3/0x100 [ 621.450845][T23145] __x64_sys_mount+0x63/0x70 [ 621.455796][T23145] do_syscall_64+0x51/0xb0 [ 621.460218][T23145] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 621.466358][T23145] RIP: 0033:0x45f57a [ 621.470228][T23145] Code: Bad RIP value. [ 621.474264][T23145] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 621.482651][T23145] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045f57a [ 621.490608][T23145] RDX: 00007f3ed6d56ae0 RSI: 0000000020000280 RDI: 00007f3ed6d56b00 [ 621.498658][T23145] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 621.509233][T23145] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 621.517183][T23145] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 621.527108][ T5] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 621.534725][ T9047] usb 2-1: new high-speed USB device number 125 using dummy_hcd 21:34:11 executing program 5 (fault-call:3 fault-nth:56): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 621.596746][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 621.630045][T23152] hfsplus: unable to parse mount options [ 621.636160][T23152] FAULT_INJECTION: forcing a failure. [ 621.636160][T23152] name failslab, interval 1, probability 0, space 0, times 0 [ 621.649800][ T48] usb 3-1: device firmware changed [ 621.655045][ T48] usb 3-1: USB disconnect, device number 8 [ 621.668363][T23152] CPU: 1 PID: 23152 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 621.677150][T23152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.688153][T23152] Call Trace: [ 621.691442][T23152] dump_stack+0x10f/0x19d [ 621.695755][T23152] should_fail+0x23c/0x250 [ 621.700154][T23152] __should_failslab+0x81/0x90 [ 621.705076][T23152] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 621.710780][T23152] should_failslab+0x5/0x20 [ 621.715412][T23152] __kmalloc+0x43/0x2d0 [ 621.719558][T23152] ? check_preemption_disabled+0x51/0x140 [ 621.725517][T23152] tomoyo_realpath_from_path+0x98/0x3c0 [ 621.731051][T23152] tomoyo_path_number_perm+0xc1/0x2d0 [ 621.736649][T23152] ? debug_smp_processor_id+0x18/0x20 [ 621.742482][T23152] ? ___cache_free+0x2a/0x510 [ 621.747219][T23152] ? __rcu_read_unlock+0x4b/0x260 [ 621.752219][T23152] tomoyo_file_ioctl+0x1c/0x20 [ 621.756959][T23152] security_file_ioctl+0x45/0x90 [ 621.761896][T23152] __se_sys_ioctl+0x48/0x130 [ 621.766496][T23152] __x64_sys_ioctl+0x3f/0x50 [ 621.771180][T23152] do_syscall_64+0x51/0xb0 [ 621.775576][T23152] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 621.781446][T23152] RIP: 0033:0x45c9f7 [ 621.785323][T23152] Code: Bad RIP value. [ 621.789507][T23152] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.798086][T23152] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 621.806746][T23152] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 621.817829][T23152] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 621.828416][T23152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 621.836483][T23152] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 621.850825][T23152] ERROR: Out of memory at tomoyo_realpath_from_path. 21:34:11 executing program 5 (fault-call:3 fault-nth:57): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 621.930993][T23163] hfsplus: unable to parse mount options [ 621.936809][T23163] FAULT_INJECTION: forcing a failure. [ 621.936809][T23163] name failslab, interval 1, probability 0, space 0, times 0 [ 621.950942][T23163] CPU: 1 PID: 23163 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 621.959714][T23163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.969825][T23163] Call Trace: [ 621.973123][T23163] dump_stack+0x10f/0x19d [ 621.977431][T23163] should_fail+0x23c/0x250 [ 621.982049][T23163] __should_failslab+0x81/0x90 [ 621.986821][T23163] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 621.992516][T23163] should_failslab+0x5/0x20 [ 621.997001][T23163] __kmalloc+0x43/0x2d0 [ 622.001152][T23163] ? check_preemption_disabled+0x51/0x140 [ 622.006878][T23163] tomoyo_realpath_from_path+0x98/0x3c0 [ 622.012409][T23163] tomoyo_path_number_perm+0xc1/0x2d0 [ 622.017812][T23163] ? debug_smp_processor_id+0x18/0x20 [ 622.023164][T23163] ? ___cache_free+0x2a/0x510 [ 622.027843][T23163] ? __rcu_read_unlock+0x4b/0x260 [ 622.032962][T23163] tomoyo_file_ioctl+0x1c/0x20 [ 622.037710][T23163] security_file_ioctl+0x45/0x90 [ 622.042651][T23163] __se_sys_ioctl+0x48/0x130 [ 622.047232][T23163] __x64_sys_ioctl+0x3f/0x50 [ 622.051795][T23163] do_syscall_64+0x51/0xb0 [ 622.056370][T23163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 622.062250][T23163] RIP: 0033:0x45c9f7 [ 622.066146][T23163] Code: Bad RIP value. [ 622.070186][T23163] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.079365][T23163] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 622.087323][T23163] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 622.095458][T23163] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 622.103416][T23163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 622.111467][T23163] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 622.126524][ T5] usb 5-1: Using ep0 maxpacket: 32 21:34:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000280)="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", 0x250, 0x40010, 0x0, 0x0) [ 622.131714][ T9047] usb 2-1: Using ep0 maxpacket: 32 [ 622.134711][T23163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.178286][ T5] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 622.186346][ T9047] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 622.259936][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.271145][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.281551][ T9047] usb 2-1: config 0 has no interfaces? [ 622.366608][ T48] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 622.377128][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.389174][ T9047] usb 2-1: config 0 has no interfaces? [ 622.394655][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.476784][ T9047] usb 2-1: config 0 has no interfaces? [ 622.482484][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.493790][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.556471][ T9047] usb 2-1: config 0 has no interfaces? [ 622.576501][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.587468][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.616509][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 622.636482][ T9047] usb 2-1: config 0 has no interfaces? [ 622.657280][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 622.677461][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.689408][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.716752][ T9047] usb 2-1: config 0 has no interfaces? [ 622.747267][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.759453][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.777025][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.788140][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.798522][ T9047] usb 2-1: config 0 has no interfaces? [ 622.856723][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.867841][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.877226][ T9047] usb 2-1: config 0 has no interfaces? [ 622.883137][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.894448][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.976737][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.976777][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.988116][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.000073][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.046505][ T9047] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 623.055758][ T9047] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 623.065736][ T9047] usb 2-1: Product: syz [ 623.070101][ T9047] usb 2-1: Manufacturer: syz [ 623.074829][ T9047] usb 2-1: SerialNumber: syz [ 623.081771][ T9047] usb 2-1: config 0 descriptor?? [ 623.096690][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.107883][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.166481][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 623.175606][ T5] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 623.184006][ T5] usb 5-1: Product: syz [ 623.188439][ T5] usb 5-1: Manufacturer: syz [ 623.193027][ T5] usb 5-1: SerialNumber: syz [ 623.199744][ T5] usb 5-1: config 0 descriptor?? [ 623.206593][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.217645][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.237806][ T5] hub 5-1:0.0: USB hub found [ 623.316468][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.327843][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.347206][ T8289] usb 2-1: USB disconnect, device number 125 [ 623.416480][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.428732][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.456442][ T5] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 623.526416][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.537830][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.716914][ T5] usb 5-1: USB disconnect, device number 71 [ 623.766459][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 623.775612][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 623.784178][ T48] usb 3-1: Product: syz [ 623.788424][ T48] usb 3-1: Manufacturer: syz [ 623.793035][ T48] usb 3-1: SerialNumber: syz [ 623.801499][ T48] usb 3-1: config 0 descriptor?? 21:34:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10) socket$inet(0x2, 0x4, 0x96) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:13 executing program 5 (fault-call:3 fault-nth:58): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000480)="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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) [ 623.866443][ T48] usb 3-1: can't set config #0, error -71 [ 623.876519][ T48] usb 3-1: USB disconnect, device number 9 [ 623.930478][T23217] hfsplus: unable to parse mount options [ 623.952074][T23217] FAULT_INJECTION: forcing a failure. [ 623.952074][T23217] name failslab, interval 1, probability 0, space 0, times 0 [ 624.036416][T23217] CPU: 1 PID: 23217 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 624.045191][T23217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.055337][T23217] Call Trace: [ 624.058626][T23217] dump_stack+0x10f/0x19d [ 624.063116][T23217] should_fail+0x23c/0x250 [ 624.067625][T23217] __should_failslab+0x81/0x90 [ 624.072393][T23217] ? tomoyo_encode2+0x1e2/0x350 [ 624.077228][T23217] should_failslab+0x5/0x20 [ 624.081749][T23217] __kmalloc+0x43/0x2d0 [ 624.086511][T23217] tomoyo_encode2+0x1e2/0x350 [ 624.091201][T23217] tomoyo_realpath_from_path+0x36e/0x3c0 [ 624.096827][T23217] tomoyo_path_number_perm+0xc1/0x2d0 [ 624.102182][T23217] ? debug_smp_processor_id+0x18/0x20 [ 624.107537][T23217] ? ___cache_free+0x2a/0x510 [ 624.113150][T23217] ? __rcu_read_unlock+0x4b/0x260 [ 624.118429][T23217] tomoyo_file_ioctl+0x1c/0x20 [ 624.123192][T23217] security_file_ioctl+0x45/0x90 [ 624.128130][T23217] __se_sys_ioctl+0x48/0x130 [ 624.132743][T23217] __x64_sys_ioctl+0x3f/0x50 [ 624.137388][T23217] do_syscall_64+0x51/0xb0 [ 624.141902][T23217] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 624.148043][T23217] RIP: 0033:0x45c9f7 [ 624.151920][T23217] Code: Bad RIP value. [ 624.155989][T23217] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.164384][T23217] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 624.172345][T23217] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 21:34:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x6000, 0x0) r3 = socket(0x1e, 0x805, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockname(r4, &(0x7f0000000280)=@caif=@rfm, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="c5985164503c0adb84a109112a527182c1cbb3f985a2b09876109a1db25e88d770befe075a874dd4f552391b25ceaf28c39f4d94839b7bdddd62c93ee5c4cccf55828c7bbe52ab108170e83ff9e0d2e2a8b5a54b9a875d992a5750af1be5a27ec73726c93b3ef18656c1f6a224130de47bf060a700efd54154b8fdc9242b03fc7f70ada392a5394b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e22, 0x3, @empty, 0xec}}}, &(0x7f0000000180)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000300)={0x9, 0x2d8, 0x7, 0x2, 0xa, "8fb84b1bf922d9808ec2b96fce61f5bf816f85"}) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) dup(r1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000240)="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", 0x250, 0x40010, 0x0, 0x0) [ 624.180389][T23217] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 624.188379][T23217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 624.197814][T23217] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000024000b0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000240008801c00010a000000000000000000000000000000000000000000000000040002000a000100706669666f0000000500020000000000462157096a847d61c651d6f316c4bcb69386c90e637f4ca0f7359f61a244113b144a3b05006aacaaf00dbb0e7aa01c0c85e6462ef58114e2b98fc122d8899c9a7757f106d992f9e2d20e432ec1a0aeddb90d52b7431337e301af05dd6b49326e4ad97fcdc89aec03647d631b60abd53eb77bf80b3c9e85bea574e01487edfa50116ea1"], 0x5c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001a000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x4048000) 21:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000009c0)={0x0, 0xb, &(0x7f0000000980)={&(0x7f00000007c0)={0x14, r4, 0xffff}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 624.337904][ T5] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 624.337939][T23217] ERROR: Out of memory at tomoyo_realpath_from_path. 21:34:13 executing program 5 (fault-call:3 fault-nth:59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 624.436322][ T48] usb 3-1: new high-speed USB device number 10 using dummy_hcd 21:34:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) dup2(r0, r0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 624.479445][T23244] hfsplus: unable to parse mount options [ 624.516352][T23244] FAULT_INJECTION: forcing a failure. [ 624.516352][T23244] name failslab, interval 1, probability 0, space 0, times 0 [ 624.529230][ T9047] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 624.529978][T23244] CPU: 1 PID: 23244 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 624.545620][T23244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.555650][T23244] Call Trace: [ 624.558919][T23244] dump_stack+0x10f/0x19d [ 624.563221][T23244] should_fail+0x23c/0x250 [ 624.567636][T23244] __should_failslab+0x81/0x90 [ 624.572405][T23244] ? dev_uevent_filter+0x70/0x70 [ 624.577335][T23244] should_failslab+0x5/0x20 [ 624.581810][T23244] kmem_cache_alloc_trace+0x32/0x2c0 [ 624.586282][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 624.587079][T23244] ? debug_smp_processor_id+0x18/0x20 [ 624.587090][T23244] ? kobject_uevent_env+0x1a7/0xc40 [ 624.587105][T23244] ? dev_uevent_filter+0x70/0x70 [ 624.607699][T23244] kobject_uevent_env+0x1a7/0xc40 [ 624.612793][T23244] ? up_write+0x25/0xc0 [ 624.616923][T23244] kobject_uevent+0x18/0x20 [ 624.622978][T23244] __loop_clr_fd+0x399/0x5b0 [ 624.626645][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 624.627544][T23244] lo_ioctl+0x9d1/0x1190 [ 624.627556][T23244] ? debug_smp_processor_id+0x18/0x20 [ 624.627569][T23244] ? ___cache_free+0x2a/0x510 [ 624.649471][T23244] ? __srcu_read_unlock+0x1f/0x40 [ 624.654562][T23244] ? tomoyo_path_number_perm+0x286/0x2d0 [ 624.660174][T23244] ? blkdev_common_ioctl+0xaae/0x10b0 [ 624.665521][T23244] ? lo_release+0x130/0x130 [ 624.670010][T23244] blkdev_ioctl+0x1b2/0x3f0 [ 624.674485][T23244] block_ioctl+0x6d/0x80 [ 624.678706][T23244] ? blkdev_iopoll+0x80/0x80 [ 624.683378][T23244] __se_sys_ioctl+0xc9/0x130 [ 624.687955][T23244] __x64_sys_ioctl+0x3f/0x50 [ 624.692608][T23244] do_syscall_64+0x51/0xb0 [ 624.697085][T23244] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 624.703035][T23244] RIP: 0033:0x45c9f7 [ 624.706633][ T5] usb 2-1: config 0 has no interfaces? [ 624.706918][T23244] Code: Bad RIP value. [ 624.706923][T23244] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.724795][T23244] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 624.732830][T23244] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 624.740792][T23244] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 624.748838][T23244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 624.756788][T23244] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:34:14 executing program 5 (fault-call:3 fault-nth:60): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 624.776319][ T9047] usb 5-1: Using ep0 maxpacket: 32 [ 624.788220][ T5] usb 2-1: config 0 has no interfaces? [ 624.816738][ T9047] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 624.827295][T23251] hfsplus: unable to parse mount options [ 624.866308][T23251] FAULT_INJECTION: forcing a failure. [ 624.866308][T23251] name failslab, interval 1, probability 0, space 0, times 0 [ 624.879403][T23251] CPU: 1 PID: 23251 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 624.888064][T23251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.896290][ T5] usb 2-1: config 0 has no interfaces? [ 624.898260][T23251] Call Trace: [ 624.898278][T23251] dump_stack+0x10f/0x19d [ 624.898306][T23251] should_fail+0x23c/0x250 [ 624.898322][T23251] __should_failslab+0x81/0x90 [ 624.903794][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.907024][T23251] ? kzalloc+0x1d/0x30 [ 624.907036][T23251] should_failslab+0x5/0x20 [ 624.907045][T23251] __kmalloc+0x43/0x2d0 [ 624.907054][T23251] kzalloc+0x1d/0x30 [ 624.907065][T23251] kobject_get_path+0x7c/0x110 [ 624.907159][T23251] kobject_uevent_env+0x1be/0xc40 [ 624.907177][T23251] ? up_write+0x25/0xc0 [ 624.912226][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.916394][T23251] kobject_uevent+0x18/0x20 [ 624.916409][T23251] __loop_clr_fd+0x399/0x5b0 [ 624.916420][T23251] lo_ioctl+0x9d1/0x1190 [ 624.916457][T23251] ? debug_smp_processor_id+0x18/0x20 [ 624.978741][ T5] usb 2-1: config 0 has no interfaces? [ 624.981701][T23251] ? ___cache_free+0x2a/0x510 [ 624.981716][T23251] ? __srcu_read_unlock+0x1f/0x40 [ 624.981733][T23251] ? tomoyo_path_number_perm+0x286/0x2d0 [ 624.996731][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.996836][T23251] ? blkdev_common_ioctl+0xaae/0x10b0 [ 625.001656][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.006579][T23251] ? lo_release+0x130/0x130 [ 625.006590][T23251] blkdev_ioctl+0x1b2/0x3f0 [ 625.006602][T23251] block_ioctl+0x6d/0x80 [ 625.006612][T23251] ? blkdev_iopoll+0x80/0x80 [ 625.006622][T23251] __se_sys_ioctl+0xc9/0x130 [ 625.006680][T23251] __x64_sys_ioctl+0x3f/0x50 [ 625.006695][T23251] do_syscall_64+0x51/0xb0 [ 625.066288][ T5] usb 2-1: config 0 has no interfaces? [ 625.066419][T23251] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 625.082152][T23251] RIP: 0033:0x45c9f7 [ 625.086564][T23251] Code: Bad RIP value. [ 625.089357][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.090651][T23251] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.090662][T23251] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 625.090669][T23251] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 625.090717][T23251] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 625.103664][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.110888][T23251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 625.153061][T23251] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 625.156279][ T5] usb 2-1: config 0 has no interfaces? [ 625.163148][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 625.206318][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.222680][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.226382][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 625.256778][ T5] usb 2-1: config 0 has no interfaces? [ 625.316255][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.327238][T19955] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 625.336951][ T5] usb 2-1: config 0 has no interfaces? [ 625.339919][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.342567][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.379511][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.466315][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.468145][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.477965][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.490168][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.526597][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 625.535887][ T5] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 625.544757][ T5] usb 2-1: Product: syz [ 625.549509][ T5] usb 2-1: Manufacturer: syz [ 625.554274][ T5] usb 2-1: SerialNumber: syz [ 625.560138][ T5] usb 2-1: config 0 descriptor?? [ 625.586269][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.598017][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.598704][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.610246][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.696613][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.707608][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.718192][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.729644][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.811089][ T5] usb 2-1: USB disconnect, device number 126 [ 625.827178][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.838054][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.876235][ T9047] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 625.885331][ T9047] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 625.895536][ T9047] usb 5-1: Product: syz [ 625.900304][ T9047] usb 5-1: Manufacturer: syz [ 625.904880][ T9047] usb 5-1: SerialNumber: syz [ 625.906202][T19955] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 625.913811][ T9047] usb 5-1: config 0 descriptor?? [ 625.920092][T19955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.932493][T19955] usb 4-1: Product: syz [ 625.937299][T19955] usb 4-1: Manufacturer: syz [ 625.942071][T19955] usb 4-1: SerialNumber: syz [ 625.956528][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.970081][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.976420][ T9047] hub 5-1:0.0: USB hub found [ 625.986816][T19955] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 626.066530][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.077514][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.186179][ T9047] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 626.186838][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.205153][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.376243][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 626.385616][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 626.396951][ T48] usb 3-1: Product: syz [ 626.401120][ T48] usb 3-1: Manufacturer: syz [ 626.405714][ T48] usb 3-1: SerialNumber: syz [ 626.411828][ T48] usb 3-1: config 0 descriptor?? [ 626.447878][ T9047] usb 5-1: USB disconnect, device number 72 [ 626.457624][ T48] hub 3-1:0.0: USB hub found [ 626.746145][ T48] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 626.766167][T19955] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 626.836769][ T48] usb 3-1: USB disconnect, device number 10 [ 626.977522][ T9047] usb 4-1: USB disconnect, device number 3 21:34:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:16 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:34:16 executing program 5 (fault-call:3 fault-nth:61): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r2], 0x18}, 0x0) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x1c}, 0x0) close(r2) close(r1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'veth0_to_hsr\x00', @ifru_settings={0x5, 0x400, @fr_pvc_info=&(0x7f0000000100)={0xfff, 'caif0\x00'}}}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x301000) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 21:34:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/227, 0xe3, 0x10103, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x200, 0x2) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000280)={0x5}) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:34:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x3, {0x100000001}}, 0x18) 21:34:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x181003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x91) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 627.250142][T23310] hfsplus: unable to parse mount options 21:34:16 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x82100, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) [ 627.296273][T23310] FAULT_INJECTION: forcing a failure. [ 627.296273][T23310] name failslab, interval 1, probability 0, space 0, times 0 [ 627.313934][T23310] CPU: 1 PID: 23310 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 627.322615][T23310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.332743][T23310] Call Trace: [ 627.336035][T23310] dump_stack+0x10f/0x19d [ 627.340379][T23310] should_fail+0x23c/0x250 [ 627.344778][T23310] __should_failslab+0x81/0x90 [ 627.349536][T23310] should_failslab+0x5/0x20 [ 627.354155][T23310] kmem_cache_alloc_node_trace+0x3b/0x260 [ 627.359902][T23310] ? __kmalloc_node_track_caller+0x30/0x40 [ 627.365805][T23310] ? kmem_cache_alloc_node+0x12b/0x260 [ 627.371271][T23310] ? alloc_uevent_skb+0x5b/0x120 [ 627.376184][T23310] __kmalloc_node_track_caller+0x30/0x40 [ 627.381797][T23310] __alloc_skb+0xd3/0x2e0 [ 627.386111][T23310] alloc_uevent_skb+0x5b/0x120 [ 627.390867][T23310] kobject_uevent_env+0x863/0xc40 [ 627.396333][T23310] ? up_write+0x25/0xc0 [ 627.400528][T23310] kobject_uevent+0x18/0x20 [ 627.405176][T23310] __loop_clr_fd+0x399/0x5b0 [ 627.409772][T23310] lo_ioctl+0x9d1/0x1190 [ 627.413994][T23310] ? debug_smp_processor_id+0x18/0x20 [ 627.419532][T23310] ? ___cache_free+0x2a/0x510 [ 627.424333][T23310] ? __srcu_read_unlock+0x1f/0x40 [ 627.429347][T23310] ? tomoyo_path_number_perm+0x286/0x2d0 [ 627.435806][T23310] ? blkdev_common_ioctl+0xaae/0x10b0 [ 627.441246][T23310] ? lo_release+0x130/0x130 [ 627.445769][T23310] blkdev_ioctl+0x1b2/0x3f0 [ 627.450251][T23310] block_ioctl+0x6d/0x80 [ 627.454469][T23310] ? blkdev_iopoll+0x80/0x80 [ 627.459042][T23310] __se_sys_ioctl+0xc9/0x130 [ 627.463710][T23310] __x64_sys_ioctl+0x3f/0x50 [ 627.469321][T23310] do_syscall_64+0x51/0xb0 [ 627.473717][T23310] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 627.479669][T23310] RIP: 0033:0x45c9f7 [ 627.483532][T23310] Code: Bad RIP value. [ 627.488183][T23310] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:34:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xe0, 0x3, 0x8, 0x202, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x70}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1f3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x55}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xbb}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004040}, 0x10000000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 627.496655][T23310] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 627.504775][T23310] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 627.512761][T23310] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 627.520709][T23310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 627.528850][T23310] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:34:17 executing program 5 (fault-call:3 fault-nth:62): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000280)={0x4, 0x1, "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"}) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) [ 627.682849][T23333] hfsplus: unable to parse mount options [ 627.696081][ T3895] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 627.703706][ T48] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 627.756172][T23333] FAULT_INJECTION: forcing a failure. [ 627.756172][T23333] name failslab, interval 1, probability 0, space 0, times 0 [ 627.769666][T23333] CPU: 1 PID: 23333 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 627.779084][T23333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.789290][T23333] Call Trace: [ 627.792562][T23333] dump_stack+0x10f/0x19d [ 627.797128][T23333] should_fail+0x23c/0x250 [ 627.801814][T23333] __should_failslab+0x81/0x90 [ 627.806573][T23333] should_failslab+0x5/0x20 [ 627.811161][T23333] kmem_cache_alloc+0x29/0x2b0 [ 627.815906][T23333] ? skb_clone+0x131/0x1f0 [ 627.820301][T23333] skb_clone+0x131/0x1f0 [ 627.824523][T23333] netlink_broadcast_filtered+0x4df/0xb40 [ 627.830255][T23333] ? skb_put+0xb9/0xf0 [ 627.834321][T23333] netlink_broadcast+0x35/0x50 [ 627.839076][T23333] kobject_uevent_env+0x8c6/0xc40 [ 627.844178][T23333] ? up_write+0x25/0xc0 [ 627.848312][T23333] kobject_uevent+0x18/0x20 [ 627.852802][T23333] __loop_clr_fd+0x399/0x5b0 [ 627.857380][T23333] lo_ioctl+0x9d1/0x1190 [ 627.861665][T23333] ? debug_smp_processor_id+0x18/0x20 [ 627.867022][T23333] ? ___cache_free+0x2a/0x510 [ 627.871691][T23333] ? __srcu_read_unlock+0x1f/0x40 [ 627.876721][T23333] ? tomoyo_path_number_perm+0x286/0x2d0 [ 627.882332][T23333] ? blkdev_common_ioctl+0xaae/0x10b0 [ 627.887690][T23333] ? lo_release+0x130/0x130 [ 627.892722][T23333] blkdev_ioctl+0x1b2/0x3f0 [ 627.897203][T23333] block_ioctl+0x6d/0x80 [ 627.901479][T23333] ? blkdev_iopoll+0x80/0x80 [ 627.906055][T23333] __se_sys_ioctl+0xc9/0x130 [ 627.910640][T23333] __x64_sys_ioctl+0x3f/0x50 [ 627.915228][T23333] do_syscall_64+0x51/0xb0 [ 627.919729][T23333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 627.925617][T23333] RIP: 0033:0x45c9f7 [ 627.929483][T23333] Code: Bad RIP value. [ 627.933548][T23333] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.941935][T23333] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 627.949917][T23333] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 627.958501][T23333] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 627.966463][T23333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 627.974512][T23333] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 627.986547][T19955] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 627.993407][T19955] ath9k_htc: Failed to initialize the device [ 628.007580][ T9047] usb 4-1: ath9k_htc: USB layer deinitialized [ 628.066025][ T9918] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 628.127407][ T3895] usb 3-1: Using ep0 maxpacket: 32 [ 628.132676][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 628.176374][ T48] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 628.184400][ T3895] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 628.276361][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.287289][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.298127][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.307946][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.317775][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 628.357097][ T9918] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 628.406886][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.417910][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.428926][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.439609][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.477043][ T9918] usb 2-1: config 0 has no interfaces? [ 628.546714][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.557798][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.569832][ T9918] usb 2-1: config 0 has no interfaces? [ 628.575313][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.586438][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.656003][ T9918] usb 2-1: config 0 has no interfaces? [ 628.676392][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.687758][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.698750][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.710026][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.746459][ T9918] usb 2-1: config 0 has no interfaces? [ 628.816358][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.827465][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.838498][ T9918] usb 2-1: config 0 has no interfaces? [ 628.843980][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.854893][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.916446][ T9918] usb 2-1: config 0 has no interfaces? [ 628.946354][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.957497][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.968392][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.978983][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.006569][ T9918] usb 2-1: config 0 has no interfaces? [ 629.086388][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.097413][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.108893][ T9918] usb 2-1: config 0 has no interfaces? [ 629.114509][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.125304][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.216030][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.227424][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.238853][ T3895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.249908][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.286224][ T9918] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 629.295828][ T9918] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 629.304882][ T9918] usb 2-1: Product: syz [ 629.310055][ T9918] usb 2-1: Manufacturer: syz [ 629.314979][ T9918] usb 2-1: SerialNumber: syz [ 629.320984][ T9918] usb 2-1: config 0 descriptor?? [ 629.445954][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 629.455123][ T3895] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 629.464180][ T3895] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 629.473155][ T48] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 629.481735][ T3895] usb 3-1: Product: syz [ 629.486315][ T48] usb 5-1: Product: syz [ 629.490591][ T48] usb 5-1: Manufacturer: syz [ 629.495594][ T48] usb 5-1: SerialNumber: syz [ 629.500932][ T3895] usb 3-1: Manufacturer: syz [ 629.505521][ T3895] usb 3-1: SerialNumber: syz [ 629.512419][ T3895] usb 3-1: config 0 descriptor?? [ 629.520057][ T48] usb 5-1: config 0 descriptor?? [ 629.557769][ T3895] hub 3-1:0.0: USB hub found [ 629.564378][ T48] hub 5-1:0.0: USB hub found [ 629.574505][ T9902] usb 2-1: USB disconnect, device number 127 [ 629.766010][ T48] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 629.825949][ T3895] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 629.897781][ T3895] usb 3-1: USB disconnect, device number 11 [ 630.026477][ T48] usb 5-1: USB disconnect, device number 73 21:34:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000000)) 21:34:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = dup(r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:19 executing program 5 (fault-call:3 fault-nth:63): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 630.349716][T23383] hfsplus: unable to parse mount options [ 630.376041][T23383] FAULT_INJECTION: forcing a failure. [ 630.376041][T23383] name failslab, interval 1, probability 0, space 0, times 0 [ 630.388729][T23383] CPU: 1 PID: 23383 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 630.397386][T23383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.407505][T23383] Call Trace: [ 630.410792][T23383] dump_stack+0x10f/0x19d [ 630.415107][T23383] should_fail+0x23c/0x250 [ 630.419505][T23383] __should_failslab+0x81/0x90 [ 630.424243][T23383] should_failslab+0x5/0x20 [ 630.429428][T23383] kmem_cache_alloc+0x29/0x2b0 [ 630.434177][T23383] ? skb_clone+0x131/0x1f0 [ 630.438564][T23383] skb_clone+0x131/0x1f0 [ 630.442814][T23383] netlink_broadcast_filtered+0x4df/0xb40 [ 630.448597][T23383] ? skb_put+0xb9/0xf0 [ 630.452635][T23383] netlink_broadcast+0x35/0x50 [ 630.457375][T23383] kobject_uevent_env+0x8c6/0xc40 [ 630.462448][T23383] ? up_write+0x25/0xc0 [ 630.466577][T23383] kobject_uevent+0x18/0x20 [ 630.471085][T23383] __loop_clr_fd+0x399/0x5b0 [ 630.475667][T23383] lo_ioctl+0x9d1/0x1190 [ 630.479884][T23383] ? debug_smp_processor_id+0x18/0x20 [ 630.485315][T23383] ? ___cache_free+0x2a/0x510 [ 630.490060][T23383] ? __srcu_read_unlock+0x1f/0x40 [ 630.495072][T23383] ? tomoyo_path_number_perm+0x286/0x2d0 [ 630.500680][T23383] ? blkdev_common_ioctl+0xaae/0x10b0 [ 630.506048][T23383] ? lo_release+0x130/0x130 [ 630.510667][T23383] blkdev_ioctl+0x1b2/0x3f0 [ 630.515208][T23383] block_ioctl+0x6d/0x80 [ 630.519437][T23383] ? blkdev_iopoll+0x80/0x80 [ 630.524012][T23383] __se_sys_ioctl+0xc9/0x130 [ 630.528661][T23383] __x64_sys_ioctl+0x3f/0x50 [ 630.533230][T23383] do_syscall_64+0x51/0xb0 [ 630.537644][T23383] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 630.543665][T23383] RIP: 0033:0x45c9f7 21:34:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x154) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'hsr0\x00', {}, 0x7}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) 21:34:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x1e, 0x805, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e23, 0x80000001, @dev={0xfe, 0x80, [], 0x3d}, 0x80000001}}, 0x4a, 0xff, 0x7, 0x9f1, 0x80, 0x2, 0x3f}, &(0x7f0000000000)=0x9c) 21:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101100, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0xa4, &(0x7f0000000080)="f2f7cdb2bc9986cf14a455cf3095458f5df3aa1f99d8137253e29a0e00dfd98cac576b4a642c0ab65d2338f7cecdc530d6d06dba22c3ce3e77d6e92d7caa85ce7b762d1801dd5e60054e1978ead072aebb08107a98cbc82b8428d838e351ac61047ab3ba774d364f972c8d5f742c0cac59ceb5e344990d13ca93643ef240188af4e2dc77905226daa59e7ff21b78413eaf66eac45850a2fb27a9e01fc6d9a90dac8f1050", 0xde, 0x0, &(0x7f0000000280)="66878b161f3216a2df3300e08085ec3d4df9e1aebe33b6a45080dec5720628ccfdbf393d932ac60f9227ddd07ab1feb941ecdf94d25981eed1831c19b719e6034a26fb9cb67c226ebe50ec1d13adcbbe9d44fde9b6e6a01355e54af4e65478a92f5f8ff0eba51fae4e63cccb350cb4145f3aebcc9f573bfcefcc510ca1494a822e36460f53146df4aa5d1a64b1728c37f8c8a5af1e82f11d1c8a75cc11f4106f0109409007c1b4e213e6e15fb1bdd7893633579ad21a7a96d6ef55a53515cd671ca624ba60f86eb040d012848bfee91d4ea5251d0fb1015306973476d757"}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80000, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30) [ 630.547534][T23383] Code: Bad RIP value. [ 630.551579][T23383] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.559964][T23383] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 630.568447][T23383] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 630.576510][T23383] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 630.584454][T23383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 630.592409][T23383] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 21:34:20 executing program 5 (fault-call:3 fault-nth:64): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0xfffffffffffffe63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) read$rfkill(r1, &(0x7f0000000080), 0x8) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0xfffffffffffffd5e) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 630.736950][T23404] hfsplus: unable to parse mount options [ 630.755825][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 630.785960][T23404] FAULT_INJECTION: forcing a failure. [ 630.785960][T23404] name failslab, interval 1, probability 0, space 0, times 0 [ 630.802322][T23404] CPU: 0 PID: 23404 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 630.810992][T23404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.821036][T23404] Call Trace: [ 630.824320][T23404] dump_stack+0x10f/0x19d [ 630.828712][T23404] should_fail+0x23c/0x250 [ 630.833102][T23404] __should_failslab+0x81/0x90 [ 630.838099][T23404] should_failslab+0x5/0x20 [ 630.842587][T23404] kmem_cache_alloc_trace+0x32/0x2c0 [ 630.848218][T23404] ? call_usermodehelper_setup+0x81/0x160 [ 630.854009][T23404] call_usermodehelper_setup+0x81/0x160 [ 630.859530][T23404] ? add_uevent_var+0x1c0/0x1c0 [ 630.864360][T23404] kobject_uevent_env+0xb2e/0xc40 [ 630.869367][T23404] ? up_write+0x25/0xc0 [ 630.873675][T23404] kobject_uevent+0x18/0x20 [ 630.878160][T23404] __loop_clr_fd+0x399/0x5b0 [ 630.882727][T23404] lo_ioctl+0x9d1/0x1190 [ 630.886945][T23404] ? debug_smp_processor_id+0x18/0x20 [ 630.892296][T23404] ? ___cache_free+0x2a/0x510 [ 630.896953][T23404] ? __srcu_read_unlock+0x1f/0x40 [ 630.901957][T23404] ? tomoyo_path_number_perm+0x286/0x2d0 [ 630.907691][T23404] ? blkdev_common_ioctl+0xaae/0x10b0 [ 630.913065][T23404] ? lo_release+0x130/0x130 [ 630.917641][T23404] blkdev_ioctl+0x1b2/0x3f0 [ 630.922136][T23404] block_ioctl+0x6d/0x80 [ 630.926361][T23404] ? blkdev_iopoll+0x80/0x80 [ 630.930939][T23404] __se_sys_ioctl+0xc9/0x130 [ 630.935550][T23404] __x64_sys_ioctl+0x3f/0x50 [ 630.940194][T23404] do_syscall_64+0x51/0xb0 [ 630.944586][T23404] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 630.950448][T23404] RIP: 0033:0x45c9f7 [ 630.954314][T23404] Code: Bad RIP value. [ 630.958375][T23404] RSP: 002b:00007f3ed6d56a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.966758][T23404] RAX: ffffffffffffffda RBX: 000000000050a1e0 RCX: 000000000045c9f7 [ 630.974713][T23404] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 630.982672][T23404] RBP: 000000000078bf00 R08: 00007f3ed6d56b40 R09: 00007f3ed6d56ae0 [ 630.990616][T23404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 630.998561][T23404] R13: 0000000000000c2e R14: 00000000004ce7e5 R15: 00007f3ed6d576d4 [ 631.005882][ T48] usb 3-1: Using ep0 maxpacket: 32 21:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000040)=0x9, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) sendto$inet(r4, &(0x7f0000000280)="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", 0x2c2, 0x40c1, 0x0, 0x0) [ 631.046127][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 631.075804][ T9047] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 631.137544][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.159788][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.165761][ T9937] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 631.272525][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.295760][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.355774][ T9047] usb 5-1: Using ep0 maxpacket: 32 [ 631.375802][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.388471][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.406387][ T9047] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 631.475771][ T9937] usb 2-1: Using ep0 maxpacket: 32 [ 631.488249][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.499336][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.516055][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.527309][ T9937] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 631.535186][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.585827][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.596755][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.615792][ T9937] usb 2-1: config 0 has no interfaces? [ 631.656480][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.667502][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.686066][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.698436][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.715809][ T9937] usb 2-1: config 0 has no interfaces? [ 631.757254][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.768406][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.785997][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.796934][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.806054][ T9937] usb 2-1: config 0 has no interfaces? [ 631.856037][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.868390][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.886351][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.897231][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.915788][ T9937] usb 2-1: config 0 has no interfaces? [ 631.966143][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.977193][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.005766][ T9937] usb 2-1: config 0 has no interfaces? [ 632.066132][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 632.075361][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 632.085027][ T48] usb 3-1: Product: syz [ 632.086191][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.089774][ T48] usb 3-1: Manufacturer: syz [ 632.101950][ T9937] usb 2-1: config 0 has no interfaces? [ 632.106808][ T48] usb 3-1: SerialNumber: syz [ 632.110595][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.117855][ T48] usb 3-1: config 0 descriptor?? [ 632.168663][ T48] hub 3-1:0.0: USB hub found [ 632.205811][ T9937] usb 2-1: config 0 has no interfaces? [ 632.225771][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.237275][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.296102][ T9937] usb 2-1: config 0 has no interfaces? [ 632.346148][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.357384][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.445710][ T48] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 632.485785][ T9937] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 632.485811][ T9937] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 632.503879][ T9937] usb 2-1: Product: syz [ 632.508539][ T9937] usb 2-1: Manufacturer: syz [ 632.513202][ T9937] usb 2-1: SerialNumber: syz [ 632.519984][ T9937] usb 2-1: config 0 descriptor?? [ 632.525776][ T9047] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 632.528966][ T48] usb 3-1: USB disconnect, device number 12 [ 632.535949][ T9047] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 632.558320][ T9047] usb 5-1: Product: syz [ 632.562487][ T9047] usb 5-1: Manufacturer: syz [ 632.569936][ T9047] usb 5-1: SerialNumber: syz [ 632.575449][ T9047] usb 5-1: config 0 descriptor?? [ 632.628909][ T9047] hub 5-1:0.0: USB hub found [ 632.845705][ T9047] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) 21:34:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:22 executing program 5 (fault-call:3 fault-nth:65): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:22 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x410100, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x6bc06970, 0x2, {0xffffffffffffffff, 0x0, 0x400, 0x1, 0x3}, 0x80000001}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:34:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="081caa81cb87f6191d6714bdc7e66c616a2fc716a3a9a012ec6d47b66cbf5ccb88e807443b4d31268be03f72b758d2eb7e699d8e20bc3c5740d0e66a4e084e5ebf6ece4896defb8b4cfabf55db90cca99c9c426a13f85bc2a4b9abbd63e8d2bb4700b97eb9b2773c88f6fdafccf8eccb1f4359d28bc869c961", 0x79) mq_timedreceive(r3, &(0x7f00000000c0)=""/110, 0x6e, 0x3ff, &(0x7f0000000000)) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 632.915993][ T3895] usb 2-1: USB disconnect, device number 2 [ 632.972061][T23456] hfsplus: unable to parse mount options [ 633.126284][ T9047] usb 5-1: USB disconnect, device number 74 [ 633.295688][ T9937] usb 3-1: new high-speed USB device number 13 using dummy_hcd 21:34:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\t\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) [ 633.545690][ T9937] usb 3-1: Using ep0 maxpacket: 32 21:34:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d21793dbf08731b0902"], 0x0) 21:34:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000080)=0x8, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_ivalue}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_dccp_buf(r4, 0x21, 0x3, &(0x7f00000000c0)=""/20, &(0x7f0000000100)=0x14) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:34:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x1d, 0x17, 0x137, &(0x7f0000000280)}) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 633.585758][ T9937] usb 3-1: too many configurations: 27, using maximum allowed: 8 21:34:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xa0000, 0x0) recvfrom$l2tp6(r1, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x20) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r4 = dup2(r3, r0) ioctl$UI_DEV_CREATE(r4, 0x5501) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 633.630015][T23491] hfsplus: unable to parse mount options [ 633.655740][T23495] bridge_slave_0: mtu less than device minimum [ 633.667372][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:34:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f00000008c0)=""/108, 0x6c}], 0x9, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 633.681432][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.767160][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.780718][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.797652][T23507] hfsplus: unable to parse mount options [ 633.855701][ T3895] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 633.865937][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.904064][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.945648][ T48] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 633.996162][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.007674][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.096087][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.107906][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.125701][ T3895] usb 5-1: Using ep0 maxpacket: 32 [ 634.165680][ T3895] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 634.195596][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 634.196010][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.212289][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.246055][ T48] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 634.256325][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.269481][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.296074][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.310554][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.325699][ T48] usb 2-1: config 0 has no interfaces? [ 634.377226][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.390825][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.395985][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.413072][ T9937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.425673][ T48] usb 2-1: config 0 has no interfaces? [ 634.496859][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.510959][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.523401][ T48] usb 2-1: config 0 has no interfaces? [ 634.577334][ T9937] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 634.588399][ T9937] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 634.598654][ T9937] usb 3-1: Product: syz [ 634.605628][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.605701][ T9937] usb 3-1: Manufacturer: syz [ 634.623725][ T48] usb 2-1: config 0 has no interfaces? [ 634.627094][ T9937] usb 3-1: SerialNumber: syz [ 634.635022][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.643884][ T9937] usb 3-1: config 0 descriptor?? [ 634.697217][ T9937] hub 3-1:0.0: USB hub found [ 634.715589][ T48] usb 2-1: config 0 has no interfaces? [ 634.755605][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.769317][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.815636][ T48] usb 2-1: config 0 has no interfaces? [ 634.875926][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.888355][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.905608][ T48] usb 2-1: config 0 has no interfaces? [ 634.975662][ T9937] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 634.985612][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.001415][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.014237][ T48] usb 2-1: config 0 has no interfaces? [ 635.056831][ T9937] usb 3-1: USB disconnect, device number 13 [ 635.095637][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.108314][ T3895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.205627][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=3d.79 [ 635.216586][ T48] usb 2-1: New USB device strings: Mfr=191, Product=8, SerialNumber=115 [ 635.227344][ T48] usb 2-1: Product: syz [ 635.233733][ T48] usb 2-1: Manufacturer: syz [ 635.241516][ T48] usb 2-1: SerialNumber: syz [ 635.248245][ T48] usb 2-1: config 0 descriptor?? [ 635.305723][ T3895] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 635.322406][ T3895] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 635.335000][ T3895] usb 5-1: Product: syz [ 635.339912][ T3895] usb 5-1: Manufacturer: syz [ 635.345115][ T3895] usb 5-1: SerialNumber: syz [ 635.351075][ T3895] usb 5-1: config 0 descriptor?? 21:34:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000000)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:34:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000e00000000000000000000000500000000000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0x70}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x4e21, @loopback}}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000080)={0x1, 0x2, 0x3b55, {0x8, 0x9}, 0xf6, 0x6}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200), 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000280)=0x8) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20081, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x1) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 635.407411][ T3895] hub 5-1:0.0: USB hub found [ 635.490706][T23541] hfsplus: unable to parse mount options [ 635.529681][ T9902] usb 2-1: USB disconnect, device number 3 [ 635.637220][ T3895] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 635.755482][ T48] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 635.906255][ T3895] usb 5-1: USB disconnect, device number 75 [ 636.035485][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 636.085496][ T48] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 636.175770][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.188892][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:34:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\t\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x104) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x4, 0x7f, 0x80}, 0x10) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x8001) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:34:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@default, @netrom, @netrom, @null, @bcast, @null, @default, @default]}, &(0x7f0000000080)=0x48, 0x80000) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x180, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b0902"], 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1e, 0x805, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={r7}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e21, 0x9, @private2, 0x4}}, 0x92d, 0x40}, 0x90) [ 636.286103][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.303611][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:34:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x400000080, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="191e86bd444d873a3ac7428060ee097370c635d45563a651e843d41c53a0ffd5d94f6d4252a7a5634ba074de768a8f350da6b331b706fbbd8785d372499f1e34ba6766fa7521b9a61856e5ee3a09d0a69a3dada89a23e0fff988920a9b43", 0x5e, 0x5}, {&(0x7f0000000280)="e9ab45682645f0c0d48bd3e144d195cbd49fa3b1c3f82e064f334a1da3c7a1facebfd60475e44b2b450d7c0a2543bacc65840a278539ad0072650dfb4866acfe273dfa59ea0671eea3f74286f4d80326899caec72108ff5a79439d559cd16c6b945799aad5fe4a4d1103cad612fa8ff9e8d525a56a306164ee9b3712abe2ee7bbfd68f06fdeedbf5", 0x88, 0x10000}], 0x20000, &(0x7f0000000440)=ANY=[]) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x440200, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r5, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x88ef4ed07099d041) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) [ 636.395773][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.417685][T23581] hfsplus: unable to parse mount options [ 636.437883][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:34:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x8) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) 21:34:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 636.584932][T23602] hfsplus: unable to parse mount options [ 636.595710][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.620796][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.685445][ T9047] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 636.715684][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.745342][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.805379][ T5] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 636.845844][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.858420][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.935424][ T9047] usb 5-1: Using ep0 maxpacket: 32 [ 636.955712][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.967958][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.975778][ T9047] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 637.055430][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 637.065936][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.066906][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.078245][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.092478][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.101062][ T5] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 637.196095][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.207613][ T5] usb 2-1: config 0 has no interfaces? [ 637.213651][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.275382][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 637.285004][ T48] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 637.285356][ T5] usb 2-1: config 0 has no interfaces? [ 637.294836][ T48] usb 3-1: Product: syz [ 637.301313][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.304641][ T48] usb 3-1: Manufacturer: syz [ 637.320958][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.323883][ T48] usb 3-1: SerialNumber: syz [ 637.339180][ T48] usb 3-1: config 0 descriptor?? [ 637.395390][ T5] usb 2-1: config 0 has no interfaces? [ 637.395560][ T48] hub 3-1:0.0: USB hub found [ 637.408620][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.421128][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.475429][ T5] usb 2-1: config 0 has no interfaces? [ 637.505892][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.518784][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.555398][ T5] usb 2-1: config 0 has no interfaces? [ 637.605985][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.618295][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.635433][ T5] usb 2-1: config 0 has no interfaces? [ 637.695663][ T48] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 637.708363][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.722403][ T5] usb 2-1: config 0 has no interfaces? [ 637.729111][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.776415][ T48] usb 3-1: USB disconnect, device number 14 [ 637.815416][ T5] usb 2-1: config 0 has no interfaces? [ 637.822995][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.841057][ T9047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.975317][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 637.984750][ T5] usb 2-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 637.994174][ T5] usb 2-1: Product: syz [ 637.998851][ T5] usb 2-1: Manufacturer: syz [ 638.003916][ T5] usb 2-1: SerialNumber: syz [ 638.009284][ T9047] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 638.018854][ T9047] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 638.019163][ T5] usb 2-1: config 0 descriptor?? [ 638.035248][ T9047] usb 5-1: Product: syz [ 638.035256][ T9047] usb 5-1: Manufacturer: syz [ 638.035263][ T9047] usb 5-1: SerialNumber: syz [ 638.041615][ T9047] usb 5-1: config 0 descriptor?? [ 638.096466][ T9047] hub 5-1:0.0: USB hub found 21:34:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000000)=""/57) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4004c0, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) recvmmsg(r3, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000200)=""/21, 0x15}], 0x4}, 0x7f}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/136, 0x88}], 0x2, &(0x7f0000000500)=""/15, 0xf}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/45, 0x2d}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)}, {&(0x7f0000002800)=""/171, 0xab}, {&(0x7f00000028c0)=""/173, 0xad}], 0x9, &(0x7f0000002a40)=""/255, 0xff}}, {{&(0x7f0000002b40)=@l2tp6, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/180, 0xb4}], 0x1, &(0x7f0000002cc0)=""/67, 0x43}, 0x7}, {{&(0x7f0000002d40)=@generic, 0x80, &(0x7f0000004280)=[{&(0x7f0000002dc0)=""/136, 0x88}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/12, 0xc}, {&(0x7f0000003ec0)=""/192, 0xc0}, {&(0x7f0000003f80)=""/68, 0x44}, {&(0x7f0000004000)=""/199, 0xc7}, {&(0x7f0000004100)=""/81, 0x51}, {&(0x7f0000004180)=""/73, 0x49}, {&(0x7f0000004200)=""/86, 0x56}], 0x9, &(0x7f0000004340)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000005340)=@nfc_llcp, 0x80, &(0x7f00000054c0)=[{&(0x7f00000053c0)=""/60, 0x3c}, {&(0x7f0000005400)=""/82, 0x52}, {&(0x7f0000005480)=""/50, 0x32}], 0x3, &(0x7f0000005500)=""/70, 0x46}}, {{&(0x7f0000005580)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005700)=[{&(0x7f0000005600)=""/53, 0x35}, {&(0x7f0000005640)=""/174, 0xae}], 0x2}, 0xff}], 0x7, 0x10040, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) 21:34:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 638.230938][T23636] hfsplus: unable to parse mount options [ 638.315267][ T9047] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 638.465322][ T9902] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 638.575858][ T9047] usb 5-1: USB disconnect, device number 76 [ 638.725280][ T9902] usb 3-1: Using ep0 maxpacket: 32 [ 638.765310][ T9902] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 638.876712][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.890326][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:34:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\t\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f00000000c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) accept4$x25(r1, 0x0, &(0x7f0000000000), 0x80000) setitimer(0x2, 0x0, &(0x7f0000000080)) 21:34:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r2], 0x18}, 0x0) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x1c}, 0x0) close(r2) close(r1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'veth0_to_hsr\x00', @ifru_settings={0x5, 0x400, @fr_pvc_info=&(0x7f0000000100)={0xfff, 'caif0\x00'}}}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x301000) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 21:34:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 638.985585][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.998545][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.055110][T23662] hfsplus: unable to parse mount options [ 639.106902][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.131145][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.225841][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.241021][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.325331][ T48] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 639.345735][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.357112][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:34:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10200, 0x14) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xba61472e6b5bb42e}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xe0c, 0x0, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x5}, 0xf, 0x5, 0x5, 0x4, 0x12, 'syz1\x00', "2b103c8534364c13f1d1559b4b03dc97fc503b703724cc59b4f46a69fef8e05d", "08ea7b3ff5ebd3a69cd0fd4f9c2df6f2461cdbaa3313ce1c7a785863dab0e52d", [{0x8, 0x2, {0x1, 0x4}}, {0x7, 0x8000, {0x3, 0x6}}, {0x1000, 0x7, {0x1, 0x10000}}, {0x200, 0x800, {0x0, 0x4f296acd}}, {0x100, 0x46, {0x2}}, {0x7ff, 0xc9ec, {0x2, 0x7}}, {0x2, 0x109a, {0x3}}, {0x6, 0x0, {0x0, 0x8}}, {0x8001, 0x0, {0x0, 0x1}}, {0x0, 0x3, {0x2, 0x1}}, {0xc14, 0x8, {0x3, 0x7}}, {0x2, 0x2, {0x6, 0x80000000}}, {0x1, 0x1, {0x1, 0x7fff}}, {0x0, 0x3, {0x1, 0x10001}}, {0x7, 0x400, {0x3, 0x5}}, {0x4, 0x101, {0x2, 0x9}}, {0x9, 0x3f, {0x3, 0x6}}, {0xff, 0x1000, {0x1, 0x9}}, {0x81, 0x2, {0x3, 0x9853}}, {0x9, 0x4, {0x3, 0xa1}}, {0x80, 0x1, {0x0, 0x1}}, {0x3ff, 0x400, {0x2, 0x9}}, {0x9, 0x800, {0x0, 0x40}}, {0x71bc, 0x2, {0x3, 0x7}}, {0x81ad, 0x1, {0x1, 0x4}}, {0x6, 0xfff8, {0x2, 0x9}}, {0x1, 0x400, {0x3, 0x6}}, {0x40, 0x3, {0x1, 0x1}}, {0xc3, 0x7, {0x3, 0x89}}, {0xffff, 0x22, {0x2, 0x7e3}}, {0x8, 0x2, {0x2, 0x40}}, {0x100, 0x81, {0x2, 0x20}}, {0x7, 0xc4, {0x1, 0x3}}, {0x5, 0x1, {0x3, 0x7f}}, {0x8, 0x6, {0x2, 0x8001}}, {0xed, 0x3, {0x1, 0xa124}}, {0x0, 0x9, {0x2}}, {0x7, 0x0, {0x1}}, {0x401, 0x5, {0x3, 0x5}}, {0x2, 0x5786, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x1, 0x1, 0x81, 0x7, 0x24, 'syz0\x00', "a0cfa15a008b33fbe5491511f62c3a496fd544c7bd5691f3d21957f9f04399e2", "fe9378f26aa61e3271eb0e0a79bd847aef0270dbcb2df1962e2f69dfd7f6d3a0", [{0x1, 0x20, {0x0, 0x5}}, {0xc73, 0x7ff, {0x1, 0x62}}, {0x3, 0x4, {0x2, 0x7f}}, {0x5, 0x8, {0x1, 0x1ff}}, {0x7, 0x827, {0x0, 0x7}}, {0x1500, 0x4, {0x3, 0x3}}, {0xffff, 0x2, {0x0, 0x5}}, {0xa0e, 0x3ff, {0x3, 0x2}}, {0x7, 0x9, {0x1, 0x80}}, {0x80, 0x800, {0x2, 0xffff}}, {0x7, 0x8000, {0x2, 0x1000}}, {0x1, 0x59f3, {0x9d6d014865b1bd67, 0xa44d}}, {0x6, 0x5, {0x0, 0xf4}}, {0x7, 0x8001, {0x1, 0x2}}, {0x8, 0x0, {0x2, 0x10000}}, {0x0, 0x2, {0x0, 0x8}}, {0x2, 0xffff, {0x3, 0x1}}, {0x7, 0x3, {0x3, 0x2}}, {0xd18d, 0xfbff, {0x3, 0x1}}, {0x3, 0x7ff, {0x0, 0xefa}}, {0x7, 0x8001, {0x2, 0x7}}, {0x8000, 0x0, {0x3, 0x4}}, {0x101, 0xff, {0x3, 0x5}}, {0x5, 0x40, {0x2, 0x25eb74b1}}, {0x0, 0x4fd, {0x2, 0x7ff}}, {0x1, 0x940, {0x0, 0x1}}, {0x101, 0xee, {0x0, 0x7}}, {0xfb85, 0x9, {0x3, 0x6}}, {0x6, 0x1f, {0x0, 0x89}}, {0x100, 0x5, {0x1, 0x6}}, {0x1a7, 0x8b, {0x2}}, {0x1, 0x5, {0x0, 0xffffffff}}, {0x2, 0x4, {0x0, 0x4}}, {0xc000, 0x8, {0x0, 0x9}}, {0xfe01, 0x7, {0x1, 0x3ff}}, {0x2, 0x3, {0x3, 0x3e}}, {0x6, 0x4ec6, {0x2, 0x7f}}, {0x5, 0xfff, {0x1, 0x9}}, {0xfff, 0x1, {0x2, 0x400}}, {0x0, 0x35, {0x3, 0xffffffc7}}]}}}, {{0x254, 0x1, {{0x1, 0xa0c}, 0xff, 0xcd, 0x6, 0x8, 0x7, 'syz0\x00', "22487581a5c5833bb95535e1cdffa23c184427c3900fb8d4fb16b6bc8927974c", "7b3888c8b300187b43370c0c4484ff5e0231364b4295b8146c328214ee2ed3b4", [{0x0, 0x3f, {0x2, 0x4}}, {0x9, 0xa7ac, {0x1, 0x3}}, {0x7, 0x1ff, {0x0, 0x100}}, {0x1f6, 0x46, {0x2, 0x2}}, {0x7, 0xff, {0x1, 0x1ff}}, {0x5, 0x1, {0x1, 0x5c}}, {0x0, 0x81, {0x2, 0x7f}}, {0x1ff, 0x0, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x9}}, {0x5, 0xff, {0x2}}, {0x5, 0x5, {0x0, 0x8}}, {0x2, 0x8a3c, {0x1, 0x10001}}, {0x4, 0xe9a, {0x3, 0x10001}}, {0xff4e, 0x57, {0x3, 0x2}}, {0x3f, 0xc365, {0x0, 0x6}}, {0x100, 0x6, {0x3, 0x8000}}, {0xfff, 0x7, {0x2, 0x4}}, {0x3bc, 0x7, {0x1, 0x2}}, {0xf4, 0x8001, {0x3, 0x20}}, {0xfff9, 0x9, {0x3, 0x1000}}, {0xfff, 0x800, {0x3, 0x80}}, {0x4, 0x8, {0x0, 0x5}}, {0x40, 0x5, {0x0, 0xf10}}, {0xfff9, 0x6, {0x3, 0x5}}, {0x6, 0x1, {0x1, 0x4}}, {0x9, 0x4, {0x3, 0x90f}}, {0x100, 0x0, {0x3, 0xa3ff}}, {0x400, 0x3ff, {0x3, 0x9}}, {0x2, 0x9, {0x0, 0x6}}, {0x3, 0x0, {0x3, 0x9}}, {0x2, 0xcf4, {0x3, 0x20}}, {0x0, 0x3, {0x1, 0xffffffff}}, {0x5, 0x5, {0x3, 0x8}}, {0x6, 0xfc, {0x2, 0x2}}, {0x5, 0x2, {0x2, 0x46a7}}, {0x0, 0xd7fe, {0x3, 0x9da}}, {0x7, 0x1, {0x2, 0x2fa7}}, {0x6}, {0x800, 0x6, {0x1, 0x5}}, {0x400, 0x8, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x11, 0xfc, 0x5f59, 0xc000, 0x1f, 'syz0\x00', "faf29648280ae58816985ea8b33c1db73d84b130dc3ba2f8be30dd6b6a039363", "8f32cb167423301471972c9e42afaeaf56265bef36796454e1dfb864c0701949", [{0x1, 0x3f, {0x2, 0x1}}, {0x100, 0x6, {0x3, 0x101}}, {0x8000, 0x742, {0x3, 0x5}}, {0x6, 0x6, {0x2}}, {0x56d, 0x4, {0x3}}, {0x3f, 0x7, {0x1, 0xffff8689}}, {0x1ff, 0x1ec, {0x3, 0x101}}, {0x3f, 0x9, {0x2, 0xfa83}}, {0x97b9, 0x97, {0x2, 0x3ff}}, {0x6, 0x800, {0x3, 0x3}}, {0x8, 0x9, {0x0, 0x3ff}}, {0x99, 0x6, {0x0, 0xb4}}, {0x200, 0x100, {0x1, 0x1}}, {0x3, 0xfff7, {0x0, 0x80000000}}, {0x6, 0x40, {0x2}}, {0x6, 0x8, {0x3, 0x5}}, {0x3, 0x1, {0x1, 0x6}}, {0x81, 0x7a8, {0x2, 0x200}}, {0x6, 0x6, {0x3}}, {0x2, 0xfac, {0x0, 0x81}}, {0x40, 0x0, {0x3, 0x3}}, {0x3, 0xef7c, {0x0, 0xf80}}, {0x6fb, 0x81, {0x1, 0xffffffff}}, {0x7, 0x5, {0x1, 0x9e8}}, {0x6, 0x3f, {0x2, 0x2}}, {0x1, 0x5, {0x3, 0x2}}, {0xfff9, 0x2, {0x0, 0x9}}, {0x3, 0x2, {0x1, 0x1}}, {0x40, 0x7, {0x1, 0x8}}, {0x2, 0x1, {0x3, 0x7a8}}, {0x2, 0x1469, {0x3, 0x2}}, {0x6, 0x8, {0x1, 0x6}}, {0x600, 0x1, {0x1, 0x5}}, {0x3, 0x0, {0x3, 0xd}}, {0x400, 0x0, {0x2, 0x5}}, {0x1ac, 0x6, {0x1, 0x88b}}, {0xff, 0x8000, {0x3, 0x200}}, {0x9, 0x3, {0x3, 0x3ff}}, {0x3f7, 0x85f1, {0x0, 0x31c}}, {0x3f, 0x5, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1}, 0xb6, 0x20, 0x8, 0x20, 0x1c, 'syz1\x00', "02561e4176b4d05db51ee1a88896e8b94d41b47ee046138c8c2e36c1dc7c721a", "23615a65358e84601a77ef1a34dd7864b2de1954272e37762dda8c2e825ee7bf", [{0x6, 0x1, {0x2}}, {0x6, 0x5, {0x3, 0x1}}, {0x1cdf, 0x2, {0x3, 0xfff}}, {0x8000, 0xfffa, {0x0, 0x80}}, {0x14, 0x9, {0x1, 0x1}}, {0x9, 0x8, {0x3, 0x33}}, {0x100, 0x5, {0x0, 0x7}}, {0xce3, 0x1ff, {0x2, 0x9}}, {0xb5f, 0xc4d, {0x3, 0x1}}, {0x8, 0x9fb0, {0x3, 0x80000000}}, {0x1f, 0x5, {0x1}}, {0x9, 0x6, {0x3, 0x4}}, {0x1, 0x101, {0x2, 0x8000}}, {0x500, 0x1, {0x2, 0x4}}, {0x9, 0x5, {0x2, 0x4}}, {0x2, 0x7fff, {0x3, 0x9}}, {0x1bbb, 0x1, {0x0, 0x5d}}, {0x2, 0x7, {0x3, 0x5f7a}}, {0x9, 0xfc00, {0x1, 0xff}}, {0x0, 0x0, {0x1, 0x40}}, {0xff, 0x6, {0x1, 0x6d}}, {0x8, 0x0, {0x0, 0x80}}, {0xff, 0x7fff, {0x3, 0x7fffffff}}, {0x1ff, 0x1, {0x2}}, {0x5, 0xa525, {0x3, 0x4}}, {0x1, 0x3, {0x2}}, {0x7ff, 0x80, {0x2, 0x80000000}}, {0x800, 0xffff, {0x2, 0x81}}, {0x1, 0xfff9, {0x2, 0x5}}, {0x7, 0x200, {0x2, 0x20}}, {0x5, 0x3, {0x2, 0x6}}, {0x6, 0x4, {0x0, 0x5}}, {0x400, 0x1, {0x0, 0x1ff}}, {0x1cd, 0xfb06, {0x2, 0xc8}}, {0xff7f, 0xcd, {0x1, 0x6}}, {0x1, 0x3, {0x2, 0x1000}}, {0x800, 0x81f, {0x1, 0x8}}, {0x7, 0x43a, {0x1, 0x3}}, {0x7ff, 0x3f, {0x1, 0x6}}, {0x8, 0x401, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xfff}, 0x0, 0x3f, 0x2, 0x800, 0x21, 'syz1\x00', "99dfc3376810978e1c077f38d38b80494988e79aaebdd957c20d5921c0d9582d", "a09a0554c3cfabae167d79cd9a88a73928b1328c0d63fbe7128563b5b3ef03fe", [{0x6, 0x7fff, {0x1}}, {0x0, 0x1f, {0x1, 0x8}}, {0xe45f, 0x8000, {0x2, 0x57}}, {0x4, 0x2, {0x2, 0x4b80}}, {0x3, 0x6, {0x2, 0x1}}, {0x1, 0x8, {0x3, 0x7fffffff}}, {0x1, 0x2, {0x3, 0x7f}}, {0x101, 0x7, {0x2, 0x5}}, {0x800, 0x2, {0x1, 0x7}}, {0x800, 0x4, {0x0, 0x8001}}, {0x8001, 0x8, {0x1, 0x7fff}}, {0x200, 0x5, {0x0, 0x4}}, {0x5, 0x7, {0x0, 0x1000}}, {0x2, 0x9, {0x3, 0x2}}, {0xc200, 0x9, {0x0, 0x2}}, {0x1ff, 0x7, {0x3, 0x7fffffff}}, {0x7, 0x5, {0x3, 0x4}}, {0x9, 0x4, {0x1, 0x100}}, {0x6, 0x1, {0x3, 0x1f}}, {0xaa, 0xa512, {0x1, 0x100}}, {0x35, 0x800, {0x1, 0xffffffaa}}, {0x0, 0x2, {0x0, 0x1}}, {0x82a, 0x1000, {0x3, 0xa04b}}, {0x591, 0x800, {0x1, 0xfffffff8}}, {0x7fc, 0x0, {0x3, 0x1bf5}}, {0x2, 0x6, {0x1, 0x5}}, {0xa77, 0x7ff, {0x0, 0x5}}, {0x1, 0x5, {0x3, 0x400}}, {0x9, 0x5, {0x3, 0xe7}}, {0x4, 0xff, {0x1}}, {0x6, 0x7, {0x0, 0xffffff78}}, {0x4, 0x7f80, {0x93d7ea35e57ea415}}, {0x3, 0x4, {0x2, 0x8000}}, {0x0, 0x6}, {0x9, 0x5, {0x3, 0x1}}, {0x9, 0x7, {0x3, 0x5ba}}, {0x5, 0x2a12, {0x3, 0x8}}, {0x9, 0x1, {0x1, 0x1f}}, {0x101, 0x4, {0x1, 0x2bb5}}, {0x3, 0x9, {0x2, 0x3}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) 21:34:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x141000, 0x0) mq_timedsend(r1, &(0x7f0000000180)="fcb6f8007be7b9705b2b178c9dd01655ff781c7855066be1c77772a46bbcbc7b0974a6977a26d159e92983ba69cac16a45c4ed50238b7b96a2227e09d8ac82b88318df6ffe3894d5cd603cacdc87394a7137566a3b9f04cb4a8805c579f3a9ee11c58afc750d1e591bd2ec3acd1a769a78898f3a40193a2183b0439a97f920da2cc3b9bc6af3148a22acdbbaf86510964dcf70ff11230ad857fdb99174385b6629d64bca824972f58aa732d2d955f0b39b1186", 0xb3, 0x39a400000, &(0x7f0000000280)={0x77359400}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x22800, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x20000, 0x0, [0xfffffffffffffffd, 0xffffffff, 0x8, 0x5, 0x5, 0x3, 0x8, 0xc58a]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 21:34:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10) socket$inet(0x2, 0x4, 0x96) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 639.371643][ T9937] usb 2-1: USB disconnect, device number 4 [ 639.417659][T23687] hfsplus: unable to parse mount options [ 639.455624][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.468116][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.585800][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.596723][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 639.607687][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.645931][ T48] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 639.715211][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.726323][ T9902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.736256][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.747361][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.775196][ T9937] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 639.835978][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.847255][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.925686][ T9902] usb 3-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 639.934726][ T9902] usb 3-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 639.943068][ T9902] usb 3-1: Product: syz [ 639.947547][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.958651][ T9902] usb 3-1: Manufacturer: syz [ 639.963314][ T9902] usb 3-1: SerialNumber: syz [ 639.967966][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.978520][ T9902] usb 3-1: config 0 descriptor?? [ 640.035572][ T9902] hub 3-1:0.0: USB hub found [ 640.047999][ T9937] usb 2-1: device descriptor read/64, error 18 [ 640.075166][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.086233][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.195136][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.206872][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.325646][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.336829][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.425593][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.435089][ T9937] usb 2-1: device descriptor read/64, error 18 [ 640.437018][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.485129][ T9902] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 640.535220][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.547596][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.575686][ T9902] usb 3-1: USB disconnect, device number 15 [ 640.705124][ T9937] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 640.755144][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=213d, bcdDevice=54.79 [ 640.764271][ T48] usb 5-1: New USB device strings: Mfr=3, Product=40, SerialNumber=162 [ 640.773340][ T48] usb 5-1: Product: syz [ 640.777903][ T48] usb 5-1: Manufacturer: syz [ 640.782492][ T48] usb 5-1: SerialNumber: syz [ 640.788524][ T48] usb 5-1: config 0 descriptor?? [ 640.825607][ T48] hub 5-1:0.0: USB hub found 21:34:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:30 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) 21:34:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10) socket$inet(0x2, 0x4, 0x96) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40010, 0x0, 0x0) 21:34:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) [ 640.975581][ T9937] usb 2-1: device descriptor read/64, error 18 [ 641.035938][T23729] hfsplus: unable to parse mount options [ 641.036778][ T48] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 641.285064][ T9047] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 641.315504][ T48] usb 5-1: USB disconnect, device number 77 [ 641.385042][ T9937] usb 2-1: device descriptor read/64, error 18 [ 641.505039][ T9937] usb usb2-port1: attempt power cycle [ 641.525083][ T9047] usb 3-1: Using ep0 maxpacket: 32 [ 641.565205][ T9047] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 641.645183][ T9047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.656234][ T9047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:34:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000206d043d2179540328a21b09022400010000db0009040000010301010009250000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000009000000090002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 21:34:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10) socket$inet(0x2, 0x4, 0x96) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f587b6fc7d245cff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c288a658fc6974edb8e258c738811f523b25c3d94c91b7d080f5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef8", 0x250, 0x40010, 0x0, 0x0) 21:34:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}, {0x800000008}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x4, 0x400) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x7, 0x0, 0x8fb8, 0x3f, 0x2, 0x1, 0x81, 0x1, 0x80000000, 0x7, 0x1, 0x5, 0x0, 0x5, 0x1, 0x100000001], 0x5000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300000e0000000000000000000000000000000a0000000000000000000200000000000000000000000001000000006bd9af990200010000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff00"/112], 0x70}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0xa20000, 0x3f, 0x7f3, r5, 0x0, &(0x7f0000000180)={0x9a091e, 0x0, [], @p_u16=&(0x7f0000000140)=0x5}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110000000000000000001a000000050092000001000014002280ba330553080001000000000008000400000600000700210062620000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="04000000", @ANYRES16=r8, @ANYBLOB="000329bd7000fedbdf251a00000034002280080002000800000008000100c6a30000080005003f00000008000300040000000800060005000000080004000200000008009a000000000005009200570000000800010001000000"], 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x4004801) 21:34:31 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='c']) [ 641.745304][ T9047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.757564][ T9047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.806623][T23756] hfsplus: unable to parse mount options [ 641.845816][ T9047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.857113][ T9047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.955417][ T9047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.974970][ T9047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.999064][ T5032] ================================================================== [ 642.007184][ T5032] BUG: KCSAN: data-race in drop_nlink / generic_fillattr [ 642.014257][ T5032] [ 642.016574][ T5032] write to 0xffff8881210d39e8 of 4 bytes by task 23767 on cpu 1: [ 642.024351][ T5032] drop_nlink+0x37/0x90 [ 642.028481][ T5032] shmem_unlink+0x16f/0x190 [ 642.032951][ T5032] shmem_rename2+0x2f4/0x430 [ 642.037517][ T5032] vfs_rename+0x782/0xba0 [ 642.041901][ T5032] do_renameat2+0x554/0x930 [ 642.046389][ T5032] __x64_sys_rename+0x3a/0x40 [ 642.051034][ T5032] do_syscall_64+0x51/0xb0 [ 642.055420][ T5032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 642.061276][ T5032] [ 642.063588][ T5032] read to 0xffff8881210d39e8 of 4 bytes by task 5032 on cpu 0: [ 642.071100][ T5032] generic_fillattr+0x74/0x180 [ 642.075834][ T5032] shmem_getattr+0x232/0x2c0 [ 642.080389][ T5032] __se_sys_newfstat+0x1b6/0x510 [ 642.085382][ T5032] __x64_sys_newfstat+0x2d/0x40 [ 642.090198][ T5032] do_syscall_64+0x51/0xb0 [ 642.094582][ T5032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 642.100531][ T5032] [ 642.102826][ T5032] Reported by Kernel Concurrency Sanitizer on: [ 642.108947][ T5032] CPU: 0 PID: 5032 Comm: systemd-udevd Not tainted 5.8.0-rc3-syzkaller #0 [ 642.117406][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.127429][ T5032] ================================================================== [ 642.136239][ T5032] Kernel panic - not syncing: panic_on_warn set ... [ 642.142794][ T5032] CPU: 0 PID: 5032 Comm: systemd-udevd Not tainted 5.8.0-rc3-syzkaller #0 [ 642.151273][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.161305][ T5032] Call Trace: [ 642.164567][ T5032] dump_stack+0x10f/0x19d [ 642.168872][ T5032] panic+0x207/0x64a [ 642.173345][ T5032] ? vprintk_emit+0x44a/0x4f0 [ 642.177991][ T5032] kcsan_report+0x684/0x690 [ 642.182471][ T5032] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 642.187987][ T5032] ? generic_fillattr+0x74/0x180 [ 642.192894][ T5032] ? shmem_getattr+0x232/0x2c0 [ 642.197725][ T5032] ? __se_sys_newfstat+0x1b6/0x510 [ 642.202820][ T5032] ? __x64_sys_newfstat+0x2d/0x40 [ 642.207833][ T5032] ? do_syscall_64+0x51/0xb0 [ 642.212413][ T5032] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 642.218483][ T5032] ? tomoyo_path_perm+0x2d9/0x330 [ 642.223498][ T5032] kcsan_setup_watchpoint+0x453/0x4d0 [ 642.229202][ T5032] generic_fillattr+0x74/0x180 [ 642.233966][ T5032] shmem_getattr+0x232/0x2c0 [ 642.238529][ T5032] ? shmem_listxattr+0x40/0x40 [ 642.243267][ T5032] __se_sys_newfstat+0x1b6/0x510 [ 642.248186][ T5032] ? __secure_computing+0x12e/0x1c0 [ 642.253356][ T5032] ? syscall_trace_enter+0x2c5/0x3e0 [ 642.258648][ T5032] __x64_sys_newfstat+0x2d/0x40 [ 642.263564][ T5032] do_syscall_64+0x51/0xb0 [ 642.267976][ T5032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 642.273846][ T5032] RIP: 0033:0x7fee138782e2 [ 642.278231][ T5032] Code: Bad RIP value. [ 642.282270][ T5032] RSP: 002b:00007ffd2205d748 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 642.290652][ T5032] RAX: ffffffffffffffda RBX: 00007fee13b33440 RCX: 00007fee138782e2 [ 642.298599][ T5032] RDX: 00007ffd2205d750 RSI: 00007ffd2205d750 RDI: 000000000000000e [ 642.306552][ T5032] RBP: 000055dde315e2a0 R08: 0000000000000b40 R09: 000055dde3162e90 [ 642.314532][ T5032] R10: 000055dde315e2a0 R11: 0000000000000246 R12: 0000000000000001 [ 642.322531][ T5032] R13: 000000000000003e R14: 000055dde3162e90 R15: 00007ffd2205d9f0 [ 642.332467][ T5032] Kernel Offset: disabled [ 642.336778][ T5032] Rebooting in 86400 seconds..