&(0x7f0000000100)='./file0\x00', 0x0) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01694e6f3d617574672c726f6f74636f6e746578743d742225"]) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0xfff, 0x4) 04:03:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200)=0xffffffffffffffff, 0x400c00) 04:03:39 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x6, 0xcaf, 0x477, 0x5, 0x3, r0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x900}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x814}, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) [ 2146.713494][T18885] overlayfs: unrecognized mount option "iNo=autg" or missing value [ 2146.731065][T18891] overlayfs: unrecognized mount option "iNo=autg" or missing value [ 2146.986110][T31846] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2147.125168][T20363] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2147.224579][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2147.343965][T31846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2147.354982][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2147.365557][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2147.375854][T31846] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2147.463575][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2147.472657][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2147.481178][T31846] usb 1-1: SerialNumber: syz [ 2147.486114][T20363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2147.497738][T20363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2147.508094][T20363] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 2147.517508][T18890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2147.524684][T20363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.532715][T18890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2147.540464][T20363] usb 3-1: config 0 descriptor?? [ 2147.553361][T31846] hub 1-1:1.0: bad descriptor, ignoring hub [ 2147.559273][T31846] hub: probe of 1-1:1.0 failed with error -5 04:03:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in=@empty}, {}, {}, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, 0xe8) 04:03:40 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) dup2(r0, r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(&(0x7f0000000000)='./file1\x00') writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="a66192d858420e966ee236307fc1867f6f530803a951d69e120aee1a9a5d7790bff839dc2851e3326a97348979cc27bc926e23517cae4754574632c32b1a4d0a6691f10b9696ab417a7edd3eed88a70399fff6be6dfa3b77d4e419616f0fae8250f5357330c4c29ecc7be2cf81f3dc1065b89a302bc91999b2925b1583cc5418e2ce26513e63a3568868f4306361fc251345290e2ea43d8537c4eec6faa47f15665d2364e5cae646d63c443a14a074bbda25bd52a1a5e120842e7dc415c191", 0xbf}, {&(0x7f0000000240)="d54caa770227918685432731bbbf2c883f5b9821a2d0a306d7821a4f609231383d3a53907ce8636677f42741ada56416935e2e662707012e20b812cde023ed6ec088cb81b0e3e4ee4fbbf625ed773ef153360a8bfba07bb510889874a07ed37aa0cd83384978da3b89c10921abb1f987d1eecfa78264d41756d2c7e63c50c5525ce1ace615365581aa90001dbc9ef6a82f48e4941dc5b5ef8e31a7a388cdc3f04f31cf76b9befd50f7a75174", 0xac}, {&(0x7f0000000400)="19237222b5cec4e4e9837079a53bbd35fc3db84413fbf40ea5fe27d426686abcf910765286a623a6b0c65f31472ed8574b1adef5bcc435b8f1015cc801064d1f7cd2b604391314660bfcc3208b0bd8374ade29bfae7506171834da1780dde24c751919aa7125554229bfe26e16a20d2fa4bc578ae771d9f72e1d63ec6dcd14f50994b5070edd090ef52bb940926149bfc5e03af786368fe10f339f1247e566bea07a586674d15e686163063ba175f6f5dfd4214b3a419800b1939f68", 0xbc}, {&(0x7f00000000c0)="99ab1bae52851a78caf082210cbe017d14a7ea37a596d96459426c46697c03a02c38877a9319f00af6c719a37f37dc63ff8881878bf22a8ba7", 0x39}, {&(0x7f0000000100)="f32e23f820ccf4f882a515cbc9ec", 0xe}], 0x5) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x42) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 04:03:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0xdb03) 04:03:40 executing program 1: pipe(0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x6004c050) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x11, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x20}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0xdd, @ipv4={[], [], @local}, 0x100}, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff000000}, 0x2, [0x2, 0xd, 0x6, 0x9, 0x1, 0x9, 0x8ad4, 0x2]}, 0x5c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x23c, r3, 0x802, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x9}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x401}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8a}, {0x6, 0x16, 0x20}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x401}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0x1f, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x7f}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0x1}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000001) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) io_setup(0x28ec4270, &(0x7f00000001c0)) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) [ 2147.765127][T18890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2147.772334][T18890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2147.815800][T18904] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2147.836309][T18910] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2147.854367][T18911] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:03:40 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000040)=0x2, 0x4) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, &(0x7f0000000840)='no\"e\x00') [ 2147.861588][T20363] usbhid 3-1:0.0: can't add hid device: -71 [ 2147.868918][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2147.883234][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2147.896006][T20363] usbhid: probe of 3-1:0.0 failed with error -71 [ 2147.896851][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2147.922981][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2147.928275][T20363] usb 3-1: USB disconnect, device number 92 [ 2147.944974][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2147.948972][T18924] cgroup2: Unknown parameter 'no"e' [ 2147.954673][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read 04:03:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) write$FUSE_DIRENT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="000000000000000000000003000100000000005b2a5c000000000000000000"], 0x30) sendfile(r0, r1, 0x0, 0x1c542) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x11, 0x85, &(0x7f00000000c0)="30ebe205614275d4f161827a87d0d70b897d2d2da952b92c16de1320c5b5755097f297b2dca3c4ee0d1e1efbfa8fccfd4d08ce746bc3b0a6ddc98cf6f23244cba4915550be1f7fe072eea29c01a69f9e776970228ea937a931f884eee7ad777e0a10174aba2d76def61aa5563a758b687c48f33d26e2999d13833faf72aa46fb505cbde551"}) fchown(r2, 0xee01, 0xee00) 04:03:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x3fe00) [ 2147.973072][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2147.977547][T18925] cgroup2: Unknown parameter 'no"e' [ 2148.029360][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2148.221183][T31846] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 108 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2148.270066][T31846] usb 1-1: USB disconnect, device number 108 [ 2148.277707][T31846] usblp0: removed 04:03:41 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x7fe00) 04:03:41 executing program 2: chdir(0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1008c20, &(0x7f0000000180)=ANY=[]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) renameat2(r0, &(0x7f00000006c0)='./file1\x00', r0, &(0x7f0000000740)='./bus\x00', 0x0) 04:03:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000feffffff0000000000000000851000001e000000950000000000000085000000220000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2148.987428][T31846] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2149.226675][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2149.346476][T31846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2149.357536][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2149.368161][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2149.378357][T31846] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2149.466280][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2149.475418][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2149.484069][T31846] usb 1-1: SerialNumber: syz [ 2149.506178][T18949] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2149.513003][T18949] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2149.526521][T31846] hub 1-1:1.0: bad descriptor, ignoring hub [ 2149.532513][T31846] hub: probe of 1-1:1.0 failed with error -5 04:03:42 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r2 = gettid() ptrace$setopts(0x4206, r2, 0xe, 0x1) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="f21df7652ff29c928835865f90847adcb96df5bf7b3c7a2ba0e3e4ee33b7732137c24c7c88fdf5ace41f5e546f91f182609bc097cae5585aa60caca624d06b24d56e3a52ce90186e1210203de6fa7549ba0cb4a318d7bd41152f06d734aaa02514548cee62ca4bd9fe3219b49f2bcfde2995380f0168ac970b45d845ad1ef9f92e38b7deaa7bf72f9b6e95a93665056877422d0bb56374ef4e813a9861f6bffc0186e7c9486cd6552e4d", 0xaa, 0x801, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) socket(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x43) write$cgroup_int(r0, &(0x7f0000000300), 0xfffffe8c) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) 04:03:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f733178666c6f70707900003190c7612a18ea85716d21263016cda117eecbed6c6fde2dfa"]) 04:03:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000041c0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) listen(r1, 0x30000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) exit_group(0x9) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x5e0, [0x0, 0x20000340, 0x200004c6, 0x200005dc], 0x0, &(0x7f0000000100), &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, 0x70f) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x5, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x82080, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000280)=0x4) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sendmsg$nl_generic(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000000c0)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40840) 04:03:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0xbfe00) 04:03:42 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x4, 0x18) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x44000600) ioctl$EVIOCSKEYCODE_V2(r0, 0x80084504, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, "11e327eb03dfeb584d64bf77e8f8cf60c6d0d78ad202025f160cae68cbecc38e"}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_getparam(r1, &(0x7f0000000000)) [ 2149.732488][T18949] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2149.739740][T18949] raw-gadget gadget: fail, usb_ep_enable returned -22 04:03:42 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) fcntl$getflags(r1, 0x1) [ 2149.843278][T18976] print_req_error: 26 callbacks suppressed [ 2149.843289][T18976] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2149.863389][T18984] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2149.885283][T18996] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2149.899732][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2149.910793][ T87] buffer_io_error: 8 callbacks suppressed [ 2149.910801][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2149.935666][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2149.946952][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2149.957037][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2149.968647][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2149.981607][T18997] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2149.995020][T18976] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2150.008494][T18996] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2150.026801][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2150.038182][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2150.047666][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2150.057569][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2150.070649][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2150.081717][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2150.093050][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2150.176046][T31846] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 109 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2150.215255][T31846] usb 1-1: USB disconnect, device number 109 [ 2150.221723][T31846] usblp0: removed 04:03:43 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0xffe00) 04:03:43 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x0, 0xfffffffc}, r0, 0xa, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) sched_setscheduler(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x8, 'batadv0\x00', {'team_slave_1\x00'}, 0xfff8}) syz_open_procfs$namespace(0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) socket$unix(0x1, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{0x0}], 0x1) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000280)={0x80000001, 0x8, 0x4, &(0x7f0000000240)="62faf54b"}) socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000180)="42afa8149b702ab863effa82c727f2895e71df21bf52", 0x16}], 0x2, 0x4081003, 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fallocate(r1, 0x11, 0x0, 0x100007e00) 04:03:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:03:43 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000400)="275eb21069edffaefac1580c8c1c36b7e85b93b2f97a487fa58622a12b8063a91f2c94e3d3dab5da6a48fecadd56fc718d826eafa196637631ea18de74e568ef01f79618826a7576fa77f9dd9f56bfb521a45369d0228cdb68338be07265b4d0ded69565928481f36471eb1e8bcb30cd3559d2597f11d03a8dd97515b122e29be03e66bd7b9ca7f75814197e3d1548a2cadaa6aba1", &(0x7f0000000580)=""/144}, 0x20) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,index=on']) chdir(&(0x7f0000000540)='./bus/file0\x00') open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x1cff, 0x2ab5}, 0x14) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xffffff2b) 04:03:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000240)) mount$overlay(0x400000, &(0x7f0000000280)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300044, &(0x7f0000000240)=ANY=[]) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@xino_auto='xino=auto'}]}) 04:03:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="10030000140000082dbd7000fddbdf25020458000100914bbf312dcacaed605abbb0b77ec0927dcc901a0e2804200d3c2fa99d8de5840b1d3a2436baede9ee85d8cfa24363e1c40a963d81b84836f6399edd99d4ecd3e9e5e6b2e52e5f187fd62679de92cd5cd04d9dccc7000100d98e2c3012901d0fd7c2446a14b9a952251e09a90718adb5f1c2eb1633afa2d1233c8d0efeaf76ba2010ef3540b5083037d0a052b8e8f5ee0874fdce72f8f12a6ba7cc8476bb0e23dce68761b2bd3510840888a187b0fa053b23980b31693d57fa83a3ac81b09ee3c551d54c5cc031129ae3b921aa073c091e06a457555576f4344afb7b730eb7860cdf22eb3db26f40e49e07b32213232f4c4b7f0adf6fa5c32e8e1775b938c055d5115f19e843e65a7fa13dd8801e9832b798eb6990e6011c000d0001001512d01a74213b5cb4000000b000010062b44f8bc0818bb90a796c94329d64fc7517e8eee02c503870c4b44a1917378007c92bcd960e5c2c3df455ab56df87fbc4f282ced240fabc6ef47d6d5c57505788dcb6b6b0b59cebb50173011abe3e468ca3d89e627b308706c836c4655b61a340beec8dd75d6e8c4f4d6082f765a2dd71db8787d5fe0e33da14bc67f5a0737212d7694e88a4469382632948f49795104a2d86dc892e1f40913bf03bb529bf8f951498150bd2eb4d0ed4c4e3bd000100cefc236b6d91d255f56bb098b98559ce66104224a040b983bd0b161c086e81aa5e14ee7641d5a572ab7c9dd66e31e44eb6109fabb7d095af2deecc5cdaa48c13f7c8308b9acbc21908549b5953140cfafc5fc14bf24e5669913b08d9e71b9d216eb887a8e5e8c5d8cb6bc5cd12aef9556c3ccac18619f51e0c339faa62f6b23593f5baf66917ddf573153ed4ab1715d31b86efdf7c2a650b8262f167758b7cbf97a3a09f3b74ba5845d7e2dfc9d4830d5b21d558b4ce65a09d0000005900010025ec4ca5563494052ee02ddec7b23fa9e3e25184fdc1e8c10645cef812af4b3457427e0832f66cb28b0d3160a14c86d33544b98b2bff427c1f4aeeeb2be3df9f8549d9ca1302231eaf267ccbca71e91e2d8740f4140000000000000000"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000240)) mount$overlay(0x400000, &(0x7f0000000280)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300044, &(0x7f0000000240)=ANY=[]) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@xino_auto='xino=auto'}]}) [ 2150.734932][T19020] overlayfs: missing 'workdir' 04:03:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000240)) mount$overlay(0x400000, &(0x7f0000000280)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300044, &(0x7f0000000240)=ANY=[]) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@xino_auto='xino=auto'}]}) [ 2150.773510][T19029] overlayfs: missing 'workdir' 04:03:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000240)) mount$overlay(0x400000, &(0x7f0000000280)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300044, &(0x7f0000000240)=ANY=[]) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@xino_auto='xino=auto'}]}) [ 2150.799162][T19033] overlayfs: missing 'workdir' 04:03:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x13fe00) 04:03:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000240)) mount$overlay(0x400000, &(0x7f0000000280)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300044, &(0x7f0000000240)=ANY=[]) [ 2150.824393][T19037] overlayfs: missing 'workdir' [ 2150.954495][T31846] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2151.194295][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2151.314374][T31846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2151.325450][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2151.336490][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2151.346925][T31846] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2151.434400][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2151.443532][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2151.452371][T31846] usb 1-1: SerialNumber: syz [ 2151.474406][T19013] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2151.481375][T19013] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2151.494869][T31846] hub 1-1:1.0: bad descriptor, ignoring hub [ 2151.500810][T31846] hub: probe of 1-1:1.0 failed with error -5 [ 2151.708449][T19013] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2151.715706][T19013] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2152.145678][T31846] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 110 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2152.185001][T31846] usb 1-1: USB disconnect, device number 110 [ 2152.191582][T31846] usblp0: removed 04:03:45 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$CHAR_RAW_FLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x71d0) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x3, &(0x7f00000000c0)="f85670093c215c3e5b0d04d2f257028ed3be31af9ff438d6456ce7d252215bb8abdfd0cd72e7624a5c85ebc9155634e2999798f537ad1ba6f1f6c8270f6a9a7aab166d6e6bbab520b4a990773ef9b9576aded4491fac315a7cfcc4767b8c025281e8d75191f61134a0de1cc900703ee0e09bd4fb8023d8de694735fd915d44526d7a9e841eeaf8a317f4e06782ae962c8aeacbf2193887c22136a752da1805f9b1a312ebee98237d44b0655eaee6232f365d07fdbbcadbfc869ba4f35206e924abff26f17e90fe0f8c436f932b35ee1e3303df") tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:45 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000240)) 04:03:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400004) 04:03:45 executing program 3: unshare(0x20000400) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000000060000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000540)='GPL\x00', 0x6, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:03:45 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bdabef3e6e40ae5017ff11b63d169f2f85cc3a3cf37eea6fb6ae1900", 0x94}, {&(0x7f0000001a40)="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", 0x1ba}, {&(0x7f0000000140)="6771dc6032", 0x5}, {0x0}, {&(0x7f0000000600)="b015321d3a3a32c161408d79c0b7d2a631e63536047e2e9c0630446b121a57260aa45136fb23412de0a62d14dd08e03a91369c36baca98c97d173de77bec146a799be7f08b82f76e21b599702e54ff99712d98ff8d4b8f185e4c0b976078883d5201267c22c84a966bde987708c46e21bec87f64d4f357b4c050d99aa1909a519a54f1a05e2e31589841c443", 0x8c}, {&(0x7f0000001c00)="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", 0x112}, {&(0x7f00000006c0)}, {&(0x7f0000000780)="c8326de5b27bd6d695de8dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c3391490167c7a8203a6d4bd93e7a9bf2fc8409048696460895ac8b645b88d2edc8108d05341005c3bf10eff955e3504a8e88f604641ff033f4ed207cce23987ed929dc225be8e58a28dc042517adc3d03e3111e6e558af0f78821ea279a275ec87ddde496724e0076adfa4b98dd2a5bdbd0c8f59ddabac84", 0x99}], 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1e040000050000000000000062e269f1", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 04:03:46 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='icmp6\x00', &(0x7f00000000c0)="7f2ec0dba87e3e002e86aa0222f1a40a3cb0f296d117223e97a65f17b1adee66eb364a696262e108b6e178f121c535bf226587cfe7ebb305e19ac0ab1c5580f4832f0da68b2625dd614f8cc665", 0x4d) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:46 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000240)) 04:03:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000740)=""/246, 0xf6}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000200)='./bus/file0\x00', 0x2040, 0x21) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x8000001}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x4c520, 0x10) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 04:03:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400700) 04:03:46 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:46 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) sendmsg(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)="794866cf726a8bb5bb463411849b04", 0xf}, {&(0x7f00000000c0)="34a6d014e34ee177a73efe564609894404936e7634f3926bbddb4b056949e8a5904a073cca0d7114db690d0445894cb55658ec22f9c5ec714f641f9c1ef7796c6707f0bb67091706ccf86ca1b11b61fc2ac4c9be08c3082bc71b7663a9f6a334b3eecfe9b617ed3921eb537e22c0e8fe605100713c2d504419b677f8ec8208ac65b5d7f38a72936b2aef2248c416673930427aeda9a69bc6cc088031670e18d3f20294e625b3d2a4adb4ed66218a133408f8c06a6a5ad9fdc33c797a6c6329fd82324bb8bff6d601a7deca743dc70fe9bcaf1b", 0xd3}, {&(0x7f00000001c0)="9d44c6cce8", 0x5}, {&(0x7f0000000200)="78fb557eb34d434a19476b3d19a0e3d0", 0x10}, {&(0x7f0000000240)="30d2a7c4a3946b2438075ac33efb16358d1e688d10a0a8ad9ea8261290aa5b6e4c29a0762ebeee633150d204dce24761c9017ebf9c14adf35a87c5d564220fd6149efb9837ef13e01fbf9f46df53000937860214a7d945a6f1cdb9d0354c663cae31f62836e1a991b9ad0144d6f220f932d57983dbc5af048a9edd31879e18459347a2d8b61280d4399cc5d21f713bec2578634732a50350495b6dc942be3fa96871ec062d09cf26964701c2790c37914adbc106078035ad5519e2aafdc0ba6c2e52b7dc23855013754721f45ebc3171a160ef983c936fa1ed8e2f81db4ddb92", 0xe0}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="2f97e6c1480079b26206fdf68ca3210094f0b947d6b3630477cc4356874acbdb7e308dded4870d8a0376634f6c505927aa2d916cb1911bb6618cf840fa786bbb8fee1017b5db0d50aa7bb344b9e6cc424e9f59987be9362ef59efc4d11fe2594ba256681f69d6dd02dfe8d91e82ba91befd00d63e3839236f892184640f166df121699db9eeb57ce56e6f657ee57c67e00b6a760fc00c50e85287c989960123fbf68900be04e7d4b4b773e23b967f77cd08c275dae6d1d810078d8c5d114f1e7d8b34fc5d851d4baa66bf9b1f17085bbdc1e1eb5c2", 0xd5}], 0x7, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x340}, 0x24000844) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:46 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:46 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="10030000140000082dbd7000fddbdf25020458000100914bbf312dcacaed605abbb0b77ec0927dcc901a0e2804200d3c2fa99d8de5840b1d3a2436baede9ee85d8cfa24363e1c40a963d81b84836f6399edd99d4ecd3e9e5e6b2e52e5f187fd62679de92cd5cd04d9dccc7000100d98e2c3012901d0fd7c2446a14b9a952251e09a90718adb5f1c2eb1633afa2d1233c8d0efeaf76ba2010ef3540b5083037d0a052b8e8f5ee0874fdce72f8f12a6ba7cc8476bb0e23dce68761b2bd3510840888a187b0fa053b23980b31693d57fa83a3ac81b09ee3c551d54c5cc031129ae3b921aa073c091e06a457555576f4344afb7b730eb7860cdf22eb3db26f40e49e07b32213232f4c4b7f0adf6fa5c32e8e1775b938c055d5115f19e843e65a7fa13dd8801e9832b798eb6990e6011c000d0001001512d01a74213b5cb4000000b000010062b44f8bc0818bb90a796c94329d64fc7517e8eee02c503870c4b44a1917378007c92bcd960e5c2c3df455ab56df87fbc4f282ced240fabc6ef47d6d5c57505788dcb6b6b0b59cebb50173011abe3e468ca3d89e627b308706c836c4655b61a340beec8dd75d6e8c4f4d6082f765a2dd71db8787d5fe0e33da14bc67f5a0737212d7694e88a4469382632948f49795104a2d86dc892e1f40913bf03bb529bf8f951498150bd2eb4d0ed4c4e3bd000100cefc236b6d91d255f56bb098b98559ce66104224a040b983bd0b161c086e81aa5e14ee7641d5a572ab7c9dd66e31e44eb6109fabb7d095af2deecc5cdaa48c13f7c8308b9acbc21908549b5953140cfafc5fc14bf24e5669913b08d9e71b9d216eb887a8e5e8c5d8cb6bc5cd12aef9556c3ccac18619f51e0c339faa62f6b23593f5baf66917ddf573153ed4ab1715d31b86efdf7c2a650b8262f167758b7cbf97a3a09f3b74ba5845d7e2dfc9d4830d5b21d558b4ce65a09d0000005900010025ec4ca5563494052ee02ddec7b23fa9e3e25184fdc1e8c10645cef812af4b3457427e0832f66cb28b0d3160a14c86d33544b98b2bff427c1f4aeeeb2be3df9f8549d9ca1302231eaf267ccbca71e91e2d8740f4140000000000000000"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:46 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:46 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:46 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) [ 2153.755652][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read 04:03:47 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="10030000140000082dbd7000fddbdf25020458000100914bbf312dcacaed605abbb0b77ec0927dcc901a0e2804200d3c2fa99d8de5840b1d3a2436baede9ee85d8cfa24363e1c40a963d81b84836f6399edd99d4ecd3e9e5e6b2e52e5f187fd62679de92cd5cd04d9dccc7000100d98e2c3012901d0fd7c2446a14b9a952251e09a90718adb5f1c2eb1633afa2d1233c8d0efeaf76ba2010ef3540b5083037d0a052b8e8f5ee0874fdce72f8f12a6ba7cc8476bb0e23dce68761b2bd3510840888a187b0fa053b23980b31693d57fa83a3ac81b09ee3c551d54c5cc031129ae3b921aa073c091e06a457555576f4344afb7b730eb7860cdf22eb3db26f40e49e07b32213232f4c4b7f0adf6fa5c32e8e1775b938c055d5115f19e843e65a7fa13dd8801e9832b798eb6990e6011c000d0001001512d01a74213b5cb4000000b000010062b44f8bc0818bb90a796c94329d64fc7517e8eee02c503870c4b44a1917378007c92bcd960e5c2c3df455ab56df87fbc4f282ced240fabc6ef47d6d5c57505788dcb6b6b0b59cebb50173011abe3e468ca3d89e627b308706c836c4655b61a340beec8dd75d6e8c4f4d6082f765a2dd71db8787d5fe0e33da14bc67f5a0737212d7694e88a4469382632948f49795104a2d86dc892e1f40913bf03bb529bf8f951498150bd2eb4d0ed4c4e3bd000100cefc236b6d91d255f56bb098b98559ce66104224a040b983bd0b161c086e81aa5e14ee7641d5a572ab7c9dd66e31e44eb6109fabb7d095af2deecc5cdaa48c13f7c8308b9acbc21908549b5953140cfafc5fc14bf24e5669913b08d9e71b9d216eb887a8e5e8c5d8cb6bc5cd12aef9556c3ccac18619f51e0c339faa62f6b23593f5baf66917ddf573153ed4ab1715d31b86efdf7c2a650b8262f167758b7cbf97a3a09f3b74ba5845d7e2dfc9d4830d5b21d558b4ce65a09d0000005900010025ec4ca5563494052ee02ddec7b23fa9e3e25184fdc1e8c10645cef812af4b3457427e0832f66cb28b0d3160a14c86d33544b98b2bff427c1f4aeeeb2be3df9f8549d9ca1302231eaf267ccbca71e91e2d8740f4140000000000000000"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400b00) 04:03:47 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x50d, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x809}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x11c) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) utimes(0x0, &(0x7f0000000180)={{0x0, 0xea60}}) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x1c542) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x404082, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x2665}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) bind(0xffffffffffffffff, &(0x7f00000002c0)=@isdn={0x22, 0xfb, 0x77, 0x3, 0x2}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0xc) syz_genetlink_get_family_id$tipc2(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61128c000000000061134c0000000000ce200000000000002500020007ffffffbd0301000000000095002000000000006916000000000000bf6700000000000017060000b964b01a4602feff00200000540600000ee60000bf150000000000000f5700000000000065070000020000002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27df8ecf00000000000000ff30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f633a9a4f16d0a3e127bee45a0100000fe9de56c9d8a814261bdb94a8c2a81762bab8395fa64810b5b40d893ea8fe07c955ccefa1f6ab689fde4de4e63ede202fa4e0a2127b8b83c71a51404dc8da39e5b0ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172b84b3ebe174ccab2a1eb618980b757ec987e84101aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b268f4ddc211bd3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa1769080584f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000023000000000000005f37d83f84e98a523d80bd56a57fa82b82f639601ae899a53f6715a0a62a29ab028acfc1cb26a0f6a5480a55d638a0c544ba0dc828c22fe30000008000000000000072c60000000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac693a27051f2ab759b8dbe843aeeda0426c7e7c0032028c95b29b6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011af0a99fa077ffe70cac87e8c4023a1749eb1d0d572b77d6e0d0fcd74035c7a1eb6eb4e1c8ef2629f5ecff4626746d6abe98a255e9209baf79bfed0d91741380000cfeb73de0500d56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25205fdee95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c716d906fbc3c9b412e0478cfee4485f4d7a93a17bcbb6bae5ff876375d4f18ca372104772a3a35ecedd97fc191d8f64d2b1d60c6d12911aada66c22aa4802c3514c3d92ec9f9f3262cb13f4a2575fbe943a6c4000000880e000000000000000000000026b80c4c595462b6c797b36c64bf3223a6079ee96198b9a326db3be3248af415ca28ca68c502550045ed8e050000003ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcbb3ad650f7fe339768924f6dbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4946bf19e617d51f964727bfd5cc5ba153700000000000000000000000000000000024d50aa5dcece359"], &(0x7f0000000100)='GPL\x00'}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{0xa7ee, 0xfffa, 0x60, 0xffff}, 'syz0\x00', 0x35}) 04:03:47 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000080000007500708ea67f8ab4c492b087e0f81cdc640edc64681ae0a49c56a72578f47821629e38a10000000000002700000000817dd62514ee09d192a87e8a694f169d4d0ee22ac67d1787852ab833496d999eda790b2861fe3b9219ef6b30d7a23e32c6392c4016c319637ffdf2c0448fbd578b0d5988ec704c27b866d99c2832ad4c29bbf635ed66a40f32b94eb6a0be8ec157d4eaa1ebc4f000"/171], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xfea3, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) socketpair(0x25, 0x4, 0x401, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x40080) [ 2154.855233][T19158] print_req_error: 22 callbacks suppressed [ 2154.855241][T19158] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2154.874584][T19157] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2154.899248][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2154.916969][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2154.928378][ T87] buffer_io_error: 7 callbacks suppressed [ 2154.928385][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read 04:03:49 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:49 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c02) 04:03:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=0x2000, 0x4) perf_event_open(0x0, 0x0, 0x0, r5, 0xa) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xbe, "cbab7ffcace4a6"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000e40)={{r7, 0x3, 0x3fffc000000000, 0x3f, 0x1, 0x5, 0x6, 0x9, 0x4725, 0x10001, 0x72ec5abc, 0x7ff, 0x2, 0x9, 0xed}}) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000030c0)=0x14) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000040)}, {0x0}], 0x3, &(0x7f0000000480)=""/24, 0x18}}, {{&(0x7f0000000600)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000580)}, 0x3}, {{&(0x7f0000000680)=@ipx, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/91, 0x5b}, {&(0x7f00000008c0)=""/28, 0x1c}, {&(0x7f0000000900)=""/123, 0x7b}, {0x0}, {&(0x7f00000009c0)=""/17, 0x11}, {&(0x7f0000000a00)=""/115, 0x73}, {0x0}], 0x9, &(0x7f0000000bc0)=""/201, 0xc9}}, {{&(0x7f0000000cc0)=@qipcrtr, 0x80, &(0x7f0000002000)=[{&(0x7f0000000d40)=""/194, 0xc2}, {0x0}], 0x2, &(0x7f0000002040)=""/225, 0xe1}, 0x1}, {{&(0x7f0000002140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/42, 0x2a}, {&(0x7f0000002200)=""/58, 0x3a}, {0x0}], 0x3, &(0x7f0000002400)=""/86, 0x56}}, {{&(0x7f0000002480)=@sco={0x1f, @none}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002500)=""/38, 0x26}, {&(0x7f0000002540)=""/220, 0xdc}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)=""/16, 0x10}], 0x4, &(0x7f00000027c0)=""/247, 0xf7}, 0x4}, {{&(0x7f00000028c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0, 0x0, &(0x7f00000029c0)=""/60, 0x3c}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002a80)=""/55, 0x37}, {0x0}, {&(0x7f0000002b00)=""/242, 0xf2}, {0x0}, {0x0}], 0x5, &(0x7f0000002d80)=""/221, 0xdd}, 0x827}], 0x8, 0x60, &(0x7f0000003080)={0x77359400}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x415194014) 04:03:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_0\x00', {0x3}, 0x1}) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0x80}}) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000080)) r4 = signalfd4(r2, &(0x7f0000000100)={[0xfffffffffffffffb]}, 0x8, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x2) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = getpid() openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x800, 0x0) sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) wait4(r5, 0x0, 0x20000000, 0x0) 04:03:49 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="10030000140000082dbd7000fddbdf25020458000100914bbf312dcacaed605abbb0b77ec0927dcc901a0e2804200d3c2fa99d8de5840b1d3a2436baede9ee85d8cfa24363e1c40a963d81b84836f6399edd99d4ecd3e9e5e6b2e52e5f187fd62679de92cd5cd04d9dccc7000100d98e2c3012901d0fd7c2446a14b9a952251e09a90718adb5f1c2eb1633afa2d1233c8d0efeaf76ba2010ef3540b5083037d0a052b8e8f5ee0874fdce72f8f12a6ba7cc8476bb0e23dce68761b2bd3510840888a187b0fa053b23980b31693d57fa83a3ac81b09ee3c551d54c5cc031129ae3b921aa073c091e06a457555576f4344afb7b730eb7860cdf22eb3db26f40e49e07b32213232f4c4b7f0adf6fa5c32e8e1775b938c055d5115f19e843e65a7fa13dd8801e9832b798eb6990e6011c000d0001001512d01a74213b5cb4000000b000010062b44f8bc0818bb90a796c94329d64fc7517e8eee02c503870c4b44a1917378007c92bcd960e5c2c3df455ab56df87fbc4f282ced240fabc6ef47d6d5c57505788dcb6b6b0b59cebb50173011abe3e468ca3d89e627b308706c836c4655b61a340beec8dd75d6e8c4f4d6082f765a2dd71db8787d5fe0e33da14bc67f5a0737212d7694e88a4469382632948f49795104a2d86dc892e1f40913bf03bb529bf8f951498150bd2eb4d0ed4c4e3bd000100cefc236b6d91d255f56bb098b98559ce66104224a040b983bd0b161c086e81aa5e14ee7641d5a572ab7c9dd66e31e44eb6109fabb7d095af2deecc5cdaa48c13f7c8308b9acbc21908549b5953140cfafc5fc14bf24e5669913b08d9e71b9d216eb887a8e5e8c5d8cb6bc5cd12aef9556c3ccac18619f51e0c339faa62f6b23593f5baf66917ddf573153ed4ab1715d31b86efdf7c2a650b8262f167758b7cbf97a3a09f3b74ba5845d7e2dfc9d4830d5b21d558b4ce65a09d0000005900010025ec4ca5563494052ee02ddec7b23fa9e3e25184fdc1e8c10645cef812af4b3457427e0832f66cb28b0d3160a14c86d33544b98b2bff427c1f4aeeeb2be3df9f8549d9ca1302231eaf267ccbca71e91e2d8740f4140000000000000000"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file1', [{0x20, 'lowerdir'}, {0x20, '-&,)&\xea,&'}, {0x20, 'upperdir'}, {0x20, '(!}'}, {0x20, '\\'}], 0xa, "ca"}, 0x2d) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:49 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:49 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:49 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c03) 04:03:49 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:49 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) r2 = syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0 000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030306330302c6d61785f726561643d3078303030303030303030303030303030312c7375626a5f726f6c653d2c7365636c6162656c2c0068180d66bf1ca847aeaf27447f3c150d743981e5c841c9da023ce2e4352d70e1411c827eee941da64913baeb37c7ed06781efc4a96c16e8ab49140ef"]) sendfile(r2, r1, &(0x7f0000000200)=0x401, 0xfffffffffffffffb) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) wait4(r0, 0x0, 0x4, 0x0) [ 2157.010928][T19208] fuse: Bad value for 'fd' [ 2157.034712][T19212] fuse: Bad value for 'fd' 04:03:50 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:50 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="10030000140000082dbd7000fddbdf25020458000100914bbf312dcacaed605abbb0b77ec0927dcc901a0e2804200d3c2fa99d8de5840b1d3a2436baede9ee85d8cfa24363e1c40a963d81b84836f6399edd99d4ecd3e9e5e6b2e52e5f187fd62679de92cd5cd04d9dccc7000100d98e2c3012901d0fd7c2446a14b9a952251e09a90718adb5f1c2eb1633afa2d1233c8d0efeaf76ba2010ef3540b5083037d0a052b8e8f5ee0874fdce72f8f12a6ba7cc8476bb0e23dce68761b2bd3510840888a187b0fa053b23980b31693d57fa83a3ac81b09ee3c551d54c5cc031129ae3b921aa073c091e06a457555576f4344afb7b730eb7860cdf22eb3db26f40e49e07b32213232f4c4b7f0adf6fa5c32e8e1775b938c055d5115f19e843e65a7fa13dd8801e9832b798eb6990e6011c000d0001001512d01a74213b5cb4000000b000010062b44f8bc0818bb90a796c94329d64fc7517e8eee02c503870c4b44a1917378007c92bcd960e5c2c3df455ab56df87fbc4f282ced240fabc6ef47d6d5c57505788dcb6b6b0b59cebb50173011abe3e468ca3d89e627b308706c836c4655b61a340beec8dd75d6e8c4f4d6082f765a2dd71db8787d5fe0e33da14bc67f5a0737212d7694e88a4469382632948f49795104a2d86dc892e1f40913bf03bb529bf8f951498150bd2eb4d0ed4c4e3bd000100cefc236b6d91d255f56bb098b98559ce66104224a040b983bd0b161c086e81aa5e14ee7641d5a572ab7c9dd66e31e44eb6109fabb7d095af2deecc5cdaa48c13f7c8308b9acbc21908549b5953140cfafc5fc14bf24e5669913b08d9e71b9d216eb887a8e5e8c5d8cb6bc5cd12aef9556c3ccac18619f51e0c339faa62f6b23593f5baf66917ddf573153ed4ab1715d31b86efdf7c2a650b8262f167758b7cbf97a3a09f3b74ba5845d7e2dfc9d4830d5b21d558b4ce65a09d0000005900010025ec4ca5563494052ee02ddec7b23fa9e3e25184fdc1e8c10645cef812af4b3457427e0832f66cb28b0d3160a14c86d33544b98b2bff427c1f4aeeeb2be3df9f8549d9ca1302231eaf267ccbca71e91e2d8740f4140000000000000000"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:50 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x20, 0x10, 0x10000, 0x10000, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x66, 0x0, 0x40, 0x4, 0x0, @empty, @private=0xa010101, {[@timestamp={0x44, 0xc, 0xe7, 0x0, 0x4, [0x9, 0x8f]}, @ssrr={0x89, 0x23, 0xc2, [@loopback, @broadcast, @loopback, @remote, @rand_addr=0x64010102, @broadcast, @loopback, @private=0xa010100]}, @ssrr={0x89, 0x13, 0x14, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0xa}]}]}}}}}) 04:03:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c04) 04:03:50 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b643d2e2f66696c65302c00000022910daa4a500795038ac1cc9d68815e4152b585862e807a8763127a8e76fded43a41de2359d6c40d6126d83f7f3afcc204dac64d92f5ced00ad41da94d2f0d77c1adda60a2624f65eff8027dfd22a8a8a6d889215582ccfa722a417b67409ec479b8c937ea29563672772292352fb0720e87500e25ffb35626b194d526fa2a067e95bce8664f0db53bdb27194be61b55a1918b975fc0e2338997168b27a10d6394f0f2aa2024526fe7ad69335db954b767f61eae636"]) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f0000000340)='./bus\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 04:03:50 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080182}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4040001}, 0x40001) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:50 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:50 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:50 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.sockprotoname\x00', &(0x7f0000000380)='*\x00', 0x2, 0x3) openat$cgroup_freezer_state(r0, &(0x7f00000003c0)='freezer.state\x00', 0x2, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x4004551e, 0x0) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000240)={'geneve0\x00', 0x400}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="5800000010000104000040000000000000000000", @ANYRES32=0x0, @ANYRES64, @ANYRES32=r6, @ANYBLOB="f2c3efaad5ddfd35181c5547386c72acc64145bd90dd0c94d287cdf4b7ae68ebdf5aff8c6c42d38f6549c658f67a06c8713d0469792d56b18f3188e61f1bccb1271afdef4dcfa8c05cc6b6a059dee0ff999869d739b0bf95c27fdc7e9337e4b5f393e661eb3e3a020098d911a385b627bc33c00cdbe25cd50000000000006c98a8b788a31ce0c231bd4755343f173b80a76ac1bfeb7b4bbd4e733fc980b856f9f64d395a0042af3eff"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 2157.582493][T19222] overlayfs: unrecognized mount option "workd=./file0" or missing value [ 2157.605427][T19222] overlayfs: unrecognized mount option "workd=./file0" or missing value 04:03:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:50 executing program 3: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') r0 = dup(0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x18c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x39ad}, {0x6, 0x11, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfc01}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x8, &(0x7f0000000580)=[{0x3bf, 0x9, 0x8, 0x1f}, {0x3ff, 0x9, 0x7f, 0xe1}, {0x7cc, 0x9, 0x1f, 0xed63}, {0x818, 0x2, 0x2c, 0x3}, {0x101, 0xff, 0xff, 0x2}, {0x4, 0x68, 0xff, 0xba}, {0x8001, 0xf7, 0x1f, 0x101}, {0x6, 0x7, 0x3}]}) fstat(r3, &(0x7f0000000600)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000080)={0x34}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000180)) r4 = dup2(r2, r2) ioctl$KDSKBLED(r4, 0x4b65, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x30fae9ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0xc0) ioctl$UI_DEV_CREATE(r0, 0x5501) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000140)={'vxcan1\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) [ 2157.683501][T19251] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 04:03:51 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c05) 04:03:53 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x3, 0x56, 0x1, 0x8216}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x5, 0xa3e, 0x0, 0x0, 0xc}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000001c0)="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") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:53 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0x11, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40040) io_submit(r1, 0x5800, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x743000}]) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040), 0x4) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000001280)=""/34, 0x22}], 0x1, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffe0000100000800395012323030302e"], 0x15) 04:03:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c06) 04:03:53 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109025c0002010000000904020001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030000000000090401"], &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0xbe, "cbab7ffcace4a6"}) r4 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002340)={0x0, 0x0, "9943c2674e0c960db5304e31e802044ed3f4690dbb8180653ebbdacd8b7c73f3fa3a819055c423ceef7abdef23a3d9fa05cd314b4089e0ffb51d348558b8d34c5067154432bed8b9d3618643fd13ec591f920f648ea904cf0881b01334e21a56750d5afa760b9123b5417bcce9c8e87aae58c3fc376c9190b95a72559e701ccdae61903c3ecb1fe750ad34e01203661fb2595e366cadf7a45588ef00d58027590d5c6651c870e3f0abf340b35443ab44107db179b2c62af46f4d8d896e74ce25c82da5698cf663c86c03f9f2c493afcf5c0f247e2273a530c0c87c5650850b36cc5f81c4cbe1d2c2bbefd47a85a3ee223cfb4cbfb28f6c12d1001be31d108d06", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0xbe, "cbab7ffcace4a6"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000054c80)={0x0, ""/256, 0x0, 0x0}) r9 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000002340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0xbe, "cbab7ffcace4a6"}) r13 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r13, 0xd000943e, &(0x7f0000002340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}], 0xbe, "cbab7ffcace4a6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054e80)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r6, r8}, {0x0, r12}, {r15}], 0x0, "e48cc2e79e89a1"}) r17 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) 04:03:53 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:53 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) tkill(r0, 0x11f) wait4(0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000080)) 04:03:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:53 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:53 executing program 5: clone(0x10000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r0 = gettid() r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x81}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7ff}]}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ioctl$CHAR_RAW_SECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f00000000c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) r4 = getpgid(r0) wait4(r4, 0x0, 0x40000000, 0x0) 04:03:53 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:53 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes128, 0x4, "076c4dd4b9ee8008"}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:53 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c07) 04:03:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r6, 0x531, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0xf415}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4820}, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xca) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18103, 0x0) 04:03:53 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xfc, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1b9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x94, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @rand_addr=0x64010102}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24048001}, 0x24000894) [ 2160.896013][T31846] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2160.903724][T20363] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2161.157412][T20363] usb 3-1: Using ep0 maxpacket: 16 [ 2161.187557][T31846] usb 1-1: device descriptor read/64, error 18 [ 2161.358540][T20363] usb 3-1: config 1 has an invalid interface number: 2 but max is 1 [ 2161.366751][T20363] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2161.377606][T20363] usb 3-1: config 1 has no interface number 0 [ 2161.384081][T20363] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.395381][T20363] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.559729][T20363] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2161.568908][T20363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.577511][T20363] usb 3-1: Product: syz [ 2161.581983][T31846] usb 1-1: device descriptor read/64, error 18 [ 2161.588342][T20363] usb 3-1: Manufacturer: syz [ 2161.593541][T20363] usb 3-1: SerialNumber: syz [ 2161.630822][T20363] usb 3-1: selecting invalid altsetting 1 [ 2161.851369][T20363] cdc_ncm 3-1:1.2: bind() failure [ 2161.858390][T20363] usb 3-1: USB disconnect, device number 93 [ 2161.865532][T31846] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2162.143039][T31846] usb 1-1: device descriptor read/64, error 18 [ 2162.545378][T31846] usb 1-1: device descriptor read/64, error 18 [ 2162.605724][T20363] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2162.666115][T31846] usb usb1-port1: attempt power cycle [ 2162.847164][T20363] usb 3-1: Using ep0 maxpacket: 16 [ 2163.048389][T20363] usb 3-1: config 1 has an invalid interface number: 2 but max is 1 [ 2163.056480][T20363] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.067280][T20363] usb 3-1: config 1 has no interface number 0 [ 2163.073817][T20363] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2163.085023][T20363] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2163.249614][T20363] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2163.258682][T20363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.267345][T20363] usb 3-1: Product: syz [ 2163.271829][T20363] usb 3-1: Manufacturer: syz [ 2163.276498][T20363] usb 3-1: SerialNumber: syz [ 2163.320611][T20363] usb 3-1: selecting invalid altsetting 1 [ 2163.380349][T31846] usb 1-1: new high-speed USB device number 113 using dummy_hcd 04:03:56 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x1, 0x0) [ 2163.541450][T20363] cdc_ncm 3-1:1.2: bind() failure [ 2163.548466][T20363] usb 3-1: USB disconnect, device number 94 [ 2163.556389][T31846] usb 1-1: device descriptor read/8, error -61 [ 2163.567092][T19348] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:03:56 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c08) 04:03:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0xffffffff, 0x5, 0x4}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f00000000c0)='fscrypt-provisioning\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)={0x1, 0x0, "06f5acf70bd44cb9767c463cc0cb73f4e27bf65bab20fc918c43bcbae6728e91658d121b2a0f62edc7c93465b3d90ea46446b633f0bc6bd3e0654a981eaf91cab1afd81ba6f00ec38f03e9d4cfd1957a2c9c05799e8bb94c19ab6c6102cdd412f8ce43984144f56d8aa3c7c7fb52cc5ebfb0294b717c5275ca8a232561"}, 0x85, 0x0) keyctl$read(0xb, r3, &(0x7f00000001c0)=""/85, 0x55) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r5 = epoll_create(0x6) epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0x40, &(0x7f0000000380)={[0xfffffffffffffff8]}, 0x8) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(r4, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r6}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) 04:03:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) setgid(r4) fchown(r0, r2, r4) r5 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x11, 0x0, &(0x7f0000000340)="3595a281554514d1f1779bbfc068916244"}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2163.586289][T19353] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2163.601342][T19352] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2163.617625][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2163.630050][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read 04:03:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) [ 2163.640576][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2163.651883][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2163.661558][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2163.672705][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read 04:03:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) [ 2163.782880][T31846] usb 1-1: device descriptor read/8, error -71 [ 2164.034400][T20363] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2164.275871][T31846] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2164.283671][T20363] usb 3-1: Using ep0 maxpacket: 16 [ 2164.406833][T20363] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2164.417605][T20363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2164.429212][T20363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2164.439287][T20363] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2164.452485][T31846] usb 1-1: device descriptor read/8, error -61 [ 2164.458741][T20363] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2164.468394][T20363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.477019][T20363] usb 3-1: config 0 descriptor?? [ 2164.738836][T31846] usb 1-1: device descriptor read/8, error -61 [ 2164.859600][T31846] usb usb1-port1: unable to enumerate USB device [ 2164.962254][T20363] hid (null): invalid report_size 1757462427 [ 2164.972373][T20363] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.00A6/input/input205 [ 2164.985283][T20363] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.00A6/input/input206 [ 2165.001915][T20363] kye 0003:0458:5013.00A6: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 2165.173820][T20363] usb 3-1: USB disconnect, device number 95 [ 2165.946547][T20363] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2166.050849][T19414] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2166.064907][T19416] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2166.079676][T19415] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2166.091180][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2166.102511][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2166.112241][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2166.122182][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read 04:03:59 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ioctl(r1, 0x3, &(0x7f0000000380)="7f50f0aaef644108d4115cb58b0571f6cf805f3c1639612914faade3220293a9e44f6ce723b963802f3ce29d46d8dd1f3ef402853431990f42a19cb90f1acfad521989cd698a61721c0e499ec717e94588c41cc975063726e5a7619be4820872f3110acde14465da2978bbef20a57c79f7ac7e00c90cfba46447344ae0806f212b13b5aa64d0898d261695e708e0e7c692e32d979661c0a9fe5a416f5c876028143f5b69b744789adf77f960898bcac7d5f9a93f1e5fb375c6ae77b2aef69c6aec18af9dbeb6700b4d88c08e054aa8f08b19e06aeacd3324a695c127c78518") ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xfffffffffffffdf1, &(0x7f0000000100)={&(0x7f00000001c0)={0x148, r4, 0xa00, 0x70bd27, 0x25dfd9fb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x7fff}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xdba400}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5bf00}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000000}, 0x14800) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$TUNSETLINK(r3, 0x400454cd, 0xf) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:59 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:03:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 04:03:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c09) 04:03:59 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) preadv(r2, &(0x7f0000002480)=[{&(0x7f0000000040)=""/179, 0xb3}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) chroot(&(0x7f0000000000)='./bus\x00') umount2(&(0x7f0000000300)='./bus\x00', 0x0) 04:03:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000100)='./file1\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r0, 0x800) 04:03:59 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4200, r0, 0x20100000000000, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:03:59 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) 04:03:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 04:03:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x2, 0x3, 0x2, 0xffffffff}}) [ 2166.737948][T19452] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2166.741605][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2166.765077][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read 04:03:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x2, 0x3, 0x2, 0xffffffff}}) 04:03:59 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x114) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x400) ftruncate(r3, 0x2008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r3, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000229bd7000fcdbdf2510000000050037000000000005003500c000000008003c00ff07000008003a000500000008003400ff0f000008003c000100010008002c000000010008003a0000080000"], 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) ioctl$BLKGETSIZE64(r0, 0x1263, &(0x7f0000000080)) [ 2166.779354][T19452] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2166.780762][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2166.809800][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2167.164611][T31846] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2167.436474][T31846] usb 1-1: device descriptor read/64, error 18 [ 2167.829039][T31846] usb 1-1: device descriptor read/64, error 18 [ 2168.100878][T31846] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2168.372711][T31846] usb 1-1: device descriptor read/64, error 18 [ 2168.765438][T31846] usb 1-1: device descriptor read/64, error 18 [ 2168.886329][T31846] usb usb1-port1: attempt power cycle [ 2169.601159][T31846] usb 1-1: new high-speed USB device number 117 using dummy_hcd 04:04:02 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:02 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x3, 0x2, 0xffffffff}}) 04:04:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c0a) 04:04:02 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d303052581443c88dedcc303030303030303135373137332c00"]) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x45, 0x1, {0x0, @random="bc90cd5986c8"}}]}]}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x810) 04:04:02 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x91, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\xafs\xcb7\xf9\xae\x82\xe4\xc0\xa5veMin\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4l\x94\xa1\xdb\x8d9\x87\xdf #W\x10\x17\xae\xa3iTY\xaf\x96\xee\xfb\x0ef\x00\xb6\xeeU\x95\x8d\xde\x9dS\xbb\x92\x1f\x1dS\xb5\xc2Z\xf6\v>t\xc9H1\x8f4\xefl\x10\x0e\x92\xad@m\xd3\x84\xd5\xe8Oo\xc7\x81X\x1f}\xc9h\xd4\xb1a\xef.bK\x0e\x9a\xfe\x99\t\xfa\xbd8\x06+\x02\xa1\xec09\xfb\x92Y\xad\xed\xf5\x88x\x95\xf3HU\x84r\xa7\x16\xbf\xe0\xb5\xdd+*\xcb$f]\xb3\xdc .\a\xad)\xf90\x1b\x1b9\xae\b\xa1 \xe7\xd8\x9exS\xe6\xbf\xe3P\xe5\x7f\xc1\x93\x8f\x04\x81q\t5[\xca\xfc\x94\x82\xde\x00\xc1:\xbd{98\x9e\xaa\xc3&\x8a\xbe\xf2r)\x01\x1a#bQY\xe1\xfb\x88V\xad\xca\xbeS\xcc\xaa\x01\x00\x00\x00\x00\x00\x00\x00.\n\xbb\xd33.=\xdd\xaa\xa8\xa0\fV\xb8\x15\xa68\x9e\x1f\xbdW\r\x1cV\x14\x12\xe0\x86mN.\xfe\x8e\xd4\xd3xM\xe1P\xceH:\xdc\x06\xfckg\x95\x9dO\v\xc7\a\x92\n$\x82\x00\x00\x00\x00\x14\x90\xc7\x14\xd9l\x02\xad\b\xb6\x03r0, 0x0, 0x2, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:04:05 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:05 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) getpgid(r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:04:05 executing program 1 (fault-call:2 fault-nth:0): clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:05 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2172.799637][T19555] FAULT_INJECTION: forcing a failure. [ 2172.799637][T19555] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.816622][T19545] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2172.833436][T19550] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2172.851732][T19555] CPU: 0 PID: 19555 Comm: syz-executor.1 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2172.863258][T19555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.871035][T19562] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2172.873293][T19555] Call Trace: [ 2172.873308][T19555] dump_stack+0x1b0/0x21e [ 2172.873323][T19555] ? devkmsg_release+0x11c/0x11c [ 2172.890653][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2172.892504][T19555] ? show_regs_print_info+0x12/0x12 [ 2172.892534][T19555] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 2172.897450][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2172.908722][T19555] should_fail+0x6fb/0x860 [ 2172.908730][T19555] ? setup_fault_attr+0x2b0/0x2b0 [ 2172.908743][T19555] ? selinux_kernel_module_request+0x123/0x1a0 [ 2172.908756][T19555] ? selinux_kernel_create_files_as+0x2c0/0x2c0 [ 2172.949273][T19555] ? __request_module+0x434/0xb40 [ 2172.954286][T19555] should_failslab+0x5/0x20 [ 2172.958773][T19555] kmem_cache_alloc_trace+0x39/0x270 [ 2172.964044][T19555] __request_module+0x434/0xb40 [ 2172.968925][T19555] ? avc_denied+0x1c0/0x1c0 [ 2172.973406][T19555] ? snd_timer_open+0x5be/0x2500 [ 2172.978322][T19555] ? snd_timer_open+0x59a/0x2500 [ 2172.983232][T19555] ? snd_timer_open+0x4bb/0x2500 [ 2172.988146][T19555] ? set_permissions+0xa0/0xa0 [ 2172.992887][T19555] ? vsnprintf+0x1c50/0x1c50 [ 2172.997469][T19555] ? mutex_lock+0xa6/0x110 [ 2173.001861][T19555] ? mutex_trylock+0xb0/0xb0 [ 2173.006429][T19555] ? vsnprintf+0x1ba3/0x1c50 [ 2173.010993][T19555] snd_timer_open+0x5be/0x2500 [ 2173.015736][T19555] ? sprintf+0xc7/0x110 [ 2173.019885][T19555] ? __snd_timer_user_ioctl+0x1844/0x5690 [ 2173.025578][T19555] ? vsprintf+0x30/0x30 [ 2173.029738][T19555] ? snd_hwdep_proc_read+0x140/0x140 [ 2173.035013][T19555] ? __rcu_read_lock+0x50/0x50 [ 2173.039811][T19555] __snd_timer_user_ioctl+0x1cad/0x5690 [ 2173.045352][T19555] ? is_bpf_text_address+0x290/0x2b0 [ 2173.050646][T19555] ? stack_trace_save+0x1e0/0x1e0 [ 2173.055667][T19555] ? __kernel_text_address+0x93/0x110 [ 2173.061030][T19555] ? unwind_get_return_address+0x48/0x90 [ 2173.066634][T19555] ? snd_timer_user_fasync+0x60/0x60 [ 2173.071906][T19555] ? arch_stack_walk+0x98/0xe0 [ 2173.076647][T19555] ? __rcu_read_lock+0x50/0x50 [ 2173.081395][T19555] ? avc_has_extended_perms+0x69e/0x10c0 [ 2173.087051][T19555] ? avc_has_extended_perms+0xb25/0x10c0 [ 2173.092662][T19555] ? do_sys_open+0x60f/0x7a0 [ 2173.097240][T19555] ? __rcu_read_lock+0x50/0x50 [ 2173.101975][T19555] ? do_sys_open+0x32a/0x7a0 [ 2173.106545][T19555] ? do_syscall_64+0xcb/0x150 [ 2173.111198][T19555] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2173.117239][T19555] ? enqueue_entity+0x74f/0xd80 [ 2173.122064][T19555] ? get_pid_task+0x86/0x90 [ 2173.126543][T19555] ? proc_fail_nth_write+0x166/0x200 [ 2173.131811][T19555] ? mutex_lock+0xa6/0x110 [ 2173.136204][T19555] ? mutex_trylock+0xb0/0xb0 [ 2173.140787][T19555] ? do_filp_open+0x2e1/0x430 [ 2173.145452][T19555] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2173.150641][T19555] snd_timer_user_ioctl+0x59/0x70 [ 2173.155640][T19555] ? snd_timer_user_poll+0x130/0x130 [ 2173.160898][T19555] do_vfs_ioctl+0x747/0x1700 [ 2173.165465][T19555] ? selinux_file_ioctl+0x6e4/0x920 [ 2173.170639][T19555] ? ioctl_preallocate+0x240/0x240 [ 2173.175725][T19555] ? __fsnotify_parent+0x300/0x300 [ 2173.180813][T19555] ? __fget+0x37c/0x3c0 [ 2173.184945][T19555] ? __sb_end_write+0xa4/0xf0 [ 2173.189597][T19555] ? fget_many+0x20/0x20 [ 2173.193815][T19555] ? ksys_write+0x237/0x2a0 [ 2173.198295][T19555] ? security_file_ioctl+0xad/0xc0 [ 2173.203378][T19555] __x64_sys_ioctl+0xd4/0x110 [ 2173.208027][T19555] do_syscall_64+0xcb/0x150 [ 2173.212519][T19555] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2173.218394][T19555] RIP: 0033:0x45d5b9 [ 2173.222270][T19555] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2173.241849][T19555] RSP: 002b:00007ff718ddac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:04:05 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) prlimit64(0x0, 0x5, &(0x7f0000000280)={0x9, 0xd}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x400, 0x8, 0x25dbdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) r6 = syz_open_procfs(r0, &(0x7f0000000240)='net/anycast6\x00') preadv(r6, &(0x7f00000017c0), 0x375, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x29) tkill(r0, 0xf) wait4(0x0, 0x0, 0x0, 0x0) [ 2173.250233][T19555] RAX: ffffffffffffffda RBX: 00000000000182c0 RCX: 000000000045d5b9 [ 2173.258180][T19555] RDX: 0000000020000180 RSI: 0000000040345410 RDI: 0000000000000003 [ 2173.266142][T19555] RBP: 00007ff718ddaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2173.274090][T19555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2173.282036][T19555] R13: 00007ffc2db8025f R14: 00007ff718ddb9c0 R15: 000000000118cf4c 04:04:06 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:06 executing program 1 (fault-call:2 fault-nth:1): clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2173.298188][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2173.309357][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2173.337265][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2173.347298][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2173.372777][T19579] FAULT_INJECTION: forcing a failure. [ 2173.372777][T19579] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.382586][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2173.400298][T19579] CPU: 0 PID: 19579 Comm: syz-executor.1 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2173.411829][T19579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.413235][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2173.421895][T19579] Call Trace: [ 2173.421910][T19579] dump_stack+0x1b0/0x21e [ 2173.421920][T19579] ? devkmsg_release+0x11c/0x11c [ 2173.421936][T19579] ? avc_has_perm+0x15f/0x260 [ 2173.447017][T19579] ? show_regs_print_info+0x12/0x12 [ 2173.452193][T19579] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 2173.457547][T19579] should_fail+0x6fb/0x860 [ 2173.461941][T19579] ? setup_fault_attr+0x2b0/0x2b0 [ 2173.466939][T19579] ? setup_fault_attr+0x2b0/0x2b0 [ 2173.471957][T19579] ? selinux_kernel_module_request+0x123/0x1a0 [ 2173.478086][T19579] ? selinux_kernel_create_files_as+0x2c0/0x2c0 [ 2173.484323][T19579] ? __request_module+0x461/0xb40 [ 2173.489321][T19579] should_failslab+0x5/0x20 [ 2173.493798][T19579] __kmalloc_track_caller+0x5d/0x2b0 [ 2173.499056][T19579] kstrdup+0x31/0x70 [ 2173.502926][T19579] __request_module+0x461/0xb40 [ 2173.507751][T19579] ? avc_denied+0x1c0/0x1c0 [ 2173.512240][T19579] ? snd_timer_open+0x5be/0x2500 [ 2173.517167][T19579] ? snd_timer_open+0x59a/0x2500 [ 2173.522101][T19579] ? snd_timer_open+0x4bb/0x2500 [ 2173.527015][T19579] ? set_permissions+0xa0/0xa0 [ 2173.531784][T19579] ? vsnprintf+0x1c50/0x1c50 [ 2173.536365][T19579] ? mutex_lock+0xa6/0x110 [ 2173.540786][T19579] ? mutex_trylock+0xb0/0xb0 [ 2173.545383][T19579] ? vsnprintf+0x1ba3/0x1c50 [ 2173.549963][T19579] snd_timer_open+0x5be/0x2500 [ 2173.554707][T19579] ? sprintf+0xc7/0x110 [ 2173.558855][T19579] ? __snd_timer_user_ioctl+0x1844/0x5690 [ 2173.564549][T19579] ? vsprintf+0x30/0x30 [ 2173.568681][T19579] ? snd_hwdep_proc_read+0x140/0x140 [ 2173.573952][T19579] ? __rcu_read_lock+0x50/0x50 [ 2173.578704][T19579] __snd_timer_user_ioctl+0x1cad/0x5690 [ 2173.584225][T19579] ? is_bpf_text_address+0x290/0x2b0 [ 2173.589495][T19579] ? stack_trace_save+0x1e0/0x1e0 [ 2173.594494][T19579] ? __kernel_text_address+0x93/0x110 [ 2173.599871][T19579] ? unwind_get_return_address+0x48/0x90 [ 2173.605476][T19579] ? snd_timer_user_fasync+0x60/0x60 [ 2173.610736][T19579] ? arch_stack_walk+0x98/0xe0 [ 2173.615475][T19579] ? __rcu_read_lock+0x50/0x50 [ 2173.620214][T19579] ? avc_has_extended_perms+0x69e/0x10c0 [ 2173.625823][T19579] ? avc_has_extended_perms+0xb25/0x10c0 [ 2173.631434][T19579] ? do_sys_open+0x60f/0x7a0 [ 2173.635998][T19579] ? __rcu_read_lock+0x50/0x50 [ 2173.640753][T19579] ? do_sys_open+0x32a/0x7a0 [ 2173.645345][T19579] ? do_syscall_64+0xcb/0x150 [ 2173.650026][T19579] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2173.656080][T19579] ? enqueue_entity+0x74f/0xd80 [ 2173.660962][T19579] ? get_pid_task+0x86/0x90 [ 2173.665445][T19579] ? proc_fail_nth_write+0x166/0x200 [ 2173.670718][T19579] ? mutex_lock+0xa6/0x110 [ 2173.675143][T19579] ? mutex_trylock+0xb0/0xb0 [ 2173.679721][T19579] ? do_filp_open+0x2e1/0x430 [ 2173.684374][T19579] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2173.689548][T19579] snd_timer_user_ioctl+0x59/0x70 [ 2173.694568][T19579] ? snd_timer_user_poll+0x130/0x130 [ 2173.699843][T19579] do_vfs_ioctl+0x747/0x1700 [ 2173.704431][T19579] ? selinux_file_ioctl+0x6e4/0x920 [ 2173.709602][T19579] ? ioctl_preallocate+0x240/0x240 [ 2173.714699][T19579] ? __fsnotify_parent+0x300/0x300 [ 2173.719785][T19579] ? __fget+0x37c/0x3c0 [ 2173.723915][T19579] ? __sb_end_write+0xa4/0xf0 [ 2173.728584][T19579] ? fget_many+0x20/0x20 [ 2173.732818][T19579] ? ksys_write+0x237/0x2a0 [ 2173.737299][T19579] ? security_file_ioctl+0xad/0xc0 [ 2173.742435][T19579] __x64_sys_ioctl+0xd4/0x110 [ 2173.747098][T19579] do_syscall_64+0xcb/0x150 [ 2173.751615][T19579] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2173.757497][T19579] RIP: 0033:0x45d5b9 [ 2173.761378][T19579] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2173.780955][T19579] RSP: 002b:00007ff718ddac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2173.789351][T19579] RAX: ffffffffffffffda RBX: 00000000000182c0 RCX: 000000000045d5b9 [ 2173.797338][T19579] RDX: 0000000020000180 RSI: 0000000040345410 RDI: 0000000000000003 [ 2173.805284][T19579] RBP: 00007ff718ddaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2173.813266][T19579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2173.821211][T19579] R13: 00007ffc2db8025f R14: 00007ff718ddb9c0 R15: 000000000118cf4c [ 2173.993825][T31846] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2174.258504][T31846] usb 1-1: device descriptor read/64, error 18 [ 2174.642005][T31846] usb 1-1: device descriptor read/64, error 18 [ 2174.907594][T31846] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2175.173197][T31846] usb 1-1: device descriptor read/64, error 18 [ 2175.557701][T31846] usb 1-1: device descriptor read/64, error 18 04:04:08 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:08 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c0c) 04:04:08 executing program 1 (fault-call:2 fault-nth:2): clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:08 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) r4 = getpgid(r0) wait4(r4, 0x0, 0x80000000, 0x0) 04:04:08 executing program 3: syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201630000000a000000ff45ac0000ffffffa500e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r1 = socket(0x11, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1}}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0xe0000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x7, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x40}, [@generic={0x3, 0x0, 0x2, 0xfff7, 0xaf86}, @jmp={0x5, 0x1, 0xd, 0x5, 0x7, 0xfffffffffffffff8, 0x1}, @generic={0x5, 0x5, 0x8, 0x9, 0xffff}, @alu={0x7, 0x1, 0x3, 0x8, 0x0, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], r0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xe, 0x4, 0xc1}, 0x10}, 0x78) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x100, 0x0) poll(&(0x7f0000000580)=[{r1, 0x400}, {r2, 0x555}, {r3, 0x4}, {r4, 0x8000}, {r5, 0x4410}, {0xffffffffffffffff, 0x2400}], 0x6, 0xc26f) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x45, 0x1, {0x0, @random="bc90cd5986c8"}}]}]}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', r7, 0x1, 0x8, 0x1, 0x5, {{0x9, 0x4, 0x2, 0x37, 0x24, 0x65, 0x0, 0x1b, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x37}, {[@noop, @end, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x4, [{@loopback, 0x401}]}, @end, @noop]}}}}}) [ 2175.676100][T31846] usb usb1-port1: attempt power cycle 04:04:08 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2175.719639][T19597] FAULT_INJECTION: forcing a failure. [ 2175.719639][T19597] name failslab, interval 1, probability 0, space 0, times 0 04:04:08 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2175.762956][T19606] print_req_error: 14 callbacks suppressed [ 2175.762967][T19606] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2175.785616][T19597] CPU: 0 PID: 19597 Comm: syz-executor.1 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2175.789055][T19605] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2175.797161][T19597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2175.797165][T19597] Call Trace: [ 2175.797181][T19597] dump_stack+0x1b0/0x21e [ 2175.797198][T19597] ? devkmsg_release+0x11c/0x11c [ 2175.819581][T19608] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2175.821977][T19597] ? show_regs_print_info+0x12/0x12 [ 2175.821987][T19597] ? avc_has_perm+0xbd/0x260 [ 2175.821999][T19597] ? avc_has_perm+0x15f/0x260 [ 2175.830547][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2175.831217][T19597] should_fail+0x6fb/0x860 [ 2175.831230][T19597] ? setup_fault_attr+0x2b0/0x2b0 [ 2175.843069][ T87] buffer_io_error: 2 callbacks suppressed [ 2175.843076][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2175.848042][T19597] ? should_fail+0x182/0x860 [ 2175.848050][T19597] ? should_fail+0x182/0x860 [ 2175.848057][T19597] ? setup_fault_attr+0x2b0/0x2b0 [ 2175.848067][T19597] ? setup_fault_attr+0x2b0/0x2b0 [ 2175.911015][T19597] ? call_usermodehelper_setup+0x86/0x210 [ 2175.916726][T19597] should_failslab+0x5/0x20 [ 2175.921205][T19597] kmem_cache_alloc_trace+0x39/0x270 [ 2175.926465][T19597] call_usermodehelper_setup+0x86/0x210 [ 2175.932003][T19597] ? __request_module+0xb40/0xb40 [ 2175.937000][T19597] __request_module+0x52c/0xb40 [ 2175.941825][T19597] ? avc_denied+0x1c0/0x1c0 [ 2175.946323][T19597] ? snd_timer_open+0x5be/0x2500 [ 2175.951238][T19597] ? snd_timer_open+0x59a/0x2500 [ 2175.956149][T19597] ? snd_timer_open+0x4bb/0x2500 [ 2175.961081][T19597] ? set_permissions+0xa0/0xa0 [ 2175.965850][T19597] ? vsnprintf+0x1c50/0x1c50 [ 2175.970445][T19597] ? mutex_lock+0xa6/0x110 [ 2175.974852][T19597] ? mutex_trylock+0xb0/0xb0 [ 2175.979435][T19597] ? vsnprintf+0x1ba3/0x1c50 [ 2175.984039][T19597] snd_timer_open+0x5be/0x2500 [ 2175.988780][T19597] ? sprintf+0xc7/0x110 [ 2175.992913][T19597] ? __snd_timer_user_ioctl+0x1844/0x5690 [ 2175.998606][T19597] ? vsprintf+0x30/0x30 [ 2176.002736][T19597] ? snd_hwdep_proc_read+0x140/0x140 [ 2176.007996][T19597] ? __rcu_read_lock+0x50/0x50 [ 2176.012754][T19597] __snd_timer_user_ioctl+0x1cad/0x5690 [ 2176.018279][T19597] ? is_bpf_text_address+0x290/0x2b0 [ 2176.023627][T19597] ? stack_trace_save+0x1e0/0x1e0 [ 2176.028629][T19597] ? __kernel_text_address+0x93/0x110 [ 2176.033994][T19597] ? unwind_get_return_address+0x48/0x90 [ 2176.039613][T19597] ? snd_timer_user_fasync+0x60/0x60 [ 2176.044875][T19597] ? arch_stack_walk+0x98/0xe0 [ 2176.049618][T19597] ? __rcu_read_lock+0x50/0x50 [ 2176.054360][T19597] ? avc_has_extended_perms+0x69e/0x10c0 [ 2176.059968][T19597] ? avc_has_extended_perms+0xb25/0x10c0 [ 2176.065594][T19597] ? do_sys_open+0x60f/0x7a0 [ 2176.070176][T19597] ? __rcu_read_lock+0x50/0x50 [ 2176.074916][T19597] ? do_sys_open+0x32a/0x7a0 [ 2176.079483][T19597] ? do_syscall_64+0xcb/0x150 [ 2176.084145][T19597] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2176.090200][T19597] ? enqueue_entity+0x74f/0xd80 [ 2176.095026][T19597] ? get_pid_task+0x86/0x90 [ 2176.099505][T19597] ? proc_fail_nth_write+0x166/0x200 [ 2176.104783][T19597] ? mutex_lock+0xa6/0x110 [ 2176.109191][T19597] ? mutex_trylock+0xb0/0xb0 [ 2176.113768][T19597] ? do_filp_open+0x2e1/0x430 [ 2176.118472][T19597] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2176.123648][T19597] snd_timer_user_ioctl+0x59/0x70 [ 2176.128664][T19597] ? snd_timer_user_poll+0x130/0x130 [ 2176.133937][T19597] do_vfs_ioctl+0x747/0x1700 [ 2176.138505][T19597] ? selinux_file_ioctl+0x6e4/0x920 [ 2176.143696][T19597] ? ioctl_preallocate+0x240/0x240 [ 2176.148782][T19597] ? __fsnotify_parent+0x300/0x300 [ 2176.153884][T19597] ? __fget+0x37c/0x3c0 [ 2176.158028][T19597] ? __sb_end_write+0xa4/0xf0 [ 2176.162702][T19597] ? fget_many+0x20/0x20 [ 2176.166919][T19597] ? ksys_write+0x237/0x2a0 [ 2176.171413][T19597] ? security_file_ioctl+0xad/0xc0 [ 2176.176514][T19597] __x64_sys_ioctl+0xd4/0x110 [ 2176.181181][T19597] do_syscall_64+0xcb/0x150 [ 2176.185663][T19597] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2176.191536][T19597] RIP: 0033:0x45d5b9 [ 2176.195405][T19597] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2176.214983][T19597] RSP: 002b:00007ff718ddac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2176.223369][T19597] RAX: ffffffffffffffda RBX: 00000000000182c0 RCX: 000000000045d5b9 [ 2176.231319][T19597] RDX: 0000000020000180 RSI: 0000000040345410 RDI: 0000000000000003 [ 2176.239275][T19597] RBP: 00007ff718ddaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2176.247223][T19597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2176.255170][T19597] R13: 00007ffc2db8025f R14: 00007ff718ddb9c0 R15: 000000000118cf4c [ 2176.263904][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2176.275732][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2176.278341][T19613] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2176.294619][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2176.306043][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read 04:04:09 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:09 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2, 0x0) accept4$tipc(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) [ 2176.328403][T19605] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2176.349778][T19613] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 2176.352382][T19606] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:04:09 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c0d) [ 2176.388773][T19608] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2176.409522][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2176.421275][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2176.443007][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2176.473792][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2176.503711][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2176.516543][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2176.528528][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2176.544513][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2176.554102][T19613] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2176.566761][T19613] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 2176.752765][T31846] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2176.920941][T31846] usb 1-1: device descriptor read/8, error -61 [ 2177.188056][T31846] usb 1-1: device descriptor read/8, error -61 [ 2177.455530][T31846] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2177.624071][T31846] usb 1-1: device descriptor read/8, error -61 [ 2177.891779][T31846] usb 1-1: device descriptor read/8, error -61 [ 2178.010800][T31846] usb usb1-port1: unable to enumerate USB device 04:04:11 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:11 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:04:11 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:11 executing program 1 (fault-call:2 fault-nth:3): clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c0e) 04:04:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, 0x0, 0x0, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/147, 0x93}, {&(0x7f00000004c0)=""/118, 0x76}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/217, 0xd9}, {0x0}, {0x0}], 0x5, &(0x7f0000001100)=""/102, 0x66}, 0x2}, {{&(0x7f00000009c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002500)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x2}}], 0x6, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x800, 0xfffffffffffffffd}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000002840)=ANY=[@ANYRESDEC, @ANYBLOB="1a0019ae085e105c58d9058a00006a568100002306ed8d36487c64273fc11ba6d51e75b6a5820f799bcf5ed0c3b7a28edec8df93527ba9cb8f87fb7f85b711c300"/78]}}, 0x0) sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x1, 0x0, 0x0, 0x3, 0x80000001, 0x2000002, 0x0, 0x0, 0x80000001}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @private=0xa010901}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x3, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 04:04:11 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={{r1}, 0x6, 0x4, 0xffff}) 04:04:11 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:11 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:11 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:11 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4b47, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:11 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000080)=""/21, 0x15, 0x2040, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @mcast2, 0x7}, 0x1c) [ 2179.152761][T31846] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2179.391447][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2179.510883][T31846] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.520988][T31846] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2179.600478][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2179.609554][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2179.618068][T31846] usb 1-1: SerialNumber: syz 04:04:14 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:14 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4b49, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c0f) 04:04:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x1, 0x0, 0x3, 0x1, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x9138, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x157) inotify_init1(0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 04:04:14 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="08a9f7d5c7570d44e2e0606d2a1357a176efee4d70d1d55b8b4a2da42890037a2da379069997df737f4c18895a326af07e72b189751f0afa526139b97b53b41dded23c67475ac6f7cc31ba8351d78376450a147bb396fab3f0b0df9983bb2a1cfbe4f22c4e2c09fe81f4a0c50cc5b5470e4dc28386142852f2bb2671f2ce83e3b1ac1606d26d62acb5538146d2ae57b4fd17fcc7669d4fe7eeecd37062f8bc827cbd616ca91e1053adc4200b69e86ec2ef1ac81466cafa0ec335df3847ecc7d45fd11db4aab22625288d16e8a59691f104578c08bd935dcf") tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:04:14 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x541b, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:14 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x2, 0x1, 0x1b, 0x5, 0x1}, 0xc) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) [ 2181.749566][T31846] usb 1-1: USB disconnect, device number 123 04:04:14 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:14 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:14 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5421, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:14 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2182.010633][T19749] print_req_error: 32 callbacks suppressed [ 2182.010645][T19749] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2182.105790][T19760] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2182.118245][T19761] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2182.135443][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2182.146852][ T87] buffer_io_error: 11 callbacks suppressed [ 2182.146857][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2182.162542][T31846] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2182.164366][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2182.181725][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2182.191133][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2182.202788][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2182.256937][T19749] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2182.270080][T19760] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2182.287635][T19761] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2182.303176][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2182.314616][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2182.324123][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2182.333970][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2182.346861][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2182.356284][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2182.368967][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2182.432159][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2182.562026][T31846] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.572152][T31846] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2182.651955][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2182.660999][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2182.669538][T31846] usb 1-1: SerialNumber: syz 04:04:17 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c10) 04:04:17 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:17 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5422, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000010001007b11b700000000009500000000080000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:04:17 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:17 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2184.808487][T31846] usb 1-1: USB disconnect, device number 124 04:04:17 executing program 5: clone(0x2000000000018100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x4, 0x0) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:04:17 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, 0x6, "705e1c887bd10c0dff9e8cbfddc0127d440504", 0x7, 0x8}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x40, 0x89, 0x2, 0xde, 0x0, 0x3, 0x110, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0x40, 0x8}, 0x141, 0x0, 0x2, 0x7, 0xfffffffffffff06d, 0x9f, 0x7}, r1, 0x1, 0xffffffffffffffff, 0x3) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x1a404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) write$9p(r2, &(0x7f0000001400)="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", 0x600) stat(&(0x7f0000000040)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fef00e8cb824cb50adbbbc00000f0601040000000009000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4020050) sendfile(r2, r3, 0x0, 0x1c542) openat$zero(0xffffffffffffff9c, 0x0, 0x404082, 0x0) 04:04:17 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:17 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5450, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2184.868333][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read 04:04:17 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2185.243116][T31846] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2185.483600][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2185.603870][T31846] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.614059][T31846] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2185.694126][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2185.703276][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2185.711883][T31846] usb 1-1: SerialNumber: syz 04:04:20 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:20 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5451, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c12) 04:04:20 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4200, r0, 0x0, 0x0) tkill(r0, 0xc) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) 04:04:20 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 04:04:20 executing program 3: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x2, 0x1, 0x1b, 0x5, 0x1}, 0xc) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) 04:04:20 executing program 5: clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r2 = epoll_create1(0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000000c0)={0x81, {{0xa, 0x4e22, 0x5, @private2, 0x1}}, {{0xa, 0x4e20, 0x501b9157, @mcast2, 0xd6a}}}, 0x108) wait4(0x0, 0x0, 0x0, 0x0) 04:04:20 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 04:04:20 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2187.856331][T31846] usb 1-1: USB disconnect, device number 125 04:04:20 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5460, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:20 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 04:04:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x5f7a499e70317f8c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000500)=ANY=[], 0x20}, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) [ 2187.925359][T19836] print_req_error: 32 callbacks suppressed [ 2187.925370][T19836] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2187.968293][T19834] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2187.986897][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2187.998418][ T87] buffer_io_error: 11 callbacks suppressed [ 2187.998425][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2188.019060][T19874] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2188.036313][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2188.047360][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2188.077606][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2188.089066][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2188.103697][T19836] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2188.116807][T19875] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2188.131627][T19874] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2188.147740][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2188.159312][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2188.172812][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2188.186658][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2188.205012][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2188.216564][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2188.231790][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2188.331573][T31846] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2188.572528][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2188.692987][T31846] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2188.703282][T31846] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2188.714741][T31846] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 2188.803529][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2188.812622][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2188.821634][T31846] usb 1-1: SerialNumber: syz [ 2188.864116][T31846] hub 1-1:1.0: bad descriptor, ignoring hub [ 2188.870121][T31846] hub: probe of 1-1:1.0 failed with error -5 04:04:23 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:23 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:23 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a0, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c1c) 04:04:23 executing program 5: ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x1000, 0x276}) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="74696dce726f66667365743d30"]) 04:04:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xaa042, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x2}, @val={0x2, 0x6, 0x6, 0xffff, 0x7ff, 0x3ff}, @eth={@random, @random="ad316456047b", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @local, @remote}, {0x0, 0x0, 0x8}}}}}}, 0x38) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 04:04:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100), 0x4) perf_event_open(0x0, 0x0, 0x0, r6, 0xa) fallocate(r1, 0x15, 0x3, 0x7fffffff) r7 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000030c0)=0x14) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000003100)) recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000040)}, {&(0x7f0000000340)=""/212, 0xd4}], 0x3, &(0x7f0000000480)=""/24, 0x18}, 0x400}, {{&(0x7f0000000600)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000580)}, 0x3}, {{&(0x7f0000000680)=@ipx, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/91, 0x5b}, {&(0x7f00000008c0)=""/28, 0x1c}, {&(0x7f0000000900)=""/123, 0x7b}, {0x0}, {&(0x7f00000009c0)=""/17, 0x11}, {0x0}, {0x0}], 0x9, &(0x7f0000000bc0)=""/201, 0xc9}, 0x5}, {{&(0x7f0000000cc0)=@qipcrtr, 0x80, &(0x7f0000002000)=[{&(0x7f0000000d40)=""/194, 0xc2}, {&(0x7f0000000e40)=""/174, 0xae}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/198, 0xc6}], 0x4}, 0x1}, {{&(0x7f0000002140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/42, 0x2a}, {&(0x7f0000002240)=""/86, 0x56}, {&(0x7f00000022c0)=""/215, 0xd7}], 0x3, &(0x7f0000002400)=""/86, 0x56}, 0x3ff}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002940)=""/30, 0x1e}], 0x1, &(0x7f00000029c0)=""/60, 0x3c}, 0xf7}, {{&(0x7f0000002a00)=@generic, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002a80)=""/55, 0x37}, {&(0x7f0000002ac0)=""/39, 0x27}, {&(0x7f0000002b00)=""/242, 0xf2}, {&(0x7f0000002c00)=""/110, 0x6e}, {0x0}], 0x5, &(0x7f0000002d80)=""/221, 0xdd}, 0x827}], 0x7, 0x60, &(0x7f0000003080)={0x77359400}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x415194014) 04:04:23 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:23 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a1, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:23 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:23 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:23 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) [ 2191.025509][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2191.234106][T31846] usb 1-1: reset high-speed USB device number 126 using dummy_hcd [ 2191.485366][T31846] usb 1-1: Using ep0 maxpacket: 8 04:04:26 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:26 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a3, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400cef) 04:04:26 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) 04:04:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2100000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x20000}, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x2, 0x9, 0x9, 0x0, 0x7, 0x80, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xe45, 0x4, @perf_config_ext={0x8, 0x7}, 0x440, 0x1e6f, 0xc8, 0x1, 0x9, 0x4, 0x3}, r2, 0x3, r4, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0, 0x0) 04:04:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000080)={0x0, 0xfffc, 0x8, 0x0, 0x1, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 04:04:26 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) 04:04:26 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40045402, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400100008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0xfff, 0x40, 0x0, 0x4000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40)}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x16) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='nfs_export=off,uid>', @ANYRESDEC, @ANYBLOB="2c646f6e745f61707072616973652c646f6e745f61707072616902d0ba9b34c7838951734326edb673652c7375626a5f757365723d2c272a2b5b2c7569643ec14e1bdd438ea370a2a3f2ef83c425ddc8fe3b5ba309f99aacbe9ca37ae4b19c6cb8ab0a37af815f84c4f4402cbdcfb14f1e770202e98665fcea3aa97f1e59aa1d059189e2a372f4c5aef104d0a98287a5aecf540def95993c9406d5de1e86dfa350b39df5acc45b92", @ANYRESDEC=0x0, @ANYBLOB="2c726f6f740800000000000000000061ebe9fb61010033af9497ad4c6e2aae2933a2ac134c68f2081c6a", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xd000000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0039e834447eeb1fcf2fe7a5d1e1eeff280f000df13f2c0ee2971bf17177b1dfcb4a370c6157522e42eb0b35275462c9fa1a14d968dd310b95616e4012b5eb03872b362492feda6e03f0bf09f1dbc10f007e725b00ca8b54b71c817ffe58ede89e4f05263b1d27474372851ae97af9ee34f655a8ad1236e23c2525b5d3d65fab04c11a4ffe1530c63074e09a22f87919"]) 04:04:26 executing program 2 (fault-call:2 fault-nth:0): clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2194.056881][T19962] print_req_error: 32 callbacks suppressed [ 2194.056945][T19962] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2194.077057][T19961] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:04:26 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40049409, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2194.105395][T19964] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2194.129846][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2194.131285][T19977] FAULT_INJECTION: forcing a failure. [ 2194.131285][T19977] name failslab, interval 1, probability 0, space 0, times 0 04:04:26 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40086602, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2194.140973][ T87] buffer_io_error: 11 callbacks suppressed [ 2194.140980][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2194.172230][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2194.176373][T19977] CPU: 0 PID: 19977 Comm: syz-executor.2 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2194.183717][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2194.195031][T19977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2194.195035][T19977] Call Trace: [ 2194.195049][T19977] dump_stack+0x1b0/0x21e [ 2194.195059][T19977] ? devkmsg_release+0x11c/0x11c [ 2194.195072][T19977] ? show_regs_print_info+0x12/0x12 [ 2194.231052][T19977] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 2194.236401][T19977] should_fail+0x6fb/0x860 [ 2194.240815][T19977] ? setup_fault_attr+0x2b0/0x2b0 [ 2194.245854][T19977] ? selinux_kernel_module_request+0x123/0x1a0 [ 2194.252017][T19977] ? selinux_kernel_create_files_as+0x2c0/0x2c0 [ 2194.258259][T19977] ? __request_module+0x434/0xb40 [ 2194.263277][T19977] should_failslab+0x5/0x20 [ 2194.267759][T19977] kmem_cache_alloc_trace+0x39/0x270 [ 2194.273019][T19977] __request_module+0x434/0xb40 [ 2194.277885][T19977] ? avc_denied+0x1c0/0x1c0 [ 2194.282365][T19977] ? snd_timer_open+0x5be/0x2500 [ 2194.287291][T19977] ? snd_timer_open+0x59a/0x2500 [ 2194.292203][T19977] ? snd_timer_open+0x4bb/0x2500 [ 2194.297115][T19977] ? set_permissions+0xa0/0xa0 [ 2194.301856][T19977] ? vsnprintf+0x1c50/0x1c50 [ 2194.306421][T19977] ? mutex_lock+0xa6/0x110 [ 2194.310815][T19977] ? mutex_trylock+0xb0/0xb0 [ 2194.315379][T19977] ? vsnprintf+0x1ba3/0x1c50 [ 2194.319953][T19977] snd_timer_open+0x5be/0x2500 [ 2194.324708][T19977] ? sprintf+0xc7/0x110 [ 2194.328838][T19977] ? __snd_timer_user_ioctl+0x1844/0x5690 [ 2194.334531][T19977] ? vsprintf+0x30/0x30 [ 2194.338659][T19977] ? snd_hwdep_proc_read+0x140/0x140 [ 2194.343928][T19977] ? __rcu_read_lock+0x50/0x50 [ 2194.348667][T19977] __snd_timer_user_ioctl+0x1cad/0x5690 [ 2194.354219][T19977] ? is_bpf_text_address+0x290/0x2b0 [ 2194.359491][T19977] ? stack_trace_save+0x1e0/0x1e0 [ 2194.364494][T19977] ? __kernel_text_address+0x93/0x110 [ 2194.369840][T19977] ? unwind_get_return_address+0x48/0x90 [ 2194.375454][T19977] ? snd_timer_user_fasync+0x60/0x60 [ 2194.380754][T19977] ? arch_stack_walk+0x98/0xe0 [ 2194.385497][T19977] ? __rcu_read_lock+0x50/0x50 [ 2194.390238][T19977] ? avc_has_extended_perms+0x69e/0x10c0 [ 2194.395848][T19977] ? avc_has_extended_perms+0xb25/0x10c0 [ 2194.401484][T19977] ? do_sys_open+0x60f/0x7a0 [ 2194.406050][T19977] ? __rcu_read_lock+0x50/0x50 [ 2194.410784][T19977] ? do_sys_open+0x32a/0x7a0 [ 2194.415346][T19977] ? do_syscall_64+0xcb/0x150 [ 2194.420000][T19977] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2194.426040][T19977] ? enqueue_entity+0x74f/0xd80 [ 2194.430868][T19977] ? get_pid_task+0x86/0x90 [ 2194.435347][T19977] ? proc_fail_nth_write+0x166/0x200 [ 2194.440615][T19977] ? mutex_lock+0xa6/0x110 [ 2194.445005][T19977] ? mutex_trylock+0xb0/0xb0 [ 2194.449568][T19977] ? do_filp_open+0x2e1/0x430 [ 2194.454235][T19977] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2194.459423][T19977] snd_timer_user_ioctl+0x59/0x70 [ 2194.464448][T19977] ? snd_timer_user_poll+0x130/0x130 [ 2194.469740][T19977] do_vfs_ioctl+0x747/0x1700 [ 2194.474420][T19977] ? selinux_file_ioctl+0x6e4/0x920 [ 2194.479597][T19977] ? ioctl_preallocate+0x240/0x240 [ 2194.484683][T19977] ? __fsnotify_parent+0x300/0x300 [ 2194.489777][T19977] ? __fget+0x37c/0x3c0 [ 2194.493921][T19977] ? __sb_end_write+0xa4/0xf0 [ 2194.498603][T19977] ? fget_many+0x20/0x20 [ 2194.502818][T19977] ? ksys_write+0x237/0x2a0 [ 2194.507297][T19977] ? security_file_ioctl+0xad/0xc0 [ 2194.512382][T19977] __x64_sys_ioctl+0xd4/0x110 [ 2194.517035][T19977] do_syscall_64+0xcb/0x150 [ 2194.521514][T19977] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2194.527380][T19977] RIP: 0033:0x45d5b9 [ 2194.531251][T19977] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2194.550879][T19977] RSP: 002b:00007f5697918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2194.559279][T19977] RAX: ffffffffffffffda RBX: 00000000000182c0 RCX: 000000000045d5b9 [ 2194.567225][T19977] RDX: 0000000020000180 RSI: 0000000040345410 RDI: 0000000000000003 [ 2194.575169][T19977] RBP: 00007f5697918ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2194.583115][T19977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2194.591062][T19977] R13: 00007fffd99b41cf R14: 00007f56979199c0 R15: 000000000118cf4c [ 2194.600548][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2194.612814][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2194.648884][T19991] overlayfs: unrecognized mount option "uid>18446744073709551615" or missing value [ 2194.682990][T31846] usb 1-1: reset high-speed USB device number 126 using dummy_hcd [ 2194.684290][T19962] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2194.709377][T19970] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2194.747628][T19964] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2194.771273][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2194.782377][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2194.812282][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2194.837702][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2194.902402][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2194.911245][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2194.934486][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2194.950367][T19980] overlayfs: unrecognized mount option "uid>18446744073709551615" or missing value [ 2194.963605][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read 04:04:29 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:29 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40087602, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400cf0) 04:04:29 executing program 2 (fault-call:2 fault-nth:1): clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:29 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x3f9, 0x20, 0x70bd25, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x1) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000400)={0x4, 0x4, 0x2, 0x1, 0x12, "00a8b8fcb1e0614c"}) r2 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xe4, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "49bc2744b02f5d991c27998bcd2d38a580de59eb63e8ca3c"}}, @TIPC_NLA_NODE_ID={0x14, 0x3, "a07521a487815dbed7d88207b382158a"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "2a1681fbb223011a9cffd92235c905fc81088f96682f5601660ed3780eb5369776"}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x40840) lsetxattr(&(0x7f0000000300)='./bus/file0\x00', &(0x7f0000000340)=@random={'trusted.', '&\'}\x00'}, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) linkat(r2, &(0x7f00000000c0)='\x00', r5, &(0x7f00000002c0)='./file1\x00', 0x1000) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) link(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='./bus/file1\x00') open$dir(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) 04:04:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000ade10040ac0543824000000000010902240001000000000904000001030100000921000000ce7b284c01220500090581030000000000d7566d6bad30e5fd7607751b01896242f37b18a8c85b08c302112905c139cd7503879f173f0d76678ecc108e331ed6dcc5c3c7a1f6ffbdce04f9422a9fa8984e6d0bfdafdf7df1294e536f2eadd73341ac1dfa278512e2eb76f6614a21dae19595946556cc913b2e019c748036452d9fecc201ab4c2b5a"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc00", @ANYRES16=r5, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x40010) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x8c, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0000}, 0x440c1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="50634ebff506564a9240961dce95d9fa", 0x10) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, "b023"}, @main=@item_012={0x1, 0x0, 0x0, "a8"}]}}, 0x0}, 0x0) 04:04:29 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4020940d, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:29 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345402, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2197.237327][T20010] FAULT_INJECTION: forcing a failure. [ 2197.237327][T20010] name failslab, interval 1, probability 0, space 0, times 0 [ 2197.267055][T20007] overlayfs: unrecognized mount option "lowerdi¼ídÎ-6Ir=./bus" or missing value [ 2197.284911][T20010] CPU: 0 PID: 20010 Comm: syz-executor.2 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2197.296473][T20010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2197.306649][T20010] Call Trace: [ 2197.309909][T20010] dump_stack+0x1b0/0x21e [ 2197.314224][T20010] ? devkmsg_release+0x11c/0x11c [ 2197.319136][T20010] ? avc_has_perm+0x15f/0x260 [ 2197.323798][T20010] ? show_regs_print_info+0x12/0x12 [ 2197.328962][T20010] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 2197.334300][T20010] should_fail+0x6fb/0x860 [ 2197.338683][T20010] ? setup_fault_attr+0x2b0/0x2b0 [ 2197.343673][T20010] ? setup_fault_attr+0x2b0/0x2b0 [ 2197.348679][T20010] ? selinux_kernel_module_request+0x123/0x1a0 [ 2197.354821][T20010] ? selinux_kernel_create_files_as+0x2c0/0x2c0 [ 2197.361041][T20010] ? __request_module+0x461/0xb40 [ 2197.366030][T20010] should_failslab+0x5/0x20 [ 2197.370549][T20010] __kmalloc_track_caller+0x5d/0x2b0 [ 2197.375819][T20010] kstrdup+0x31/0x70 [ 2197.379684][T20010] __request_module+0x461/0xb40 [ 2197.384521][T20010] ? avc_denied+0x1c0/0x1c0 [ 2197.388991][T20010] ? snd_timer_open+0x5be/0x2500 [ 2197.393893][T20010] ? snd_timer_open+0x59a/0x2500 [ 2197.398823][T20010] ? snd_timer_open+0x4bb/0x2500 [ 2197.403737][T20010] ? set_permissions+0xa0/0xa0 [ 2197.408479][T20010] ? vsnprintf+0x1c50/0x1c50 [ 2197.413048][T20010] ? mutex_lock+0xa6/0x110 [ 2197.417432][T20010] ? mutex_trylock+0xb0/0xb0 [ 2197.422038][T20010] ? vsnprintf+0x1ba3/0x1c50 [ 2197.426713][T20010] snd_timer_open+0x5be/0x2500 [ 2197.431486][T20010] ? sprintf+0xc7/0x110 [ 2197.435609][T20010] ? __snd_timer_user_ioctl+0x1844/0x5690 [ 2197.441293][T20010] ? vsprintf+0x30/0x30 [ 2197.445420][T20010] ? snd_hwdep_proc_read+0x140/0x140 [ 2197.450675][T20010] ? __rcu_read_lock+0x50/0x50 [ 2197.455442][T20010] __snd_timer_user_ioctl+0x1cad/0x5690 [ 2197.460955][T20010] ? is_bpf_text_address+0x290/0x2b0 [ 2197.466205][T20010] ? stack_trace_save+0x1e0/0x1e0 [ 2197.471197][T20010] ? __kernel_text_address+0x93/0x110 [ 2197.476539][T20010] ? unwind_get_return_address+0x48/0x90 [ 2197.482152][T20010] ? snd_timer_user_fasync+0x60/0x60 [ 2197.487441][T20010] ? arch_stack_walk+0x98/0xe0 [ 2197.492175][T20010] ? __rcu_read_lock+0x50/0x50 [ 2197.496914][T20010] ? avc_has_extended_perms+0x69e/0x10c0 [ 2197.502511][T20010] ? avc_has_extended_perms+0xb25/0x10c0 [ 2197.508110][T20010] ? do_sys_open+0x60f/0x7a0 [ 2197.512717][T20010] ? __rcu_read_lock+0x50/0x50 [ 2197.517452][T20010] ? do_sys_open+0x32a/0x7a0 [ 2197.522008][T20010] ? do_syscall_64+0xcb/0x150 [ 2197.526652][T20010] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2197.532699][T20010] ? enqueue_entity+0x74f/0xd80 [ 2197.537517][T20010] ? get_pid_task+0x86/0x90 [ 2197.541988][T20010] ? proc_fail_nth_write+0x166/0x200 [ 2197.547242][T20010] ? mutex_lock+0xa6/0x110 [ 2197.551626][T20010] ? mutex_trylock+0xb0/0xb0 [ 2197.556183][T20010] ? do_filp_open+0x2e1/0x430 [ 2197.560844][T20010] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2197.566010][T20010] snd_timer_user_ioctl+0x59/0x70 [ 2197.571015][T20010] ? snd_timer_user_poll+0x130/0x130 [ 2197.576266][T20010] do_vfs_ioctl+0x747/0x1700 [ 2197.580826][T20010] ? selinux_file_ioctl+0x6e4/0x920 [ 2197.586029][T20010] ? ioctl_preallocate+0x240/0x240 [ 2197.591109][T20010] ? __fsnotify_parent+0x300/0x300 [ 2197.596190][T20010] ? __fget+0x37c/0x3c0 [ 2197.600328][T20010] ? __sb_end_write+0xa4/0xf0 [ 2197.604974][T20010] ? fget_many+0x20/0x20 [ 2197.609225][T20010] ? ksys_write+0x237/0x2a0 [ 2197.613697][T20010] ? security_file_ioctl+0xad/0xc0 [ 2197.618772][T20010] __x64_sys_ioctl+0xd4/0x110 [ 2197.623415][T20010] do_syscall_64+0xcb/0x150 [ 2197.627923][T20010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2197.633846][T20010] RIP: 0033:0x45d5b9 [ 2197.637735][T20010] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2197.657315][T20010] RSP: 002b:00007f5697918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2197.665690][T20010] RAX: ffffffffffffffda RBX: 00000000000182c0 RCX: 000000000045d5b9 [ 2197.673629][T20010] RDX: 0000000020000180 RSI: 0000000040345410 RDI: 0000000000000003 [ 2197.681570][T20010] RBP: 00007f5697918ca0 R08: 0000000000000000 R09: 0000000000000000 04:04:30 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345403, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:30 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345404, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:30 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345405, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:30 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345406, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2197.689507][T20010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2197.697473][T20010] R13: 00007fffd99b41cf R14: 00007f56979199c0 R15: 000000000118cf4c [ 2197.722643][T20025] overlayfs: unrecognized mount option "lowerdi¼ídÎ-6Ir=./bus" or missing value [ 2197.788444][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2197.862543][ T6420] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2197.862552][T31846] usb 1-1: reset high-speed USB device number 126 using dummy_hcd [ 2198.104160][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2198.144396][ T6420] usb 6-1: device descriptor read/64, error 18 [ 2198.184706][T31846] usb 1-1: device firmware changed [ 2198.189959][T31846] usb 1-1: USB disconnect, device number 126 [ 2198.536953][ T6420] usb 6-1: device descriptor read/64, error 18 [ 2198.547487][T31846] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2198.788603][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2198.808773][ T6420] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2198.909514][T31846] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.919632][T31846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2198.931112][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2198.941323][T31846] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 2199.030248][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2199.039381][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2199.047953][T31846] usb 1-1: SerialNumber: syz [ 2199.070519][T20015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2199.080555][ T6420] usb 6-1: device descriptor read/64, error 18 [ 2199.091022][T31846] hub 1-1:1.0: bad descriptor, ignoring hub [ 2199.096998][T31846] hub: probe of 1-1:1.0 failed with error -5 [ 2199.483285][ T6420] usb 6-1: device descriptor read/64, error 18 [ 2199.604120][ T6420] usb usb6-port1: attempt power cycle 04:04:33 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:33 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345407, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:33 executing program 2 (fault-call:2 fault-nth:2): clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400d00) 04:04:33 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, 0x6, "705e1c887bd10c0dff9e8cbfddc0127d440504", 0x7, 0x8}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x84}}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x78, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003020000402505a1a4400001020301090266000201fa20050904000001020d000008240600010d081505240000000d240f01e1ffffffff0000047f06241a080022072414800000000905810300028308200904010000020d00000904010102020d000009058202200205073f09050302ff03880000"], &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x1e, 0x0, 0x40, 0x20}, 0x115, &(0x7f0000000440)={0x5, 0xf, 0x115, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0xd5, 0x6, 0x1f}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7f, 0x40, 0xa251}, @generic={0xf8, 0x10, 0xb, "df31082e5513ac1da53ec8e67836158aeb31d8e66d7dd205ce7970bc64c8fb97f808b85ca357597b65d1ca175924fb07bd1af88a2051d488fca18dd6df073c608a5c4ef8aa2ff4ecc4ff5b109f956fd54fbf6533a7c73e6496b0a29f9ae0cdf72e3892d5e5f023e39b7e5a14d70caccd90856c7babc31956eb91b34d4c978dc49b1f3383d368c48f28243228598656f155eb40f6bcf8efa54f5a3e1fddeac42849934befb2c07165a1403ec2e8742e59696582f9acfcf1de33948e414c54b3c31050f8007643b1b50c819a75eb2d187e3b8a276738c9ba86b026fcf62e07f30f0e3a54a9774d53b7ef95633cffabd53279d821b77d"}]}, 0x1, [{0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="2e03ec658610aa578d6cd7e30f274d5342edc6caec0e7d163fadbff6f9bb751fe4101e4455ebda89778e2c484baaea6a22826cc2aeba54a84a6edcc365d0291397abfcb5c5adb0e0af7e3f8d9892c689b9cac6aaa30fab74007e1d145974e544ba8448eb1ae526168a559be2c32e7c9b31cb1bbebd7e521b3a5dfa906250065a5162db32e2ae203b3d623355cb7084802482fed0173e3a515cba3e4a68d4a7ffa1e9bd84b8d55d5b943101f4eb48fcab0f2ac774d47d4e4cdb5179b52598e867158656ee"]}]}) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)={0x44c, 0x3f4, 0x10, 0x70bd29, 0x25dfdbfb, {0x4, 0x0, 0x2d, [0xfffffff8, 0x1, 0xd8, 0x63, 0x8, 0xe, 0x1, 0x7f, 0x8000, 0x8000, 0x7, 0x0, 0x0, 0xd76, 0x8, 0x1, 0x6, 0x3, 0x8, 0xb5, 0x14, 0x3, 0xbd6, 0x1, 0x2, 0x9, 0x6, 0x1400000, 0x4, 0x8000, 0x19eab03d, 0x6, 0x9, 0x3ff, 0x6, 0x101, 0xfff, 0x100, 0x4, 0xffff5029, 0x71e2, 0x8000, 0x3, 0x800, 0x4, 0x80000001, 0x4, 0x4, 0x9, 0x800, 0x4, 0x4, 0x3d0, 0xb5f6, 0x3, 0x2, 0x82b, 0x0, 0x9, 0x6, 0x8, 0x9f, 0x3f, 0x42c], [0x9, 0x5, 0x4, 0x81, 0x2, 0x5, 0x7, 0x20, 0x8000, 0x400, 0x5e46e9e0, 0x703, 0x101, 0x1, 0x1024840, 0x20, 0x401, 0x8, 0xbd, 0x7, 0x101, 0x5, 0x1ff, 0x7, 0xdd, 0x9, 0x1ff, 0x4, 0x3, 0x101, 0x8001, 0x8, 0x1, 0xffff, 0x1, 0x2, 0x400, 0x5, 0x674, 0x12000000, 0x5, 0xffffffff, 0x0, 0xab9, 0xfffffffe, 0x1, 0x9, 0x5, 0x401, 0x101, 0xe6, 0x7fffffff, 0x80, 0x5, 0x1f, 0x7fffffff, 0x2, 0x3, 0xfff, 0x0, 0x3ce7, 0x400, 0x1, 0x5], [0x8, 0xffff, 0x5, 0x3, 0x80000000, 0x0, 0x13a, 0x3f, 0xd6a, 0x20000000, 0x9, 0x60, 0xa9, 0x34b9, 0x88, 0x100, 0xffffffff, 0x70b, 0xc9f, 0x3, 0x0, 0xfffffffd, 0x4, 0xfc000000, 0x2, 0x9, 0xe6, 0x2, 0x7, 0x80000001, 0x6, 0x1, 0x0, 0x7fff, 0x1, 0xc, 0x2, 0x1, 0x1, 0x6, 0xfffffffa, 0x6, 0x6, 0x8, 0x4, 0xfffffff8, 0x7fffffff, 0xc1, 0x6, 0x400, 0xbaa, 0x8, 0x2, 0x5, 0x1, 0x2, 0x80, 0x1e, 0x8000, 0xd73, 0x8000, 0x8, 0x1], [0x401, 0x12, 0x2d, 0xffff, 0x5a37, 0x4, 0xffff, 0x81, 0x8, 0xc52, 0x10000, 0x88, 0x0, 0x0, 0x6, 0x7, 0x2, 0x1, 0x8, 0x6bd, 0x1d8, 0x7fff, 0x3217, 0x3ee, 0x1000, 0x0, 0x0, 0x8001, 0x7, 0x7, 0x48e, 0xff, 0x7fff, 0x6, 0x2, 0x6, 0x800, 0xffff, 0x7, 0x42, 0x7, 0x1f, 0x800, 0x2, 0x2, 0x4, 0x2, 0x2, 0x9, 0x5, 0x10001, 0xe6ca, 0x6, 0x1, 0x6, 0x8, 0xfffffff8, 0x4, 0x8, 0xffffffff, 0x1822, 0x4, 0x3, 0x1ff], 0x2c, ['/sys/kernel/debug/binder/state\x00', ',\x00', '[^@.{#+):%\x00']}, ["", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x2000100}, 0x20008800) setuid(r3) sendfile(r1, r2, 0x0, 0x1c542) openat$zero(0xffffffffffffff9c, 0x0, 0x404082, 0x0) 04:04:33 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000000)) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbe06}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 04:04:33 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345408, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:33 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345409, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2201.247669][T20076] FAULT_INJECTION: forcing a failure. [ 2201.247669][T20076] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.286855][T20076] CPU: 0 PID: 20076 Comm: syz-executor.2 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2201.298424][T20076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2201.308915][T20076] Call Trace: [ 2201.312443][T20076] dump_stack+0x1b0/0x21e [ 2201.316856][T20076] ? devkmsg_release+0x11c/0x11c [ 2201.321774][T20076] ? show_regs_print_info+0x12/0x12 [ 2201.327098][T20076] ? avc_has_perm+0xbd/0x260 [ 2201.331772][T20076] ? avc_has_perm+0x15f/0x260 [ 2201.336584][T20076] should_fail+0x6fb/0x860 [ 2201.341008][T20076] ? setup_fault_attr+0x2b0/0x2b0 [ 2201.346261][T20076] ? should_fail+0x182/0x860 [ 2201.351051][T20076] ? should_fail+0x182/0x860 [ 2201.355623][T20076] ? setup_fault_attr+0x2b0/0x2b0 [ 2201.360631][T20076] ? setup_fault_attr+0x2b0/0x2b0 [ 2201.365639][T20076] ? call_usermodehelper_setup+0x86/0x210 [ 2201.371583][T20076] should_failslab+0x5/0x20 [ 2201.376165][T20076] kmem_cache_alloc_trace+0x39/0x270 [ 2201.381599][T20076] call_usermodehelper_setup+0x86/0x210 [ 2201.387241][T20076] ? __request_module+0xb40/0xb40 [ 2201.392250][T20076] __request_module+0x52c/0xb40 [ 2201.397223][T20076] ? avc_denied+0x1c0/0x1c0 [ 2201.401766][T20076] ? snd_timer_open+0x5be/0x2500 [ 2201.406812][T20076] ? snd_timer_open+0x59a/0x2500 [ 2201.411785][T20076] ? snd_timer_open+0x4bb/0x2500 [ 2201.416723][T20076] ? set_permissions+0xa0/0xa0 [ 2201.421528][T20076] ? vsnprintf+0x1c50/0x1c50 [ 2201.426148][T20076] ? mutex_lock+0xa6/0x110 [ 2201.430651][T20076] ? mutex_trylock+0xb0/0xb0 [ 2201.435227][T20076] ? vsnprintf+0x1ba3/0x1c50 [ 2201.439827][T20076] snd_timer_open+0x5be/0x2500 [ 2201.444576][T20076] ? sprintf+0xc7/0x110 [ 2201.448725][T20076] ? __snd_timer_user_ioctl+0x1844/0x5690 [ 2201.454456][T20076] ? vsprintf+0x30/0x30 [ 2201.458759][T20076] ? snd_hwdep_proc_read+0x140/0x140 [ 2201.464028][T20076] ? __rcu_read_lock+0x50/0x50 [ 2201.468969][T20076] __snd_timer_user_ioctl+0x1cad/0x5690 [ 2201.474642][T20076] ? is_bpf_text_address+0x290/0x2b0 [ 2201.480028][T20076] ? stack_trace_save+0x1e0/0x1e0 [ 2201.485036][T20076] ? __kernel_text_address+0x93/0x110 [ 2201.490451][T20076] ? unwind_get_return_address+0x48/0x90 [ 2201.496138][T20076] ? snd_timer_user_fasync+0x60/0x60 [ 2201.501701][T20076] ? arch_stack_walk+0x98/0xe0 [ 2201.506535][T20076] ? __rcu_read_lock+0x50/0x50 [ 2201.511280][T20076] ? avc_has_extended_perms+0x69e/0x10c0 [ 2201.516899][T20076] ? avc_has_extended_perms+0xb25/0x10c0 [ 2201.522515][T20076] ? do_sys_open+0x60f/0x7a0 [ 2201.527088][T20076] ? __rcu_read_lock+0x50/0x50 [ 2201.531851][T20076] ? do_sys_open+0x32a/0x7a0 [ 2201.536549][T20076] ? do_syscall_64+0xcb/0x150 [ 2201.541211][T20076] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2201.547407][T20076] ? enqueue_entity+0x74f/0xd80 [ 2201.552388][T20076] ? get_pid_task+0x86/0x90 [ 2201.556880][T20076] ? proc_fail_nth_write+0x166/0x200 [ 2201.562150][T20076] ? mutex_lock+0xa6/0x110 [ 2201.566602][T20076] ? mutex_trylock+0xb0/0xb0 [ 2201.571227][T20076] ? do_filp_open+0x2e1/0x430 [ 2201.575909][T20076] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2201.581136][T20076] snd_timer_user_ioctl+0x59/0x70 [ 2201.586176][T20076] ? snd_timer_user_poll+0x130/0x130 [ 2201.591461][T20076] do_vfs_ioctl+0x747/0x1700 [ 2201.596138][T20076] ? selinux_file_ioctl+0x6e4/0x920 [ 2201.601452][T20076] ? ioctl_preallocate+0x240/0x240 [ 2201.606851][T20076] ? __fsnotify_parent+0x300/0x300 [ 2201.611952][T20076] ? __fget+0x37c/0x3c0 [ 2201.616206][T20076] ? __sb_end_write+0xa4/0xf0 [ 2201.620890][T20076] ? fget_many+0x20/0x20 [ 2201.625122][T20076] ? ksys_write+0x237/0x2a0 [ 2201.629781][T20076] ? security_file_ioctl+0xad/0xc0 [ 2201.635080][T20076] __x64_sys_ioctl+0xd4/0x110 [ 2201.639757][T20076] do_syscall_64+0xcb/0x150 [ 2201.644243][T20076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2201.650328][T20076] RIP: 0033:0x45d5b9 [ 2201.654220][T20076] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2201.673949][T20076] RSP: 002b:00007f5697918c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2201.682338][T20076] RAX: ffffffffffffffda RBX: 00000000000182c0 RCX: 000000000045d5b9 [ 2201.690293][T20076] RDX: 0000000020000180 RSI: 0000000040345410 RDI: 0000000000000003 04:04:34 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540a, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x20, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x3, 0x0, 0x68f58, 0x1000, 0x7, 0x4, 0xff, 0xb85, 0x2}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2e5b, 0xe7}, 0x110, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r4 = creat(&(0x7f0000000180)='./bus\x00', 0xc2) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) ftruncate(r4, 0x800) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x74, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'g&}]\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x8081) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x1c7) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) 04:04:34 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540b, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2201.698247][T20076] RBP: 00007f5697918ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.706252][T20076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2201.714206][T20076] R13: 00007fffd99b41cf R14: 00007f56979199c0 R15: 000000000118cf4c 04:04:34 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540c, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2201.797808][T20117] print_req_error: 14 callbacks suppressed [ 2201.797815][T20117] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2201.822329][T20118] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2201.834860][T20119] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2201.847471][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2201.859018][ T87] buffer_io_error: 2 callbacks suppressed [ 2201.859025][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2201.875215][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2201.886574][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2201.897733][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2201.899780][T20363] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 2201.909065][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2201.916694][T31846] usb 1-1: reset high-speed USB device number 127 using dummy_hcd [ 2202.181726][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2202.322747][T20080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2202.343024][T20363] usb 4-1: not running at top speed; connect to a high speed hub [ 2202.423506][T20363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2202.434562][T20363] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 2202.446277][T20363] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2202.614895][T20363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2202.624557][T20363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.634592][T20363] usb 4-1: Product: syz [ 2202.642381][T20363] usb 4-1: Manufacturer: syz [ 2202.647621][T20363] usb 4-1: SerialNumber: syz [ 2202.665249][T20073] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2203.249305][T20363] cdc_ncm 4-1:1.0: bind() failure [ 2203.255545][T20363] cdc_ncm 4-1:1.1: bind() failure [ 2203.263895][T20363] usb 4-1: USB disconnect, device number 121 [ 2203.954263][T20363] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 2204.356906][T20363] usb 4-1: not running at top speed; connect to a high speed hub 04:04:37 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:37 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540d, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:37 executing program 2 (fault-call:2 fault-nth:3): clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400e00) 04:04:37 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ext3\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) 04:04:37 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540e, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:37 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2204.435104][T20363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2204.446336][T20363] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 2204.458046][T20363] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 04:04:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getenv(0x4201, 0xffffffffffffffff, 0xfffffffffffffc01, &(0x7f0000000180)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2$9p(&(0x7f00000001c0), 0x4800) r4 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000600)={0x0, @private, @multicast2}, &(0x7f0000000640)=0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000000)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x3) write$binfmt_misc(r6, &(0x7f0000000040)=ANY=[], 0x5) sendfile(r5, r6, &(0x7f00000000c0), 0xfffb) fcntl$addseals(r6, 0x409, 0xb) fremovexattr(r6, &(0x7f0000000100)=@known='system.posix_acl_default\x00') ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) dup3(r1, r6, 0x0) 04:04:37 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:37 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345411, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2204.513141][T20363] usb 4-1: string descriptor 0 read error: -71 [ 2204.519555][T20363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2204.525673][ T87] blk_update_request: I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2204.540348][T20154] EXT4-fs (loop11): unable to read superblock 04:04:37 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4b47, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:37 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345412, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2204.572348][T20363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.573419][T20161] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2204.593670][T20163] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2204.607880][T20147] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2204.620468][T20154] EXT4-fs (loop11): unable to read superblock [ 2204.640299][T20363] usb 4-1: can't set config #1, error -71 [ 2204.650257][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2204.662511][T20363] usb 4-1: USB disconnect, device number 122 [ 2204.668242][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2204.678632][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2204.696501][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2204.707690][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2204.718266][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2204.756545][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2204.767261][T31846] usb 1-1: reset high-speed USB device number 127 using dummy_hcd [ 2205.001786][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2205.138597][T20144] raw-gadget gadget: fail, usb_ep_enable returned -22 04:04:40 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:40 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345429, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:40 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4b49, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:40 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf6) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000040)={0x4, 0x6, 0x2}) listen(r2, 0x0) shutdown(r2, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xa0000004}) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 04:04:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400f00) 04:04:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x101000, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x54) r2 = dup(r0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='ipvlan1\x00', 0x8001, 0x7ff, 0x1}) syz_usb_connect(0x0, 0x35, &(0x7f0000000080)=ANY=[], 0x0) 04:04:40 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40485404, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:40 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x541b, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:40 executing program 5: ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000000)={0x1, 0x9, [0xa6, 0x7, 0x80, 0x5, 0x2], 0x1}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) prctl$PR_SET_FPEXC(0xc, 0x20000) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000001040)={{}, {@val, @max='max'}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001140)={'syztnl2\x00', &(0x7f00000010c0)={'sit0\x00', 0x0, 0x29, 0x9, 0x4, 0x100, 0x51, @private0={0xfc, 0x0, [], 0x1}, @private1, 0x20, 0x7, 0x1, 0x40}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000011c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001280)={'ip6gre0\x00', &(0x7f0000001200)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x1, 0x5, 0x3, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x1, 0x1, 0x1, 0x7}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x148, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000003}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000014c0)={[{0x2b, 'io'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0x2d, 'io'}, {0x2b, 'rdma'}, {0x2d, 'rdma'}, {0x2b, 'io'}, {0x2d, 'cpu'}]}, 0x2d) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001500)={0x0, 0x3ff, 0x0, [0x7, 0x3, 0x0, 0x2e89, 0x4], [0x4, 0x5, 0xffffffff, 0xfffffffffffff1be, 0x1, 0x6, 0x1, 0x6, 0xfffffffffffffffc, 0x1000, 0xdea, 0x1, 0xd372, 0x14, 0xffffffff, 0x10001, 0x7a, 0x20, 0xffffffff, 0x2, 0x401, 0x94, 0x2, 0x13, 0xfffffffffffffff8, 0x9, 0x8000, 0x200, 0xffffffffffffff9c, 0x6, 0x1, 0x401, 0x8, 0x8c5b, 0x0, 0x1ff, 0x9, 0x4, 0x7, 0x8001, 0x100, 0x6, 0x1, 0xcb1, 0x80, 0xcee8, 0x3, 0xa4, 0x9, 0x7f, 0x400, 0xecd8, 0x1, 0x5, 0xb551, 0xfffffffffffffffe, 0x7, 0x8, 0x4, 0x5, 0x0, 0x7, 0xffffffffffff4c17, 0x7fffffff, 0x3, 0x5, 0x1fdb, 0x8000, 0x1d3, 0x9, 0x1f, 0x10000, 0x6, 0x1f, 0x8, 0x8000, 0x79, 0x3ff, 0x6b23000000000, 0x7ff, 0x4b, 0x400, 0x7fff, 0x1ff, 0x2, 0x6, 0x4, 0x1ff, 0x4, 0xf3b, 0x5, 0x44e, 0x9, 0x8c3, 0x3, 0x5, 0x4, 0x80000001, 0x0, 0x80, 0x0, 0x3, 0x1000, 0xffffffffffffffe1, 0x7, 0x2, 0x0, 0xf4, 0x100000000, 0x10001, 0x6, 0x9f, 0x4, 0x7, 0x99, 0x220, 0x4, 0x3f, 0x9, 0x0, 0xffffffff00000001]}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001980)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x91f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x880) r4 = open_tree(0xffffffffffffffff, &(0x7f0000001a80)='./file0\x00', 0x8000) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000001ac0)) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001c00)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x5c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, [], 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x5c}}, 0x8000) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x6, 0x8, 0x15, "514f98f7a6d8dd75ed09ab26406e3a7ee7138d0cbdd449c65c3e23f8233f4604c5b7b90bec95bce9d172d5ade785d752fcde72635add944334a5519de9c705ef", "c9b395a35f0b66c3211c8d066f6e9b2759a7ba747e69597f8bc762aa3e9bb6d7fd28ba89fed7751ecc736fd1caac47759dcf7bd317b2ec16c3cc9a1d5d8b8145", "f71e400c25e175b04a42bf9f4156070f46ee38ba56d0ee1efd823b813c6656fa", [0xf27]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e80)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x64, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0xe}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c045}, 0x4) 04:04:40 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:40 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:40 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2207.504642][T20231] print_req_error: 16 callbacks suppressed [ 2207.504655][T20231] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2207.531769][T20213] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2207.559212][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.570674][ T87] buffer_io_error: 2 callbacks suppressed [ 2207.570681][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2207.589414][T20215] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2207.614291][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.625756][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2207.639443][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.650860][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2207.665697][T20213] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2207.679102][T20231] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2207.693630][T20215] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2207.703738][ T92] usb 1-1: reset high-speed USB device number 127 using dummy_hcd [ 2207.713684][T20363] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2207.719959][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.737181][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2207.752493][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2207.762805][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2207.776332][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2207.788243][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2207.798224][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2207.950527][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2207.980093][T20363] usb 4-1: device descriptor read/64, error 18 [ 2208.088720][T20226] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2208.365227][T20363] usb 4-1: device descriptor read/64, error 18 [ 2208.632436][T20363] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2208.899680][T20363] usb 4-1: device descriptor read/64, error 18 [ 2209.285515][T20363] usb 4-1: device descriptor read/64, error 18 [ 2209.404616][T20363] usb usb4-port1: attempt power cycle [ 2210.108723][T20363] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2210.277467][T20363] usb 4-1: device descriptor read/8, error -61 04:04:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x401f00) 04:04:43 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5421, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000080)={0x2, 0x100000001, 0x5df, 0xe24c, 0xfffffffa, 0x3}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000040)=0x10020, 0x4) 04:04:43 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x4c000, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000280)={0xd26, 0x2, 0x80e, 0x81, 0x1, "f092f9ab0950f1f6"}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)={0x0}) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r7, 0x1, r8, 0x7fff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000000)=0x24404e) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="80fd02", 0xfffffffffffffd7c}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r6, 0x0, 0x10005, 0x0) 04:04:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80086601, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:43 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80087601, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:43 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5422, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80605414, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:43 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:43 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5450, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:43 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80e85411, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2210.489044][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2210.505964][T20363] usb 4-1: device descriptor read/8, error -71 04:04:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x402000) 04:04:43 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5451, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2210.684862][ T92] usb 1-1: reset high-speed USB device number 127 using dummy_hcd [ 2210.704658][ T6420] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2210.933211][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2210.963018][ T6420] usb 6-1: Using ep0 maxpacket: 16 [ 2211.072351][T20281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2211.112179][ T6420] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2211.125012][ T6420] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2211.134249][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.144518][ T6420] usb 6-1: config 0 descriptor?? [ 2211.203452][ T6420] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2211.401520][ T6420] usb 6-1: USB disconnect, device number 101 [ 2211.957984][ T6420] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2212.196936][ T6420] usb 6-1: Using ep0 maxpacket: 32 [ 2212.316474][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.327403][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2212.337261][ T6420] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2212.346407][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.356607][ T6420] usb 6-1: config 0 descriptor?? [ 2212.397999][ T6420] hub 6-1:0.0: USB hub found [ 2212.605622][ T6420] hub 6-1:0.0: 1 port detected [ 2213.243647][ T6420] hub 6-1:0.0: activate --> -90 [ 2213.543191][T20363] usb 1-1: USB disconnect, device number 127 [ 2213.865907][ T6410] usb 6-1: USB disconnect, device number 102 [ 2213.872673][ T6420] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2213.880663][ T6420] usb 6-1-port1: attempt power cycle [ 2214.721660][ T6410] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2214.961537][ T6410] usb 6-1: Using ep0 maxpacket: 16 [ 2215.081507][ T6410] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2215.094313][ T6410] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2215.103522][ T6410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.113750][ T6410] usb 6-1: config 0 descriptor?? [ 2215.152971][ T6410] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 04:04:48 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000004300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000004440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000002000)={0x28, 0x0, r4, {{0x6, 0x2, 0x2, r3}}}, 0x28) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0xfffffffffffffff5, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, r2, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x185842, 0x0) read$char_raw(r5, 0x0, 0x5f4412) 04:04:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0045878, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:48 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x403f00) 04:04:48 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f0100000000000000000006241a000000090581034000000000090401"], 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10000, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="240000001e005f0400fffffffff8070000000003000000000000000008000900e5b60000", 0x24) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) 04:04:48 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 2215.269604][ T6410] usb 6-1: USB disconnect, device number 107 04:04:48 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5460, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0045878, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:48 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a0, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2215.363979][T20381] print_req_error: 38 callbacks suppressed [ 2215.363990][T20381] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2215.392162][T20384] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:04:48 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a1, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0189436, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2215.410010][T20385] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2215.429212][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2215.440276][ T87] buffer_io_error: 14 callbacks suppressed [ 2215.440283][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2215.455816][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2215.467269][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2215.481390][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2215.492690][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2215.511419][T20381] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2215.524298][T20385] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2215.537291][T20384] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2215.549608][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2215.561073][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2215.570834][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2215.580523][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2215.593693][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2215.606131][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2215.611586][T20363] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2215.616714][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2215.621969][ T92] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2215.643398][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2215.891678][T20363] usb 4-1: Using ep0 maxpacket: 8 [ 2215.896818][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2216.011767][T20363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.021975][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2216.032977][T20363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2216.044888][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2216.055317][ T92] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2216.066096][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 04:04:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', r0, &(0x7f0000000300)='./file1\x00') mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x865410, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x5a) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x1a}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x39, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) 04:04:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc020660b, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:48 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x404000) [ 2216.161925][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2216.171058][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2216.187639][ T92] usb 1-1: SerialNumber: syz [ 2216.222003][T20373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2216.228921][T20363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2216.247872][T20363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.258952][T20363] usb 4-1: Product: syz [ 2216.264240][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2216.272109][T20363] usb 4-1: Manufacturer: syz [ 2216.277352][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2216.283998][T20363] usb 4-1: SerialNumber: syz [ 2216.332552][T20363] usb 4-1: bad CDC descriptors [ 2216.534464][T20363] usb 4-1: USB disconnect, device number 127 [ 2217.303321][T20363] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2217.543835][T20363] usb 4-1: Using ep0 maxpacket: 8 [ 2217.664124][T20363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.674248][T20363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2217.685827][T20363] usb 4-1: config 1 interface 1 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2217.699319][T20363] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2217.864589][T20363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2217.873794][T20363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.882452][T20363] usb 4-1: Product: syz [ 2217.886951][T20363] usb 4-1: Manufacturer: syz [ 2217.891571][T20363] usb 4-1: SerialNumber: syz [ 2217.935233][T20363] usb 4-1: bad CDC descriptors 04:04:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x84, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x84}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="00bea203"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2218.136464][T20363] usb 4-1: USB disconnect, device number 2 04:04:51 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x54a3, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:51 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:51 executing program 5: prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@sco={0x1f, @none}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000001a40)=""/232, 0xe8}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x4, &(0x7f0000000580)=""/102, 0x66}, 0x1}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x200) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bdabef3e6e40ae5017ff11", 0x83}, {0x0}, {&(0x7f0000000140)}, {0x0}, {&(0x7f0000000600)="b015321d3a3a32c161408d79c0b7d2a631e63536047e2e9c0630446b121a57260aa45136fb23412de0a62d14dd08e03a91369c36baca98c97d173de77bec146a799be7f08b82f76e21b599702e54ff99712d98ff8d4b8f18", 0x58}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000380)="2c19f75cb511888bbed065289a92badd80f6fa56c89b7cdafd8f8aaa9c77ee9ef6339a84a7450e106d394a54fa880c95627f31495b460b1536e8b1a61d24fa2e42828f415279b06988", 0x49}, {&(0x7f0000002b40)="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", 0x1000}], 0x9, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32=r4], 0x20}, 0x6008005) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x101080, 0x1a8) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 04:04:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x406b04) 04:04:51 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40045402, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:51 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x2, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40049409, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40086602, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40087602, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2218.546231][T20363] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2218.626430][ T92] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 2218.806921][T20363] usb 4-1: Using ep0 maxpacket: 16 [ 2218.867116][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2218.927313][T20363] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2218.938138][T20363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2218.949605][ T92] usb 1-1: device firmware changed [ 2218.954890][ T92] usb 1-1: USB disconnect, device number 2 [ 2218.961753][T20363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2218.972920][T20363] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2218.986153][T20363] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2218.995660][T20363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.004466][T20363] usb 4-1: config 0 descriptor?? [ 2219.318423][ T92] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2219.489473][T20363] hid (null): report_id 0 is invalid [ 2219.499960][T20363] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.00A7/input/input207 [ 2219.512901][T20363] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.00A7/input/input208 [ 2219.527905][T20363] kye 0003:0458:5013.00A7: input,hiddev96,hidraw0: USB HID vc.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 2219.569272][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2219.689728][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2219.701983][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2219.712505][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2219.722612][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2219.732769][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2219.746392][T20363] usb 4-1: USB disconnect, device number 3 [ 2219.820180][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2219.829222][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2219.837701][ T92] usb 1-1: SerialNumber: syz [ 2219.860384][T20475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2219.880810][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2219.886814][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2220.087839][T20475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2220.333063][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2220.482575][T20363] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2220.653295][ T92] usb 1-1: USB disconnect, device number 3 [ 2220.659800][ T92] usblp0: removed [ 2220.753602][T20363] usb 4-1: device descriptor read/64, error 18 04:04:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000100)=@vsock, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000500)=""/237, 0xed}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/134, 0x86}], 0x1, &(0x7f00000007c0)=""/189, 0xbd}}], 0x2, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000400)=""/158) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x1, 0x0) sendmsg(r4, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r5, 0x2008002) sendfile(r3, r5, 0x0, 0x200fff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 04:04:53 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:53 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:53 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4020940d, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x406d04) 04:04:53 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x763) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)='overlay\x00', &(0x7f0000000080)='./file1\x00', r3) 04:04:53 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345402, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:53 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0xa, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:54 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345403, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2221.211990][T20574] print_req_error: 44 callbacks suppressed [ 2221.212002][T20574] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2221.234782][T20562] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 04:04:54 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x35, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2221.256733][T20579] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2221.280246][T20580] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2221.292266][T20562] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 04:04:54 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x64, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:54 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345404, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2221.306424][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2221.317474][ T87] buffer_io_error: 17 callbacks suppressed [ 2221.317482][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2221.339787][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2221.351644][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2221.365696][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2221.377178][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2221.396052][T20574] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2221.409527][T20580] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2221.422513][T20579] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2221.439136][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2221.446426][ T92] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2221.450518][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2221.467546][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2221.477265][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2221.490241][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2221.501401][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2221.512545][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2221.525512][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2221.707607][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2221.831271][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2221.865831][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 04:04:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) [ 2221.888230][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2221.902976][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2221.914463][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2221.998885][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2222.007936][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2222.016461][ T92] usb 1-1: SerialNumber: syz [ 2222.039044][T20569] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2222.059397][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2222.065402][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2222.266748][T20569] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2222.512095][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2222.832857][ T92] usb 1-1: USB disconnect, device number 4 [ 2222.839247][ T92] usblp0: removed 04:04:56 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x300, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:56 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345405, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x40f0ff) 04:04:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20020400) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0xfffffffffffffc8f) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000)) 04:04:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x9d8) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000100)={{r0}, "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"}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='GPL\x00', &(0x7f00000000c0)='GPL\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x34}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffa8, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 04:04:56 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345406, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:56 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x5, 0x4, 0x3, 0x0, 0x96f3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa0, 0x2}, 0x0, 0x0, 0x2000000, 0x4, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000100)=[0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0xffff, 0xffffffffffffffff, &(0x7f0000000480)="1156fb36251fe8b61331dcc073c038c006922b4b57d6d8588ad2c5c3b1a0810a68a795d3567c6c5b39c90dc44a4cdb4fc4c81d8adf599216e4ec502da03ba4e9ce22152db1063a1b18ce33a0c44db4143e0bef5944be83b25dddfe10c91ddaba60063f9be8c7f573091fe911265efefb5f353517db1875878663af661dacb7c2f84f4f9ed25021d47947ae62b569e716158a571bad0d8d062afcc4540617b1b4c764cdfa52a9b12de5047fbed8d5", 0xae, 0xa, 0x0, 0x3}]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback, 0x10000}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 04:04:56 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345407, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:56 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000f00)=[{&(0x7f0000000280), 0x1}, {&(0x7f0000000300)}, {&(0x7f0000000340)=0x2, 0x2}, {&(0x7f0000000380)=0x1, 0x2}, {&(0x7f0000000400)}, {&(0x7f0000000440)=0x1, 0x1}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=0x2}, {&(0x7f0000000500), 0x2}, {&(0x7f0000000540)=0x1, 0x2}, {&(0x7f0000000580)=0x1, 0x2}, {&(0x7f00000005c0)=0x1, 0x1}, {&(0x7f0000000600)=0x2}, {&(0x7f0000000640)=0x2, 0x2}, {&(0x7f0000000680)=0x1}, {&(0x7f00000006c0), 0x2}, {&(0x7f0000000700)=0x2, 0x1}, {&(0x7f0000000740)=0x2}, {&(0x7f0000000780), 0x1}, {&(0x7f00000007c0)=0x2}, {&(0x7f0000000800), 0x2}, {&(0x7f0000000840)=0x1}, {&(0x7f0000000880)=0x1}, {&(0x7f00000008c0), 0x1}, {&(0x7f0000000900)=0x1, 0x2}, {&(0x7f0000000940), 0x1}, {&(0x7f0000000980)=0x1, 0x1}, {&(0x7f00000009c0)=0x1}, {&(0x7f0000000a00)=0x2, 0x2}, {&(0x7f0000000a40)=0x2, 0x1}, {&(0x7f0000000a80)=0x2, 0x1}, {&(0x7f0000000ac0)=0x2}, {&(0x7f0000000b00), 0x1}, {&(0x7f0000000b40)=0x1, 0x1}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=0x1}, {&(0x7f0000000c40)=0x1, 0x1}, {&(0x7f0000000c80)=0x2}, {&(0x7f0000000cc0)=0x2, 0x1}, {&(0x7f0000000d00), 0x2}, {&(0x7f0000000d40)=0x2, 0x1}, {&(0x7f0000000d80), 0x2}, {&(0x7f0000000dc0), 0x1}, {&(0x7f0000000e00), 0x2}, {&(0x7f0000000e40)=0x1}, {&(0x7f0000000e80)=0x1, 0x1}, {&(0x7f0000000ec0)}], 0xd, 0x30, &(0x7f0000001200)={0x0, 0x989680}, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./bus/file1\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2, 0x14, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 04:04:56 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x0, 0x0, 0xffffffff}}) [ 2223.420256][T20683] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2223.436592][T20683] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2223.606790][ T92] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2223.867919][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2224.008695][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2224.019720][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2224.030516][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2224.040582][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2224.050660][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2224.139382][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2224.148512][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2224.157088][ T92] usb 1-1: SerialNumber: syz [ 2224.189620][T20649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2224.210068][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2224.216049][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2224.417490][T20649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2224.663234][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2224.983964][ T92] usb 1-1: USB disconnect, device number 5 [ 2224.990278][ T92] usblp0: removed 04:04:58 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:04:58 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345408, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:58 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x3, 0x0, 0x0, 0xffffffff}}) 04:04:58 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file1\x00'}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 04:04:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x40f603) 04:04:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0)="9ef0ea745725354c523c454b4c90158bfda3b790aec39c47f3868d7e1c7acfdd7680775b07c28e93ca414e1f85041ab6fec55d09345a2673eee58ecc75c767413b95e42de6a0f484474f53cb527290f3ba6dd3ead2e6a912c9cea36730a84cf262bbc9b7f3ba5446e94a5c8d8371ece15b749d4adfb6cce92db28834a462c6a6bf7db832e38fbf317206a512a7028a7a4815a6", 0x93, r1}, 0x68) fcntl$dupfd(r0, 0x0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x600000, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1f) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ext3\x00', 0x25080, 0x0) 04:04:58 executing program 5: r0 = socket(0x15, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x202001, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x6, 0x100000000}) r2 = syz_open_dev$mouse(&(0x7f0000001800)='/dev/input/mouse#\x00', 0x2, 0x40000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\xc4+\'[*\\.^\x00', 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000018c0)={'syztnl1\x00', &(0x7f0000001840)={'sit0\x00', 0x0, 0x29, 0x9, 0x3, 0x3a9, 0x8, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1, 0x800, 0x3ff}}) 04:04:58 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345409, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:58 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4, 0x0, 0x0, 0xffffffff}}) 04:04:58 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540a, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:58 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540b, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:04:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)=@secondary='builtin_and_secondary_trusted\x00') write(r2, &(0x7f0000000340), 0x41395527) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x154, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) modify_ldt$read(0x0, &(0x7f0000000200)=""/120, 0x78) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x4}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) [ 2225.768302][ T92] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2226.009665][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2226.130401][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2226.141465][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2226.152423][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2226.162608][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2226.251085][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2226.260141][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2226.268814][ T92] usb 1-1: SerialNumber: syz [ 2226.291354][T20719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2226.298136][T20719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2226.311721][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2226.317727][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2226.519228][T20719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2226.526403][T20719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2226.966346][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2227.005900][ T92] usb 1-1: USB disconnect, device number 6 [ 2227.012220][ T92] usblp0: removed 04:05:00 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:00 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x5, 0x0, 0x0, 0xffffffff}}) 04:05:00 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540c, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x7f, 0x1000, 0x1f, 0xc8, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a5d0300bfa300000000000014020000de1ad5017a03f0fffcffffff79a4f0ff00000000b7060000ffffff212e640500000000007502faff0700000a0404000001007d60b7030000001000006a0a00fe000000008500000026000000b70000000000004095000000000000001da5ad3548ebb63d18db6a1c7272faa9b1ce9f821c34767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c1dc908350000005ec1956bd8660bf36628dff1a15750ab7e780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8eb040c50287c37a7f4182dc2333b08c6e497687e10a4daea5dac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91814cd5817e0b8f6fed786b781ab1faa35d391516e43c42a5e23ea6253d5df768d0cb30a5bb8c13d5b47975b4b13b9f35e4f41a62df9b4c03e53466dfc6b76c12aadd308fc0b0212c8d944f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75bb32935f542127a8a8438feecbb1c757f7169f006f3f5c9512e3254de4b3625962905ef911785c8cc0c4a11cb136d8a6084d676d8ef8aa6ecc2d32e3f4ee367e0a769c0a606636c9f4a4413c0f098f4fcc9661cc7f97e2ef5987b6e09a6a7cab79bffda311f65e7d9ebe3be70c4364333af9a9d91c3e41a8e2b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100000000743026004626fc253cd5676c848ee37c6fa986be97057a7a6f8abf225386000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 04:05:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x40ff07) 04:05:00 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010900020000082505a1a440000102030109025c0002010000000904000041020d0000052406000105240000000d240f0100000b00000000000006241a0000000905810340000000000904070000000d0000090401012a09"], 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') 04:05:00 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540d, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:00 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4034540e, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:00 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6, 0x0, 0x0, 0xffffffff}}) 04:05:00 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345411, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:00 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345412, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:00 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7, 0x0, 0x0, 0xffffffff}}) [ 2227.577638][T20802] print_req_error: 38 callbacks suppressed [ 2227.577645][T20802] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2227.597976][T20801] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2227.627945][T20831] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2227.644103][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2227.655352][ T87] buffer_io_error: 14 callbacks suppressed [ 2227.655359][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2227.674572][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2227.685889][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2227.699465][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2227.710774][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2227.731218][T20801] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2227.744160][T20802] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2227.750088][ T92] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2227.758048][T20831] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2227.775063][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2227.786568][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2227.796158][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2227.800384][T31846] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2227.805779][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2227.824503][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2227.833738][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2227.846095][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2227.858950][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2228.021771][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 2228.051921][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2228.142512][ T92] usb 4-1: config 1 has an invalid interface number: 7 but max is 1 [ 2228.150519][ T92] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2228.161281][ T92] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2228.170810][ T92] usb 4-1: config 1 has no interface number 2 [ 2228.177374][T31846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2228.188414][ T92] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 2228.199781][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2228.210064][ T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2228.221290][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2228.231451][ T92] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2228.244776][T31846] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2228.258079][ T92] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 42, using maximum allowed: 30 [ 2228.269174][ T92] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 42 [ 2228.282626][ T92] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2228.343787][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2228.352858][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2228.361442][T31846] usb 1-1: SerialNumber: syz [ 2228.384207][T20785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2228.391028][T20785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2228.404520][T31846] hub 1-1:1.0: bad descriptor, ignoring hub [ 2228.410542][T31846] hub: probe of 1-1:1.0 failed with error -5 [ 2228.444410][ T92] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2228.453528][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.462049][ T92] usb 4-1: Product: syz [ 2228.466507][ T92] usb 4-1: Manufacturer: syz [ 2228.471131][ T92] usb 4-1: SerialNumber: syz [ 2228.612167][T20785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2228.619484][T20785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2228.736267][ T92] usb 4-1: selecting invalid altsetting 0 [ 2228.742053][ T92] usb 4-1: selecting invalid altsetting 0 [ 2228.749229][ T92] cdc_ncm 4-1:1.0: bind() failure [ 2228.755299][ T92] usb 4-1: selecting invalid altsetting 0 [ 2228.763416][ T92] hub: probe of 4-1:1.1 failed with error -22 [ 2228.770902][ T92] usb 4-1: USB disconnect, device number 5 [ 2229.059310][T31846] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2229.099146][T31846] usb 1-1: USB disconnect, device number 7 [ 2229.105473][T31846] usblp0: removed 04:05:02 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:02 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345429, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:02 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x8, 0x0, 0x0, 0xffffffff}}) 04:05:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x8800000) 04:05:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x13) [ 2229.491058][ T92] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2229.732696][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 2229.843337][T31846] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2229.853808][ T92] usb 4-1: config 1 has an invalid interface number: 7 but max is 1 [ 2229.861898][ T92] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.872654][ T92] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2229.882040][ T92] usb 4-1: config 1 has no interface number 2 [ 2229.888572][ T92] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 2229.899667][ T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2229.910868][ T92] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2229.924152][ T92] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 42, using maximum allowed: 30 [ 2229.935261][ T92] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 42 [ 2229.948609][ T92] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2230.084942][T31846] usb 1-1: Using ep0 maxpacket: 8 [ 2230.115157][ T92] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2230.124243][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.132932][ T92] usb 4-1: Product: syz [ 2230.137462][ T92] usb 4-1: Manufacturer: syz [ 2230.142131][ T92] usb 4-1: SerialNumber: syz [ 2230.205804][T31846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2230.216873][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2230.227388][T31846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2230.237549][T31846] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2230.346659][T31846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2230.355701][T31846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2230.364205][T31846] usb 1-1: SerialNumber: syz 04:05:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000140)="2ccd7b8af8f31a0e7bc3cb40990d88ff5c7deb5456bf", 0x16}, {&(0x7f0000000580)="2a92997dde9f81b959d19ef711ce3882f2b6c6b2eee8f19ca2a0fcfecba4edd78a127e05c323349d294b1c64b5d2883bf4c579d920a0c30d0b4eba440a3300192ec13e90b3e265a9fcdea67d40325ef14638a30d1a57584a58c984d175c8415194bb8985924609e0a1d599578289ba4a1861e3796934fbf216f54d5d3202f0912985e0dcca08e3f85fa4bd3f1950881ebee0f628aac1fb68220f90cf876683a57bb8da3cc026ff3afb46c77e64f5b561a0713ad4fd98a0b24278eb0ff8319651e2e130591b5753324f5bd0db70bd66b0797b5104d781026e789295a085000000", 0xe0}, {&(0x7f0000000340)="6764bac1540271ef9f1f077658d2dc60323982ded9db68b9355b87826c35266b560adb2dbeab940f11664fbee3561cb01cf353e89c", 0x35}, {0x0}, {&(0x7f0000000680)="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", 0x13d}, {0x0}, {0x0}], 0x7, &(0x7f0000000380)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0, @ANYRES16, @ANYBLOB="08a10841710c64a05ece051fd37b870a6ca28bd97f2959af0000", @ANYRES32], 0x20, 0x20004891}, 0x4) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 04:05:03 executing program 5: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x40, 0x15, 0xa, 0x1002, 0x0, 0x0, {0xa}, [@NFTA_OBJ_NAME={0x62, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x44001) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000480)={'wg1\x00', r7}) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r4, r1, 0x0, 0x8) 04:05:03 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x9, 0x0, 0x0, 0xffffffff}}) 04:05:03 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40485404, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x20400e00) [ 2230.386947][T20869] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2230.399847][T20869] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2230.409734][ T92] usb 4-1: selecting invalid altsetting 0 [ 2230.425918][ T92] usb 4-1: selecting invalid altsetting 0 04:05:03 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "21a7ecc9419d23a8", "046304fbc3d9312c7c21221d80a496c0", "e4287dfe", "2616ca6a4a389709"}, 0x28) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init() ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000380)="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") ioctl$FIONCLEX(r3, 0x5450) getpeername(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8)=0xa00, 0x8000fffffffe) r4 = gettid() setpriority(0x1, r4, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x18040, 0x0) [ 2230.447134][ T92] cdc_ncm 4-1:1.0: bind() failure [ 2230.453895][T31846] hub 1-1:1.0: bad descriptor, ignoring hub [ 2230.460869][T31846] hub: probe of 1-1:1.0 failed with error -5 [ 2230.488215][ T92] usb 4-1: selecting invalid altsetting 0 [ 2230.517905][ T92] hub: probe of 4-1:1.1 failed with error -22 [ 2230.536618][ T92] usb 4-1: USB disconnect, device number 6 [ 2230.661995][T20869] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2230.670938][T20869] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2231.123000][T31846] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2231.162510][T31846] usb 1-1: USB disconnect, device number 8 [ 2231.169046][T31846] usblp0: removed 04:05:04 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:04 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xa, 0x0, 0x0, 0xffffffff}}) 04:05:04 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80045400, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x7ffff000) 04:05:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xf8, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0x5, 0x4, "b8a2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x200, 0x3ff, 0x1f, "149e0f20e11e378b"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x2, 0x1f, 0x7, "1a23e3"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xee, 0x3, 0xa6, 0x5, "6adb95", "cf"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0xfb}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xfd, 0x3, 0x2, 0x2, "c141", "5821a5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x0, 0x9, {0x7, 0x25, 0x1, 0x2, 0x1, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2ee5, 0x401, 0x1, "7aad14900320848e"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7f, 0x1}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x81, 0x6, "3b6508cc1dc374"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0xc7, 0x81, "e4f061b3c8fb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x2, 0x7f, 0xfd, '~', "139f3d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x3f, 0x80, {0x7, 0x25, 0x1, 0x82, 0x5, 0x3f}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x8, 0x0, 0x7f, 0x8, 0x3f}, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="050f4500e6"], 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3801}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "2711129bfb106d738deffe6116259689a817bc4e60064b2d1fc522d8f68a1bc62e5c2431a1408727d5db91e54feae57af452375623b52f6cbfc104ec16ac3e0df6d2b3e0f178bc7dcdacec7191b0114a72b2982e"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4b, &(0x7f0000000440)=@string={0x4b, 0x3, "cef3f39a2de55774bb7c3436a07467ca5387f648fc2bedaeb68bb879da79b6de4ed2cf4d92fd84c45748fbda0b7512b429a0ac7ee9957322e9d61d9b279dc21b9b52974a10ea2d5803"}}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x3, {{0x14, 0x4, 0x1, 0x5, 0x50, 0x66, 0x0, 0x0, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0xc6, [@multicast2, @loopback]}, @cipso={0x86, 0x30, 0x2, [{0x1, 0x5, "ee830c"}, {0x7, 0x2}, {0x2, 0x5, "3e96d9"}, {0x1, 0x8, "17d4afd64eab"}, {0x5, 0x9, "3ab6aa34a9c251"}, {0x5, 0xd, "1ebbc36b6c2a178aa7b5de"}]}, @end]}}}}}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe0cd, 0xffffffffffffffff}}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 04:05:04 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000068cb1a40240430956cd40102030109022400020000000009040002004bb2e7000904"], 0x0) read(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) 04:05:04 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80086601, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:04 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xb, 0x0, 0x0, 0xffffffff}}) 04:05:04 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80087601, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:04 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xc, 0x0, 0x0, 0xffffffff}}) 04:05:04 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80605414, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:04 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80e85411, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2231.886977][ T6420] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2231.907051][T31846] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2231.914575][ T92] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2232.128548][ T6420] usb 6-1: Using ep0 maxpacket: 16 [ 2232.158790][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2232.259473][ T6420] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 2232.269792][ T6420] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2232.280353][T31846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.290495][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2232.301583][T31846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2232.311286][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2232.321586][T31846] usb 4-1: config 0 interface 0 has no altsetting 1 [ 2232.328234][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2232.338611][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2232.440758][ T6420] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2232.440809][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2232.449888][ T6420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.459828][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2232.467039][ T6420] usb 6-1: Product: Ñ„ [ 2232.475727][ T92] usb 1-1: SerialNumber: syz [ 2232.479088][ T6420] usb 6-1: Manufacturer: ᄧ鬒჻ç­î¾æ‡¾â”–視ឨ亼٠ⵋ씟諶옛尮ㄤ䂡➇î©ç«¥å‹´å˜·ë”£æ°¯ì†¿î°„갖ാ틶磱綼ê³ç‡¬ë‚‘䨑뉲⺘ [ 2232.501229][T20947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2232.506636][ T6420] usb 6-1: SerialNumber: ï“¿ [ 2232.508095][T20947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2232.521591][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2232.527622][T31846] usb 4-1: New USB device found, idVendor=0424, idProduct=9530, bcdDevice=d4.6c [ 2232.537741][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2232.544275][T31846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.552941][T31846] usb 4-1: Product: syz [ 2232.557167][T31846] usb 4-1: Manufacturer: syz [ 2232.562711][T31846] usb 4-1: SerialNumber: syz [ 2232.568222][T31846] usb 4-1: config 0 descriptor?? [ 2232.622715][T31846] smsc95xx v1.0.6 [ 2232.626492][T31846] smsc95xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2232.637442][T31846] smsc95xx: probe of 4-1:0.0 failed with error -22 [ 2232.740339][T20947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2232.747656][T20947] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2232.824490][T31846] usb 4-1: USB disconnect, device number 7 [ 2232.853590][ T6420] usb 6-1: 0:2 : does not exist [ 2232.861709][ T6420] usb 6-1: USB disconnect, device number 108 [ 2233.196842][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2233.236763][ T92] usb 1-1: USB disconnect, device number 9 [ 2233.243144][ T92] usblp0: removed [ 2233.598647][T31846] usb 4-1: new high-speed USB device number 8 using dummy_hcd 04:05:06 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:06 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xd, 0x0, 0x0, 0xffffffff}}) 04:05:06 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0045878, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffff000) 04:05:06 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x5a0) sendfile(r3, r4, 0x0, 0x1c542) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) modify_ldt$read(0x0, &(0x7f0000000000)=""/13, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) [ 2233.738585][T21043] print_req_error: 56 callbacks suppressed [ 2233.738597][T21043] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2233.758338][T21044] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2233.774557][T21045] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2233.786343][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.797955][ T87] buffer_io_error: 23 callbacks suppressed [ 2233.797963][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2233.813550][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.824699][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2233.834960][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2233.846602][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2233.961210][ T6420] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2233.961301][T31846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2233.979632][ T92] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2233.987279][T31846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2233.996742][T31846] usb 4-1: config 0 interface 0 has no altsetting 1 [ 2234.162596][T31846] usb 4-1: New USB device found, idVendor=0424, idProduct=9530, bcdDevice=d4.6c [ 2234.171749][T31846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.180376][T31846] usb 4-1: Product: syz [ 2234.184868][T31846] usb 4-1: Manufacturer: syz [ 2234.189506][T31846] usb 4-1: SerialNumber: syz [ 2234.195280][T31846] usb 4-1: config 0 descriptor?? [ 2234.222981][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2234.234092][T31846] smsc95xx v1.0.6 [ 2234.237809][T31846] smsc95xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2234.248695][T31846] smsc95xx: probe of 4-1:0.0 failed with error -22 [ 2234.263268][ T6420] usb 6-1: device descriptor read/64, error 18 [ 2234.343858][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2234.354946][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2234.365561][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2234.375798][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 04:05:07 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000001380)="4be624e60b8588ae77547a8c0dbd", 0x0, 0x81}, 0x28) 04:05:07 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0045878, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:07 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xe, 0x0, 0x0, 0xffffffff}}) 04:05:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x7fffffffffffffff) 04:05:07 executing program 3: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 04:05:07 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2234.440160][T31846] usb 4-1: USB disconnect, device number 8 [ 2234.465507][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 04:05:07 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x10, 0x0, 0x0, 0xffffffff}}) [ 2234.500628][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2234.522507][T21070] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2234.538016][T21072] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2234.557023][ T92] usb 1-1: SerialNumber: syz [ 2234.561263][T21075] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2234.575852][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2234.585671][T21037] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2234.586908][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2234.593750][T21037] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2234.621564][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2234.626203][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2234.637580][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2234.641402][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2234.661400][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2234.674731][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2234.685089][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2234.694138][ T6420] usb 6-1: device descriptor read/64, error 18 [ 2234.840245][T21037] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2234.847005][T21037] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2234.968234][ T6420] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2235.240142][ T6420] usb 6-1: device descriptor read/64, error 18 [ 2235.281386][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2235.321338][ T92] usb 1-1: USB disconnect, device number 10 [ 2235.327780][ T92] usblp0: removed [ 2235.663124][ T6420] usb 6-1: device descriptor read/64, error 18 04:05:08 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:08 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0189436, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:08 executing program 3: unshare(0x44000600) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xa, 0x1d, 0x400, 0xc, 0x42, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000680)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002540)={0xffffffffffffffff, &(0x7f0000000400)="ef", &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r1, 0x0, &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180)='Y', &(0x7f0000000300)}, 0x20) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000240)='K', &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000180), &(0x7f0000000180)}, 0x20) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCNXCL(r3, 0x540d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f00000001c0), &(0x7f0000000440)}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7706, 0x0) 04:05:08 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x11, 0x0, 0x0, 0xffffffff}}) [ 2235.784062][ T6420] usb usb6-port1: attempt power cycle [ 2235.821310][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2236.055975][ T92] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2236.297648][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2236.426211][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2236.437211][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2236.448123][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2236.458347][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2236.504242][ T6420] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2236.553204][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2236.562342][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2236.570873][ T92] usb 1-1: SerialNumber: syz [ 2236.592229][T21101] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2236.599218][T21101] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2236.621775][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2236.627713][ T92] hub: probe of 1-1:1.0 failed with error -5 04:05:09 executing program 5: clock_adjtime(0x0, &(0x7f0000000280)={0x2f63, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 04:05:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x280) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r4 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x400082, 0x12) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20054004}, 0x800) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) write$cgroup_int(r1, &(0x7f0000000200)=0x3, 0x12) 04:05:09 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc020660b, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:09 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x12, 0x0, 0x0, 0xffffffff}}) 04:05:09 executing program 3: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000000c0)=0x7fffffff) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "64822d", 0x54, 0x6, 0x0, @local, @mcast2, {[@fragment, @srh={0x0, 0x6, 0x4, 0x3, 0x7f, 0x0, 0x0, [@mcast2, @local, @remote]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl(r3, 0x9, &(0x7f0000000000)="dbf402c212c7b5634a6ae83fea9d546994b511cf8d6a9db2e0abcbd704cac93a84871c145a6b4769c43c080f15a6cea8e03f7eb195ec0c3f690148d274b6e1f7dfb2a8b789e244081781651646d2dca269eb71cf23b0c8e12cc82df4281794ea1e366d27a2e5203aaf3541c9cb11398e7cba72a62d2b744db523e2e76c642635f6") 04:05:09 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2236.670348][ T6420] usb 6-1: device descriptor read/8, error -61 04:05:09 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x48, 0x0, 0x0, 0xffffffff}}) 04:05:09 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2236.833514][T21101] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2236.841439][T21101] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2236.880044][ T6420] usb 6-1: device descriptor read/8, error -71 [ 2237.284452][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2237.324013][ T92] usb 1-1: USB disconnect, device number 11 [ 2237.330343][ T92] usblp0: removed 04:05:10 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:10 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4c, 0x0, 0x0, 0xffffffff}}) 04:05:10 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x2, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:10 executing program 5: unshare(0x44000600) r0 = accept(0xffffffffffffffff, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f00000000c0)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="060000861100", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000ffffffff"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x5, 0x8, @empty, @remote, 0x20, 0x7800, 0x1ff, 0x2}}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1220}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @empty}}}], 0x20}}], 0x1, 0x0) 04:05:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x1000001d}) r4 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x4, 0x1f, 0x57, 0x9}, {0xea, 0x5, 0x6, 0x3}, {0x200, 0x0, 0x3, 0x81}, {0x0, 0x3, 0x2, 0x1f}, {0x8001, 0x2, 0x80, 0x39d5}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="bffb67f3bd103c", 0x7}, {&(0x7f0000000340)="8e53e343286558f378b8fea322f0949d7231ba86dd", 0xdd5}], 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000200)) r5 = openat(r4, &(0x7f0000000240)='\x00', 0x2200, 0x25) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc00", @ANYRES16=r7, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x40010) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xc8, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000090) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) 04:05:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x8, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x14, 0x14, 0x126, &(0x7f0000000380)}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') 04:05:10 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x68, 0x0, 0x0, 0xffffffff}}) 04:05:10 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:10 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6c, 0x0, 0x0, 0xffffffff}}) 04:05:10 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x35, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:10 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000001500)=[{&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000340)=""/156, 0x9c}], 0x7, &(0x7f0000001580)=""/169, 0xa9}, 0x2000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8946, &(0x7f0000000400)={"ca18a241c9786d3a6d0f14a22fd3281e"}) 04:05:10 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x300, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2238.079786][ T92] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2238.331825][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2238.462916][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2238.474007][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2238.484512][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2238.494665][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2238.594047][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2238.603101][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2238.611719][ T92] usb 1-1: SerialNumber: syz [ 2238.634295][T21177] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2238.641117][T21177] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2238.664979][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2238.670895][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2238.879926][T21177] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2238.887152][T21177] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2239.129214][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2239.421747][ T92] usb 1-1: USB disconnect, device number 12 [ 2239.441245][ T92] usblp0: removed 04:05:12 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:12 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x74, 0x0, 0x0, 0xffffffff}}) 04:05:12 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:05:12 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0x45b, 0x3) fchdir(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x19c, 0x0, 0x0) 04:05:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000180)) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000001c0)) r4 = signalfd4(r1, &(0x7f0000000000)={[0x7f]}, 0x8, 0x80000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r4, &(0x7f0000000380)="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", &(0x7f0000000040)=""/81, 0x4}, 0x20) 04:05:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x8, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x14, 0x14, 0x126, &(0x7f0000000380)}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') 04:05:12 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0x0, 0x0, 0xffffffff}}) 04:05:12 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7a, 0x0, 0x0, 0xffffffff}}) 04:05:12 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x5, 0x8ae, [0x0, 0x200002c0, 0x200005d4, 0x20000802], 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0xa, 0x201, 'vlan1\x00', 'veth1_vlan\x00', 'macvlan1\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff], 0xb6, 0x1a6, 0x1d6, [@ip={{'ip\x00', 0x0, 0x20}, {{@multicast2, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 0x5, 0x1, 0x21, 0x8, 0x4e21, 0x4e23, 0x4e24, 0x4e21}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x9, 0x5, 0x5, 0x0, 0x0, "7ea19a212b516293e6730807197d695c4c4034e6b510d14acf1c59abb4f923c0cf3cbb1386b9859756604e8dd0f7e737e6499e76df494bc58dd3e19d8519600d"}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x39e, 0x0, 0x0, "f9348322e0a1875148ab0f4a2929734484883e08f1f48e0ca6344dc0cd21466483875a14d804d41a61bd4c3ab8a94f7239148b77a2fe3f46d7b52690d5114dbb"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x9, 0x20, 0x9000, 'ip6gre0\x00', 'geneve0\x00', 'veth1_vlan\x00', 'rose0\x00', @random="b9b68adc6b96", [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x32}, [], 0xae, 0xde, 0x10e, [@owner={{'owner\x00', 0x0, 0x18}, {{0xee01, 0xffffffffffffffff, r0, r1, 0x4}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x37, 0x86dd, 'ipvlan1\x00', 'lo\x00', 'syzkaller0\x00', 'vlan0\x00', @dev={[], 0xc}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @random="b8550a767c42", [0x0, 0x0, 0x0, 0x0, 0x0, 0x101], 0x10e, 0x1ce, 0x1fe, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'virt_wifi0\x00', {0xff}, '\x00', {0xff}, 0x13, 0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"ed4df219ab1080e2e383487240c89d31ad68030d50ce49a9e0dba4afb1ed"}}, @common=@nflog={'nflog\x00', 0x50, {{0x73, 0x2, 0xdc75, 0x0, 0x0, "f1e066a6fd5c7b0182a77c0e6076d3d323c2adb2284fdb6180beaa442696f1a86ed9a3726ecc517a39b1e7e2b28b1537704a968a88298942d0e0a4e9e7c9d728"}}}], @common=@redirect={'redirect\x00', 0x8, {{0x7fffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x9, 0x40, 0x10, 'sit0\x00', 'erspan0\x00', 'wg1\x00', 'vlan0\x00', @dev={[], 0xa}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x10e, 0x186, 0x1b6, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'ip6erspan0\x00', {0xff}, 'wg2\x00', {0xff}, 0xe}}}, @state={{'state\x00', 0x0, 0x8}, {{0x2}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x79ba, 0x0, 0x1, 0x0, "02f7c34fcf8b7188aa0b470b541fe0981ead381dbf3cbb4050edec887268a4bea02e9562a7fa7ba8f5671779d534403139964d8307f5978a73fefc12675dac2b"}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}, {0x1b, 0x0, 0x6002, 'netdevsim0\x00', 'veth0_to_bond\x00', 'veth1_to_bond\x00', 'batadv0\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xae, 0x136, 0x186, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x8}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffc}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x5, {0x9}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x8, {0x1ff}}}}}]}]}, 0x926) uname(&(0x7f0000000c00)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x31}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 04:05:12 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x3, 0x0, 0x0, 0xffffffff}}) 04:05:12 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x300, 0x0, 0x0, 0xffffffff}}) [ 2240.015236][T21269] print_req_error: 44 callbacks suppressed [ 2240.015248][T21269] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2240.036401][T21273] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:12 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4, 0x0, 0x0, 0xffffffff}}) [ 2240.084784][T21277] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2240.130117][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2240.141452][ T87] buffer_io_error: 17 callbacks suppressed [ 2240.141459][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2240.160022][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2240.171370][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2240.197550][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2240.208982][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2240.229496][T21269] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2240.242295][T21273] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2240.255164][T21288] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2240.267509][ T92] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2240.274006][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2240.286297][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2240.295572][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2240.305201][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2240.319728][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2240.328741][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2240.341302][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2240.353947][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2240.529587][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2240.650615][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2240.661751][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2240.672318][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2240.682891][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2240.771582][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2240.780740][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2240.789312][ T92] usb 1-1: SerialNumber: syz [ 2240.811922][T21260] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2240.818882][T21260] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2240.832360][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2240.838383][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2241.047394][T21260] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2241.054509][T21260] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2241.286834][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2241.579420][ T92] usb 1-1: USB disconnect, device number 13 [ 2241.598679][ T92] usblp0: removed 04:05:14 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:14 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x500, 0x0, 0x0, 0xffffffff}}) 04:05:14 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0x45b, 0x3) fchdir(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x19c, 0x0, 0x0) 04:05:14 executing program 5: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7a, 0x0, 0x0, 0xffffffff}}) 04:05:14 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x5, 0x0, 0x0, 0xffffffff}}) 04:05:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', 'memory.stat\x00'}) 04:05:14 executing program 5: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7a, 0x0, 0x0, 0xffffffff}}) 04:05:14 executing program 5: syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc0, 0x63, 0x3b, 0x20, 0x536, 0x1a0, 0x47e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x7e, 0x0, 0xd0}}]}}, 0x0) 04:05:14 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6, 0x0, 0x0, 0xffffffff}}) 04:05:14 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x600, 0x0, 0x0, 0xffffffff}}) 04:05:14 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7, 0x0, 0x0, 0xffffffff}}) 04:05:14 executing program 4: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xbb}, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000100)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x4800, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000080)) [ 2242.424935][ T92] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2242.465283][ T6420] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2242.666890][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2242.717307][ T6420] usb 6-1: Using ep0 maxpacket: 32 [ 2242.787967][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2242.799109][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2242.809726][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2242.819937][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2242.838333][ T6420] usb 6-1: config 126 has no interfaces? [ 2242.908925][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2242.918599][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2242.927401][ T92] usb 1-1: SerialNumber: syz [ 2242.949281][T21343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2242.956110][T21343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2242.969925][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2242.975846][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2243.019836][ T6420] usb 6-1: New USB device found, idVendor=0536, idProduct=01a0, bcdDevice=47.e0 [ 2243.028958][ T6420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.037106][ T6420] usb 6-1: Product: syz [ 2243.041413][ T6420] usb 6-1: Manufacturer: syz [ 2243.046046][ T6420] usb 6-1: SerialNumber: syz [ 2243.184871][T21343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2243.192184][T21343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2243.295033][ T6420] usb 6-1: USB disconnect, device number 113 [ 2243.424106][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2243.716823][ T92] usb 1-1: USB disconnect, device number 14 [ 2243.735971][ T92] usblp0: removed [ 2244.068283][ T6420] usb 6-1: new high-speed USB device number 114 using dummy_hcd 04:05:16 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:16 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x700, 0x0, 0x0, 0xffffffff}}) 04:05:16 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x8, 0x0, 0x0, 0xffffffff}}) 04:05:16 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) clock_gettime(0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x7e, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x200}, 0x8, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xef) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000280)=0x2, 0x0, 0x4) io_pgetevents(r1, 0xfffffffffffffffc, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f0000000240), 0x0) unshare(0x40000000) 04:05:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x6}, 0x4}}, 0x18) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000240)={0xff, {{0xa, 0x4e22, 0xe8000000, @empty, 0x6}}}, 0x88) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 04:05:16 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x900, 0x0, 0x0, 0xffffffff}}) 04:05:16 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x9, 0x0, 0x0, 0xffffffff}}) [ 2244.330440][ T6420] usb 6-1: Using ep0 maxpacket: 32 [ 2244.471568][ T6420] usb 6-1: config 126 has no interfaces? [ 2244.542170][ T92] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2244.663129][ T6420] usb 6-1: New USB device found, idVendor=0536, idProduct=01a0, bcdDevice=47.e0 [ 2244.672202][ T6420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.680368][ T6420] usb 6-1: Product: syz [ 2244.684763][ T6420] usb 6-1: Manufacturer: syz [ 2244.689367][ T6420] usb 6-1: SerialNumber: syz [ 2244.784044][ T92] usb 1-1: Using ep0 maxpacket: 8 04:05:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pause() r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x48eb00, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x5000}], 0x1, 0x4000, 0x0, 0x3) 04:05:17 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xa00, 0x0, 0x0, 0xffffffff}}) 04:05:17 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xa, 0x0, 0x0, 0xffffffff}}) 04:05:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000380)={0x0, "f893d3f5c7b167597c2b9765a35c693c"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001380)={r2, 0x9bd, 0x1ff, 0x1}) [ 2244.905096][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2244.916087][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2244.926809][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2244.937149][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 04:05:17 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc00", @ANYRES16=r2, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x40010) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2a1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff3c}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x94, 0x101}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x4000}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2244.943267][ T6419] usb 6-1: USB disconnect, device number 114 [ 2245.026221][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2245.041261][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2245.056382][ T92] usb 1-1: SerialNumber: syz [ 2245.076505][T21409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2245.083381][T21409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2245.097125][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2245.103039][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2245.312738][T21409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2245.320058][T21409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2245.551332][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2245.854193][ T92] usb 1-1: USB disconnect, device number 15 [ 2245.873332][ T92] usblp0: removed 04:05:18 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:18 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xb, 0x0, 0x0, 0xffffffff}}) 04:05:18 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xb00, 0x0, 0x0, 0xffffffff}}) 04:05:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08007b595f43aa850d6d4fc2100fea57dca9045e88a51aa2cc899f226492179a5d3fc5"], 0x54}}, 0x0) syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4) fallocate(r0, 0x40, 0x7fffffff, 0x2) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x280880) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x1, 0x9, 0x1f, 0x5, 0x9, 0x1}) 04:05:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsmount(r0, 0x1, 0x71) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) dup2(r0, r1) r3 = epoll_create1(0x0) r4 = syz_open_pts(r2, 0x100) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000004c0)=0xffffffff) r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) bind$tipc(0xffffffffffffffff, &(0x7f0000000500)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r8 = accept$packet(r7, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000180)=""/69, 0x45}], 0x3, 0x5, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) recvfrom$packet(r8, &(0x7f0000000100)=""/5, 0x5, 0x20, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) 04:05:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1}}) dup3(0xffffffffffffffff, r1, 0x80000) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="2d29384d3c8d4287688575ee6a8ddf67994018ca0deb6e69058c43aaeaedcf20f638f348bfe5c112918a4db8831a77e104ff64f4a78311219858d7d12f57f046b6f61194f5addb0d9729967d124f3f389512fe59036854aeb259e59fac7980b0faeb068eaf6a6bc2fd46b9d1585f41148232581daffcf15c17af488e06528eaab2fc88fcde47b1b5c62d7f4381ca51142556cd760355904b94fdc9565466", @ANYBLOB="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"/449], 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) ioctl$KDENABIO(r2, 0x4b36) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1a008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000001ff}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r4, &(0x7f00000003c0)="8a3444dd0681016da2cdc2f9675c09860334e7e7ce725551ea83c657c12f9da8011c9c1309cd3e1f22296bbab4b93c63f85cdff2bead452a6aebbffd25ba452a808ffeb3d5b6876666c111c6ada56f170a0988a3a7133d835e3650", 0x5b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 04:05:19 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xc, 0x0, 0x0, 0xffffffff}}) 04:05:19 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xc00, 0x0, 0x0, 0xffffffff}}) [ 2246.458365][T21513] print_req_error: 50 callbacks suppressed [ 2246.458377][T21513] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:19 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xd, 0x0, 0x0, 0xffffffff}}) 04:05:19 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xd00, 0x0, 0x0, 0xffffffff}}) [ 2246.499846][T21516] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2246.526828][T21515] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x6}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(0x0, r0, 0x7, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x440, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffeffffffffffff, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x0, 0x7fe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="92b3e29b48993ecd0656aab0f105201f19d300b0c65ccca5693f2603085be3ce59033b11da8fb5e1fb953078f45b454f10e3b7aa4a1cb1d16957c39cec7b55ae19ff69e863f6b1c036d6b06b25c7c443abec43e6f7ffac659db285512b577754e8467a4e010d5f8070a0658554176deca36bb7cdb267c839a3178d8e7b71", @ANYRES64, @ANYRESDEC], 0x187) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 2246.585882][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2246.597220][ T87] buffer_io_error: 20 callbacks suppressed [ 2246.597227][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2246.623496][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 04:05:19 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xe, 0x0, 0x0, 0xffffffff}}) [ 2246.634889][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2246.646331][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2246.657659][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2246.694020][ T92] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2246.696742][T21516] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2246.716815][T21513] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2246.734295][T21515] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2246.794190][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2246.807582][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2246.847947][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2246.864167][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2246.946438][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2246.961878][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2246.963669][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2246.981545][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2247.092951][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2247.104538][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2247.121333][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2247.133765][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2247.234002][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2247.243097][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2247.251806][ T92] usb 1-1: SerialNumber: syz [ 2247.274281][T21498] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2247.281106][T21498] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2247.294722][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2247.300637][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2247.509608][T21498] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2247.516908][T21498] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2247.749166][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2248.041108][ T92] usb 1-1: USB disconnect, device number 16 [ 2248.061040][ T92] usblp0: removed 04:05:21 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:21 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xe00, 0x0, 0x0, 0xffffffff}}) 04:05:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r4) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 04:05:21 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x10, 0x0, 0x0, 0xffffffff}}) 04:05:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100006c8c6740f60d21004bd1000000010902120001000000000904d93b6301d1e9be"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "ce27893d7b3cc7e8b55c2ab201105a6604dc71839f151e8d9fccf68e3332a2b1aabe6dcca0eb4f8a9ab559d10f3586dc2a73d79283d1abdbfc54aa05675d87b843db13040c4315548f3e4aa8ff2f85910d3c0dc32cdcc98cb7871f9272ba45c0a59e0d49db83a8430fcdeb789cb2b82d6c2a9710"}}}, 0x0) 04:05:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "1768771c", {0x1, 0x9e34, 0x80, 0x7, 0x1}}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)={0x160, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x14c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x160}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f0000001600)=""/188, 0xbc}], 0x2}, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0xe86, 0x0, 0x0, 0x0) 04:05:21 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x11, 0x0, 0x0, 0xffffffff}}) 04:05:21 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1100, 0x0, 0x0, 0xffffffff}}) 04:05:21 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x12, 0x0, 0x0, 0xffffffff}}) 04:05:21 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1200, 0x0, 0x0, 0xffffffff}}) 04:05:21 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4000, 0x0, 0x0, 0xffffffff}}) [ 2248.636734][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read 04:05:21 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x48, 0x0, 0x0, 0xffffffff}}) [ 2248.857078][ T6419] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2248.867548][T31849] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2248.875127][ T92] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2249.119179][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2249.240231][ T92] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 2249.248546][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2249.259597][ T92] usb 4-1: config 0 has no interface number 0 [ 2249.266798][ T92] usb 4-1: too many endpoints for config 0 interface 217 altsetting 59: 99, using maximum allowed: 30 [ 2249.278150][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2249.288482][ T92] usb 4-1: config 0 interface 217 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 2249.302042][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2249.312294][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2249.325636][ T92] usb 4-1: config 0 interface 217 has no altsetting 0 [ 2249.332978][ T92] usb 4-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 2249.342416][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.352196][ T92] usb 4-1: config 0 descriptor?? [ 2249.411589][ T6419] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2249.420643][ T6419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.421672][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2249.428752][ T6419] usb 6-1: Product: syz [ 2249.439205][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2249.441939][ T6419] usb 6-1: Manufacturer: syz [ 2249.450444][T31849] usb 1-1: SerialNumber: syz [ 2249.454513][ T6419] usb 6-1: SerialNumber: syz [ 2249.472088][T21589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2249.479134][T21589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2249.492505][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2249.498548][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2249.700491][T21589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2249.707692][T21589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2249.946840][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2250.036638][ T92] usb 4-1: string descriptor 0 read error: -71 [ 2250.137508][ T92] usb 4-1: Cannot read MAC address [ 2250.142827][ T92] MOSCHIP usb-ethernet driver: probe of 4-1:0.217 failed with error -71 [ 2250.153265][ T92] usb 4-1: USB disconnect, device number 9 [ 2250.239167][T31849] usb 1-1: USB disconnect, device number 17 [ 2250.259037][T31849] usblp0: removed 04:05:23 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:23 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4c, 0x0, 0x0, 0xffffffff}}) 04:05:23 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4800, 0x0, 0x0, 0xffffffff}}) 04:05:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = open_tree(0xffffffffffffffff, &(0x7f0000002840)='./file0\x00', 0x88801) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0x1}}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000180)={{0x1}}) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000002940)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000100)="d66caabc21f931df14294bbc9443654cf6143d80", 0x14}, {&(0x7f0000000180)="7984c94f39c9b4c10105a3dec1720a50d2cc1671b9f3f4cfac2d667397bb65c15bfcbcd0dc31e8166e9e7bd1aa11cede31a4f13816f7657d1ed995d4462e368088dfb338f70adc8cf5489c1dd6b4c0b53f8ae12489478a0a8f7a20f481df800ad00c966c07436fbfdfbddf1c213cfa29e7df", 0x72}, {&(0x7f0000000240)="843d5517aa45ecbe02951c0018c71a02bcb69d26503655b0d21b02301fb3e8fcf37ae93bc7a1a5b769eae77bcf2c6a1b4e7f0b8f249082cffe21fd037ee81af109b30984923629ac942eb12645355e288847f7985eef3ea1f059e99f8b9d57521ba84d3959616a30e2a1", 0x6a}, {&(0x7f00000002c0)="20836b6f24ff7a0dc153e36fa93c1f9c9e64a5d79ffe22e1c09b42553e20c58c58e39acde7590c9095ca", 0x2a}, {&(0x7f0000000380)="28f719abcdcb904da2617e028eb2ce28d36ef4f5123afde582d2c43679609dee16f7380869209e3a3227a4d1698012ed3f419e785b1bd8db064f37b88296f5eeffa1452f659a1923d13a74bbb58aec7b9518f1128e8f9bff447d653aa1db12a9ba144329eb904e843be9a45b04eb8bd1ffa113b8693dc5356a824dab9ba474e012a370bd2b2233b6cd15a251aec67bdb3e374bf4413c3445cffa8399a2a02eb683100878a676299a7310473fd2a5f60e50d8b508c7063f4ee826bb1e335227a5cfe4ecc99eff6bc1029aaa89d0f8c06a2cacb6024db8cf0eb3f1576dc2fc50fe09177474394e048f78b8ea7425", 0xed}, {&(0x7f0000000480)="fff4a35b8fe9d832c8258538c53ef59a2995e8d7d3f412e3d2ca336234321e4a02f41d6daace52988f99b4f93d404d5610d9fbafaa4c6a9ca598c7971306764423ecf12c7c854e994f09934f8d", 0x4d}, {&(0x7f0000000500)="cc546aea34f05e3e27fc647439a0436768846a94682e4fda25d7dd537d27953d4d622f63cc82836aac72e4d9d25c40d405b6d013051d7965f3d964750615b96a03a4924c", 0x44}, {&(0x7f0000000580)="4354441822f2c9dbf569f257a9b435ffbfab15b1c0286386301ac918707d88c63fd44a1a781a812139878fa6747fe9e5e97a31ef63600e9f1ff630e223724c449465936ba8dd36e843a6e8ac06cb5bb508e753d1ff3aa213c39b4c5f9fff4032b94a7a92fd242ce7377ad844df9087cd101f9c486c4323012f517edcbd4c999de1b65b5cafe4596da7c16fcb47005c3c0a7c30b97104258b07e98d9175c0c576a0d1e9", 0xa3}, {&(0x7f0000000640)="1fe2be9a3bfa7e1a19716a16b25a1b7b83afb263c08b56d253244dbb30c92e91e3c99a0959ad4e8501d8", 0x2a}, {&(0x7f0000000680)="922ecfe98d6b5e82303860f97bf13ca3d96c054c5069ab4257419ec968063c70a85d3a6f4a56cc3dbe3934a457ac8c97abcef51902f9aba11cee67a73caa938cfc9ab8e7b8da97af22bc43ce58d1f91fd0664b14df1b480cdba7ff18880bbd3a84bc532d2bdb4ecab89205ce6e21d21e8df34eece09fc00ae94b603882ae17b33f064c5217fae617a5d729ff11831e89a480c6b57e52fae640a1dc348502b3cd14349d53e36a488250ea55b921412066dc1b1239315108", 0xb7}], 0xa, &(0x7f0000002880)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r6, r7, r8, 0xffffffffffffffff, r9]}}], 0xa0, 0x20008840}, 0x40) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) [ 2250.795077][T31849] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2251.054847][ T92] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2251.165786][T31849] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 2251.173980][T31849] usb 4-1: config 0 has no interface number 0 [ 2251.180949][T31849] usb 4-1: too many endpoints for config 0 interface 217 altsetting 59: 99, using maximum allowed: 30 [ 2251.192314][T31849] usb 4-1: config 0 interface 217 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 2251.205922][T31849] usb 4-1: config 0 interface 217 has no altsetting 0 [ 2251.213707][T31849] usb 4-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 2251.223142][T31849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.232058][T31849] usb 4-1: config 0 descriptor?? [ 2251.296814][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2251.417864][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2251.428871][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2251.439553][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2251.449970][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2251.538838][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2251.547885][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2251.556443][ T92] usb 1-1: SerialNumber: syz 04:05:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000002, 0x0, 0x0, 0xe7}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000140)=[{0x1000, 0x6, 0x1f, 0x7fffffff}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20008000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff5", 0x2}, {&(0x7f00000001c0)="96431fb1cb11974159cafffffffffffffffe9f1f639e6a18bc7b6c1d0b42bae36740a7169721af852826d7f14b6cae8af86707ff78a1dda993aea5952f43e7e0146a3c035f0113d617244e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d0000b9ab1bfd319f472a940000000000000000", 0x89}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d", 0x7e}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 04:05:24 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4c00, 0x0, 0x0, 0xffffffff}}) 04:05:24 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x68, 0x0, 0x0, 0xffffffff}}) 04:05:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x51, 0xfd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe15566757156492f, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0xf7, 0x0, 0x4, 0x3, 0x6, 0x2, 0x115, 0x40, 0x3d3, 0x39b6, 0xf5, 0x38, 0x2, 0x100, 0xfffd, 0x6}, [{0x3, 0x5, 0xd38, 0x4, 0x80, 0x0, 0xfffffffffffff801, 0x100000000}, {0x5, 0x58, 0x2, 0x2, 0x100000001, 0x9, 0x5, 0xfffffffeffffffff}], "70ef8cd3636b07f2c69a563ec1fe0ab43d2e495988beb157689452e23833e14d1e00caf38899563ca51a641e44d62528ef28abaf90a9d16f87b549823f999e9d8e2b2fcb78a3cd10cb3f58795c7db3b4eccf67f85813ac59b2f698c2c38d5f597c02dae1df85bd005bbf", [[], [], [], []]}, 0x51a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 04:05:24 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3b) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x9e, &(0x7f00000001c0)=ANY=[], 0x0) [ 2251.579148][T21673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2251.586070][T21673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2251.599826][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2251.602155][ T6419] usb 6-1: USB disconnect, device number 115 [ 2251.605876][ T92] hub: probe of 1-1:1.0 failed with error -5 04:05:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x4, 0x3, 0x223}, 0x40) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="1805000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000071171d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) dup3(r1, r0, 0x0) 04:05:24 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6800, 0x0, 0x0, 0xffffffff}}) 04:05:24 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6c, 0x0, 0x0, 0xffffffff}}) [ 2251.639640][T31849] usb 4-1: string descriptor 0 read error: -71 [ 2251.742941][T31849] usb 4-1: Cannot read MAC address [ 2251.748149][T31849] MOSCHIP usb-ethernet driver: probe of 4-1:0.217 failed with error -71 [ 2251.758939][T31849] usb 4-1: USB disconnect, device number 10 [ 2251.791295][T21715] print_req_error: 38 callbacks suppressed [ 2251.791306][T21715] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2251.811249][T21707] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2251.828027][T21673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2251.829320][T21714] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2251.837552][T21673] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2251.850864][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2251.866119][ T87] buffer_io_error: 14 callbacks suppressed [ 2251.866125][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2251.882454][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2251.893827][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2251.904160][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2251.915469][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2251.930927][T21707] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2251.944948][T21715] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2251.959051][T21714] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2251.971531][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2251.982777][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2251.992050][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2252.001590][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2252.104572][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2252.407251][ T92] usb 1-1: USB disconnect, device number 18 [ 2252.426879][ T92] usblp0: removed 04:05:25 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:25 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x74, 0x0, 0x0, 0xffffffff}}) 04:05:25 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6c00, 0x0, 0x0, 0xffffffff}}) 04:05:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="a5928f13a1da03c24addbe14a535518ff5f3e5dfa4a806fbe9424aefee8871360c410767f3a8015c287cc03e7411d60439266a1daf417df6ee38e57ccffe5d7b4c25bdb579d826742df9fded3df9b0746f69f581980a4f5c0b529a31aa257d6ced5cd2f5a0ea3457e4452a2f7d98b1619b416cbd2283") r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) bind(r3, &(0x7f0000000280)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x80) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[r5, r6]}, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r7, &(0x7f0000000000)=0x2, 0x12) write$cgroup_int(r7, &(0x7f0000000380), 0x12) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$setflags(r8, 0x2, 0x1) 04:05:25 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, 0x10}, 0x78) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x63}], 0x1, 0x0) 04:05:25 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) faccessat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1}}) syncfs(r3) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) 04:05:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="85000000220000005d0000000000000095000001000000000a621cf434b9eaafdc0a00e9bfde51afe9c81a9cf05725caf1cae63487d70c028dcde5c0198e6796e2b7185a25a48f359456aa8a701c318c67edb6e9330b0de1f643b4812e8b614b0c04bb65d2e253c0dd66ebda150a7108b1c54654133938f829a26e50fd6ee40b1e6bc15e734a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffd, 0x0, 0x4}, 0x10}, 0x78) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x103, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 04:05:25 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000015c0)=""/102400, &(0x7f0000000100)=0x19000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000900002003041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) 04:05:25 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7400, 0x0, 0x0, 0xffffffff}}) 04:05:25 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7a, 0x0, 0x0, 0xffffffff}}) 04:05:25 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7a00, 0x0, 0x0, 0xffffffff}}) 04:05:25 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x300, 0x0, 0x0, 0xffffffff}}) [ 2253.057601][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2253.070142][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2253.083935][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2253.108531][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2253.262764][ T92] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2253.293029][ T6420] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2253.504696][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2253.545016][ T6420] usb 6-1: Using ep0 maxpacket: 16 [ 2253.625718][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2253.636720][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2253.647328][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2253.657549][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2253.746694][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2253.755828][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2253.764453][ T92] usb 1-1: SerialNumber: syz [ 2253.787030][T21768] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2253.793879][T21768] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2253.807535][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2253.813448][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2253.817800][T21794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2253.887840][ T6420] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2253.959579][ T6420] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2253.967479][ T6420] usb 6-1: can't read configurations, error -71 [ 2254.023632][T21768] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2254.030897][T21768] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2254.261879][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2254.538393][T21823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2254.553985][ T92] usb 1-1: USB disconnect, device number 19 [ 2254.573845][ T92] usblp0: removed 04:05:27 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000180)={0x1000, 0x20, [0x100000000, 0x1e2, 0x7, 0x28fa], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 04:05:27 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1000000, 0x0, 0x0, 0xffffffff}}) 04:05:27 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x500, 0x0, 0x0, 0xffffffff}}) 04:05:27 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) socketpair(0x15, 0x6, 0x8001, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) fcntl$setstatus(r0, 0x4, 0x2800) syz_open_procfs(0x0, &(0x7f0000272000)) 04:05:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x7, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 04:05:27 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x600, 0x0, 0x0, 0xffffffff}}) 04:05:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0x10010, 0xffffffffffffffff, 0x98729000) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000300)="362f491a7562250bafe18c91a14a922f5e7b5e38c9b426de5605d186fd8ce936e55fc8e53208924bb579246c0290468dbba0f24d8093ad81a410708b73573dc265f92a79360c0a5b47b04cf8edea64ee242299ad6af9ca7a01326aa171cee785928af5d44f6971833aaa14b4b153a7f538633d23dfe458c5053d6c5db1c9844971ad1e1fc9763a77c6949aa83151fb4a8ecac649393e086e16ecdc44c1a59b6a32ef632fba0af9495514650fb595556871107a6cd1d492d4c43cac99f9cd6742721873272876037028c7c86327f93403", 0xd0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) keyctl$clear(0x7, 0xfffffffffffffff9) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x440000, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000", @ANYRES16=r5, @ANYBLOB="000225bd7000fcdbdf25000000000c00030004000000000000000c000300020000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000500000000000c0003000000000000000000"], 0x48}}, 0x41) 04:05:27 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2000000, 0x0, 0x0, 0xffffffff}}) 04:05:27 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x700, 0x0, 0x0, 0xffffffff}}) 04:05:27 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x3000000, 0x0, 0x0, 0xffffffff}}) 04:05:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) [ 2255.174153][ T22] audit: type=1326 audit(1599451527.679:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21860 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 2255.390384][ T92] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2255.672236][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2255.793311][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2255.804454][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2255.815057][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2255.825268][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2255.914255][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2255.923321][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2255.931904][ T92] usb 1-1: SerialNumber: syz [ 2255.954611][T21848] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2255.961440][T21848] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2255.975263][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2255.981207][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2256.190270][T21848] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2256.197565][T21848] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2256.429370][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2256.721751][ T92] usb 1-1: USB disconnect, device number 20 [ 2256.741315][ T92] usblp0: removed 04:05:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x430000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$hidraw(r2, &(0x7f0000000100)="18dcd54df72af2f169ac77090490321f68084b1b73225bd802d991ec6e290a760fea", 0x22) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) r3 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80, 0x800) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000180)=0x7f) ioctl$FITHAW(r3, 0xc0045878) 04:05:29 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x900, 0x0, 0x0, 0xffffffff}}) 04:05:29 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4000000, 0x0, 0x0, 0xffffffff}}) 04:05:29 executing program 5: sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="9309fb113b566f54b0e1a1cabef525ddd4ba34edc0a3a376a2e5500df6cb7d4aeb83de7cd1576afc015e141e4c45a72e422f2074dba1", 0x36}, {&(0x7f00000000c0)="dc3a8becb18005b2caff1bedfd6ba330b7ffc53e29572e206873a2e0f10cf8d564c383f9c72aa1e3c72347fc23ba704e3bf3dac235e40bf777b8d5657264f586232a42458e77fd9418f024c353c72012b0553b2ed9c5193fa1518c4ddef3bf7dcf692793686fd164be3a5a193b2c865214c720a7fff3210c9c2968", 0x7b}, {&(0x7f0000000140)="dbd25d6f591b7b61bacf2ce4cbb744932a2c42faaaef7d87436df02549de367bc354407f016a938c4bfdbb6388d93e086fc1c5565a196217feced6eef5abd5d82a21dc0bb878880f521067532352b6e5a420799ec88ec92cc37490c197a31dec845105dd9207608a2acd42f9fa167a39dcdc731e34b9a05c", 0x78}, {&(0x7f00000001c0)="6ff821d04e49b4bb5a64107e7e6d96bad643d3f4d742593802f7eb6021070d510e1d398e137fcaca9639b865d16f1ed875549824a68e2761c50e8ffd828f74c52c5dfee7f684a5896789cce0935cf590447ca073985b56d079e3b7464a4c49e0bdac08aceb1135859bd6b2961692ff879c3905bac5fed065899406d8e41262b89763a8a247a0971495658145a4c400e4aab8cb935edbaa3cfd154bc96c7647ff49d1fb13daffc787628bebf054b1788927f1e4b1ae48042cbe75ef1a1498d817d5fcce8be3d3c4eb7de7bedd922be20dfb129529d5fdbec8d3adba0bf87fe6beccc88f0f0eb1bfc22cfc1612af4e4064d3", 0xf1}], 0x4, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}, 0x10010) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x9}, 0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x200, 0x2, 0x1f, 0x2}]}) fstat(r0, &(0x7f0000000480)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0xbe, "cbab7ffcace4a6"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000006c0)={{r6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x0, 0x8c1, 0x0, 0x0, 0xffffffff, 0x6, 0x7, 0xffffffff, 0x80000001}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r8, 0x531, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0xf415}}}}, 0x30}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x1c, r9, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x69}}, 0x20040094) 04:05:29 executing program 0 (fault-call:7 fault-nth:0): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0x10010, 0xffffffffffffffff, 0x98729000) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000300)="362f491a7562250bafe18c91a14a922f5e7b5e38c9b426de5605d186fd8ce936e55fc8e53208924bb579246c0290468dbba0f24d8093ad81a410708b73573dc265f92a79360c0a5b47b04cf8edea64ee242299ad6af9ca7a01326aa171cee785928af5d44f6971833aaa14b4b153a7f538633d23dfe458c5053d6c5db1c9844971ad1e1fc9763a77c6949aa83151fb4a8ecac649393e086e16ecdc44c1a59b6a32ef632fba0af9495514650fb595556871107a6cd1d492d4c43cac99f9cd6742721873272876037028c7c86327f93403", 0xd0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) keyctl$clear(0x7, 0xfffffffffffffff9) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x440000, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000", @ANYRES16=r5, @ANYBLOB="000225bd7000fcdbdf25000000000c00030004000000000000000c000300020000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000500000000000c0003000000000000000000"], 0x48}}, 0x41) 04:05:29 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xa00, 0x0, 0x0, 0xffffffff}}) 04:05:29 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x5000000, 0x0, 0x0, 0xffffffff}}) [ 2257.275951][ T22] audit: type=1326 audit(1599451529.771:86): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21914 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 04:05:29 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xb00, 0x0, 0x0, 0xffffffff}}) 04:05:29 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6000000, 0x0, 0x0, 0xffffffff}}) [ 2257.348420][T21939] print_req_error: 32 callbacks suppressed [ 2257.348432][T21939] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x5, 0x88, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x58, 0x63, 0xa8, 0x40, 0x1e2d, 0x82, 0x5503, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x3, 0xfe, 0x10, 0x1, [{{0x9, 0x4, 0x5, 0x3, 0x2, 0x6c, 0xca, 0xad, 0x80, [@generic={0x39, 0xa, "9e6aed386085ca43bfcab60eac28c615011764383624293bd45d7a364a5058e23d0c8db14bef058257c59e40bbc20a9931f5d62c2ee4bb"}, @uac_control={{0xa, 0x24, 0x1, 0x3d, 0x2}}], [{{0x9, 0x5, 0x2, 0x13, 0x200, 0x6, 0xa9, 0x60}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x7f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3f}]}}]}}, {{0x9, 0x4, 0xfd, 0x7f, 0x0, 0xff, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x9, 0x0, 0x5, 0xff, 0x5}, 0x42, &(0x7f00000002c0)={0x5, 0xf, 0x42, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "5faa6fea070ca56d0a64bdff334ec583"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x9, 0x7}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2b138f5c4a837dc4, 0x22, 0x6, 0x1, 0x80, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x8, 0xc5, 0x728}]}, 0x3, [{0xb3, &(0x7f00000004c0)=@string={0xb3, 0x3, "7d1601fe4c1a29d371c92fb4a6847ef3819ec17b2a84e8587e3acfec966bec95b073f89abc745a01b7904b11111fbc3cee14aa1ab21a1d425880308359f2b0cf9537d2c5b6c7662285148938f0fc7fb874815416e9d946d82900695f43f67d110f171362007521372043962e08bd099cb9179045ce56e50fd100b8c0294fba00901cca1c772756ef00cda2002a49674445af65577da9461cd29ec776f689ee48fe7a9e87a7e84465e0af2fc59b12747dff"}}, {0x5c, &(0x7f0000000580)=@string={0x5c, 0x3, "9a64c2b8b480df603cb220514200b3d7e1ce07ede43da2baceca45dfb1d1aed4fc7e3409b8d66a22c9fba7bed0603727c39a3ea27440e18e47ebe508c7669fed6807c2e4567b29a150569a8860fbce49c847952dc7f5ef453851"}}, {0x54, &(0x7f0000000600)=@string={0x54, 0x3, "30d57eb5f3d172f5a7403507c5f2cc07459b9a2d8584f9f5eebbe7205383989732c26fd6dcdc51d9445bd651ee6dd708db2f320f8b743c6fe3bf4913e6dacee1fbeda06cf565d36b75a23650c31a204ac628"}}]}) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001322f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000200001b0008"], 0x110}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 04:05:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0x10010, 0xffffffffffffffff, 0x98729000) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000300)="362f491a7562250bafe18c91a14a922f5e7b5e38c9b426de5605d186fd8ce936e55fc8e53208924bb579246c0290468dbba0f24d8093ad81a410708b73573dc265f92a79360c0a5b47b04cf8edea64ee242299ad6af9ca7a01326aa171cee785928af5d44f6971833aaa14b4b153a7f538633d23dfe458c5053d6c5db1c9844971ad1e1fc9763a77c6949aa83151fb4a8ecac649393e086e16ecdc44c1a59b6a32ef632fba0af9495514650fb595556871107a6cd1d492d4c43cac99f9cd6742721873272876037028c7c86327f93403", 0xd0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) keyctl$clear(0x7, 0xfffffffffffffff9) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x440000, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000", @ANYRES16=r5, @ANYBLOB="000225bd7000fcdbdf25000000000c00030004000000000000000c000300020000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000500000000000c0003000000000000000000"], 0x48}}, 0x41) [ 2257.567797][ T92] usb 1-1: new high-speed USB device number 21 using dummy_hcd 04:05:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 04:05:30 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xc00, 0x0, 0x0, 0xffffffff}}) 04:05:30 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7000000, 0x0, 0x0, 0xffffffff}}) [ 2257.611302][T21953] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2257.623731][ T22] audit: type=1326 audit(1599451530.099:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21963 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 2257.647953][T21944] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:30 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xd00, 0x0, 0x0, 0xffffffff}}) [ 2257.684701][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.696066][ T87] buffer_io_error: 11 callbacks suppressed [ 2257.696073][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2257.741296][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.753530][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2257.815166][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.826516][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2257.840197][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2257.950829][ T6420] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2258.013259][T21939] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2258.027387][T21962] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2258.029168][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2258.041895][T22008] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2258.050956][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2258.064639][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2258.072430][ T92] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2258.083301][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2258.093618][ T92] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2258.114007][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2258.131211][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2258.212905][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2258.221981][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2258.230940][ T92] usb 1-1: SerialNumber: syz [ 2258.253223][T21923] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2258.260057][T21923] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2258.273854][ T92] hub 1-1:1.0: bad descriptor, ignoring hub [ 2258.279780][ T92] hub: probe of 1-1:1.0 failed with error -5 [ 2258.354046][ T6420] usb 6-1: config 3 has an invalid interface number: 5 but max is 1 [ 2258.362040][ T6420] usb 6-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 2258.370927][ T6420] usb 6-1: config 3 has an invalid descriptor of length 127, skipping remainder of the config [ 2258.381285][ T6420] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 2258.390318][ T6420] usb 6-1: config 3 has no interface number 0 [ 2258.396537][ T6420] usb 6-1: config 3 interface 5 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2258.409592][ T6420] usb 6-1: config 3 interface 5 has no altsetting 0 [ 2258.489052][T21923] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2258.496368][T21923] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2258.585927][ T6420] usb 6-1: New USB device found, idVendor=1e2d, idProduct=0082, bcdDevice=55.03 [ 2258.595025][ T6420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.603150][ T6420] usb 6-1: Product: 픰땾퇳䂧ܵߌ魅⶚蒅믮⃧è“鞘숲홯孄凖淮ࣗ⿛༲璋漼뿣á‰î‡Žî·»æ² æ—µæ¯“ꉵ倶᫃䨠⣆ [ 2258.616911][ T6420] usb 6-1: Manufacturer: 撚룂肴惟눼儠Bힳ컡㷤몢쫎톱풮综ऴ횸≪﯉뺧æƒâœ·é«ƒêˆ¾ä´è»¡î­‡à£¥æ›‡î¶ŸÝ¨î“‚ç­–ê„©å™è¢šï­ ä§ŽäŸˆâ¶•ï—‡ä—¯å„¸ [ 2258.632730][ T6420] usb 6-1: SerialNumber: syz [ 2258.718015][ T92] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2258.911811][T21923] FAULT_INJECTION: forcing a failure. [ 2258.911811][T21923] name failslab, interval 1, probability 0, space 0, times 0 [ 2258.924485][T21923] CPU: 0 PID: 21923 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2258.936027][T21923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2258.946077][T21923] Call Trace: [ 2258.949373][T21923] dump_stack+0x1b0/0x21e [ 2258.953698][T21923] ? devkmsg_release+0x11c/0x11c [ 2258.958631][T21923] ? show_regs_print_info+0x12/0x12 [ 2258.963911][T21923] ? do_filp_open+0x2e1/0x430 [ 2258.968569][T21923] should_fail+0x6fb/0x860 [ 2258.972957][T21923] ? setup_fault_attr+0x2b0/0x2b0 [ 2258.977965][T21923] ? __kernel_write+0x340/0x340 [ 2258.982843][T21923] ? getname_flags+0xb8/0x610 [ 2258.987486][T21923] should_failslab+0x5/0x20 [ 2258.992002][T21923] kmem_cache_alloc+0x36/0x250 [ 2258.996755][T21923] getname_flags+0xb8/0x610 [ 2259.001261][T21923] ? __sb_end_write+0xa4/0xf0 [ 2259.005956][T21923] do_sys_open+0x32a/0x7a0 [ 2259.010343][T21923] ? file_open_root+0x440/0x440 [ 2259.015161][T21923] ? ksys_write+0x237/0x2a0 [ 2259.019647][T21923] do_syscall_64+0xcb/0x150 [ 2259.024130][T21923] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2259.030002][T21923] RIP: 0033:0x417101 [ 2259.033875][T21923] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2259.053453][T21923] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2259.061842][T21923] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2259.069801][T21923] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2259.077757][T21923] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2259.085726][T21923] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 2259.093679][T21923] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2259.221107][ T92] usb 1-1: USB disconnect, device number 21 [ 2259.224274][ T6420] usb 6-1: USB disconnect, device number 118 [ 2259.227759][ T92] usblp0: removed 04:05:32 executing program 0 (fault-call:7 fault-nth:1): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:32 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x8000000, 0x0, 0x0, 0xffffffff}}) 04:05:32 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xe00, 0x0, 0x0, 0xffffffff}}) 04:05:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x45e102) r4 = accept(r1, &(0x7f0000000180)=@qipcrtr, &(0x7f0000000080)=0x80) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r1, r3, r4], 0x3) 04:05:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x7, 0x1, 0x0, 0xf, 0x0, 0x20007, [{0x2, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/250, 0x3a, 0xfa, 0x20008}, 0x20) 04:05:32 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x9000000, 0x0, 0x0, 0xffffffff}}) 04:05:32 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xa000000, 0x0, 0x0, 0xffffffff}}) 04:05:32 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1100, 0x0, 0x0, 0xffffffff}}) 04:05:32 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe000000905820249"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0xa031, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:05:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000080)='vxcan1\x00'}) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) write$P9_RLERROR(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0ec5944e2475587e4079757ea92f65fd4d00"/27], 0xc) 04:05:32 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1805000000000000001a9500"/28], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2259.707298][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2259.722279][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2259.731278][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read 04:05:32 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1200, 0x0, 0x0, 0xffffffff}}) [ 2259.894618][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2259.906875][T31849] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2260.067870][ T92] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2260.148538][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2260.269566][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2260.280730][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2260.291515][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2260.301839][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2260.315115][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 2260.400668][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2260.409758][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2260.418527][T31849] usb 1-1: SerialNumber: syz [ 2260.440920][T22070] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2260.447775][ T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 2260.459427][T22070] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2260.466495][ T92] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2260.476767][ T92] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 73 [ 2260.487202][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2260.493326][ T92] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2260.507720][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2260.514267][ T92] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2260.523839][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.551864][T22132] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2260.558619][T22132] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2260.572399][ T92] hub 4-1:1.0: bad descriptor, ignoring hub [ 2260.578308][ T92] hub: probe of 4-1:1.0 failed with error -5 [ 2260.688907][T22070] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2260.696303][T22070] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2260.787360][T22132] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2260.794753][T22132] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2260.935901][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2261.026238][ T92] usblp 4-1:1.0: usblp1: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2261.118346][T22070] FAULT_INJECTION: forcing a failure. [ 2261.118346][T22070] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.133668][T22070] CPU: 0 PID: 22070 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2261.145222][T22070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2261.155258][T22070] Call Trace: [ 2261.158537][T22070] dump_stack+0x1b0/0x21e [ 2261.162888][T22070] ? devkmsg_release+0x11c/0x11c [ 2261.167792][T22070] ? show_regs_print_info+0x12/0x12 [ 2261.172969][T22070] ? memset+0x1f/0x40 [ 2261.176925][T22070] should_fail+0x6fb/0x860 [ 2261.181318][T22070] ? setup_fault_attr+0x2b0/0x2b0 [ 2261.186307][T22070] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2261.192341][T22070] ? __rcu_read_lock+0x50/0x50 [ 2261.197113][T22070] ? __alloc_file+0x26/0x390 [ 2261.201783][T22070] should_failslab+0x5/0x20 [ 2261.206294][T22070] kmem_cache_alloc+0x36/0x250 [ 2261.211038][T22070] __alloc_file+0x26/0x390 [ 2261.215530][T22070] ? alloc_empty_file+0x49/0x1b0 [ 2261.220455][T22070] alloc_empty_file+0xa9/0x1b0 [ 2261.225200][T22070] path_openat+0x124/0x42d0 [ 2261.229672][T22070] ? stack_trace_save+0x111/0x1e0 [ 2261.234684][T22070] ? stack_trace_snprint+0x150/0x150 [ 2261.239996][T22070] ? kstrtoull+0x3be/0x4e0 [ 2261.244393][T22070] ? do_filp_open+0x430/0x430 [ 2261.249035][T22070] ? __kasan_kmalloc+0x117/0x1b0 [ 2261.253950][T22070] ? kmem_cache_alloc+0x1d5/0x250 [ 2261.258958][T22070] ? getname_flags+0xb8/0x610 [ 2261.263607][T22070] ? do_sys_open+0x32a/0x7a0 [ 2261.268162][T22070] ? do_syscall_64+0xcb/0x150 [ 2261.272804][T22070] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2261.278848][T22070] ? get_pid_task+0x86/0x90 [ 2261.283315][T22070] ? proc_fail_nth_write+0x166/0x200 [ 2261.288575][T22070] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2261.293750][T22070] do_filp_open+0x1f7/0x430 [ 2261.298274][T22070] ? vfs_tmpfile+0x220/0x220 [ 2261.302856][T22070] ? should_fail+0x182/0x860 [ 2261.307420][T22070] ? fsnotify+0x13a0/0x1460 [ 2261.311910][T22070] ? __alloc_fd+0x590/0x590 [ 2261.316387][T22070] ? _raw_spin_lock+0xa1/0x170 [ 2261.321121][T22070] ? _raw_spin_trylock_bh+0x190/0x190 [ 2261.326455][T22070] ? _raw_spin_unlock+0x5/0x20 [ 2261.331198][T22070] ? __alloc_fd+0x4e8/0x590 [ 2261.335668][T22070] do_sys_open+0x36f/0x7a0 [ 2261.340050][T22070] ? file_open_root+0x440/0x440 [ 2261.344865][T22070] ? ksys_write+0x237/0x2a0 [ 2261.349333][T22070] do_syscall_64+0xcb/0x150 [ 2261.353801][T22070] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2261.359678][T22070] RIP: 0033:0x417101 [ 2261.363541][T22070] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2261.383171][T22070] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2261.391563][T22070] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2261.399500][T22070] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2261.407487][T22070] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2261.415424][T22070] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 2261.423373][T22070] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c 04:05:34 executing program 0 (fault-call:7 fault-nth:2): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:34 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xb000000, 0x0, 0x0, 0xffffffff}}) 04:05:34 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4000, 0x0, 0x0, 0xffffffff}}) 04:05:34 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6}, 0x4, 0x10, &(0x7f0000000200)={0x0, 0xd, 0x0, 0x800000}, 0x10}, 0x78) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x840000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000300)='./file0/file0\x00', r0}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 04:05:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x6]}, &(0x7f0000000040), &(0x7f0000000180)={r1, r2+60000000}, 0x8) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) 04:05:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x38}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x4, 0xfffffff9, 0x18, @local, @local, 0x80, 0x20, 0x4, 0x80000001}}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x338, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x23c, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffff0b5, @loopback, 0x80000001}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e251c2388a46519a5beecf1470ca81afa6bc60b8d0b9d2fe9831718dea8b2f5e"}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @mcast1, 0x676b03ee}}, @WGPEER_A_ALLOWEDIPS={0x168, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb8bd}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3a19e9891b3ce6a2b1c98fa016b54c66895a831217818a9de8dc1a21f4a902ad"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "727d7728f58b3a8bd341ecf3a68df3754675ac08ca76d6556a141ca976caee7d"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8000}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x338}, 0x1, 0x0, 0x0, 0x4004080}, 0x4041) 04:05:34 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4800, 0x0, 0x0, 0xffffffff}}) 04:05:34 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xc000000, 0x0, 0x0, 0xffffffff}}) [ 2262.386656][T22175] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 2262.628609][T22175] usb 1-1: Using ep0 maxpacket: 8 [ 2262.769767][T22194] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2262.776623][T22194] raw-gadget gadget: fail, usb_ep_enable returned -22 04:05:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) sendmmsg(r0, &(0x7f0000005dc0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)="f4", 0x1}], 0x1}}], 0x1, 0x2004c057) 04:05:35 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4c00, 0x0, 0x0, 0xffffffff}}) 04:05:35 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xd000000, 0x0, 0x0, 0xffffffff}}) 04:05:35 executing program 5: unshare(0x42000c80) r0 = open(&(0x7f0000000000)='./file0\x00', 0x109964, 0x40) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d0, &(0x7f0000000240)={0x0, 0x25ba, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r5 = socket(0x21, 0x1, 0x6) socket(0x1e, 0x2, 0x2) connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x1, 0x3, 0x1, {0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x3a) fcntl$setlease(r0, 0x400, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r3, 0x10000000) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80082000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2df8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x8000004) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f00000001c0)}, 0x2) fcntl$setlease(r0, 0x400, 0x2) recvfrom(r0, &(0x7f0000000040)=""/155, 0x9b, 0x2001, &(0x7f0000000100)=@ll={0x11, 0x9, 0x0, 0x1, 0x1f, 0x6, @dev={[], 0x40}}, 0x80) [ 2262.906499][T22247] print_req_error: 32 callbacks suppressed [ 2262.906506][T22247] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2262.927228][T22250] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2262.945598][T22251] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2262.951374][T31849] usb 4-1: USB disconnect, device number 11 [ 2262.957644][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2262.965049][T31849] usblp1: removed [ 2262.976096][ T87] buffer_io_error: 11 callbacks suppressed [ 2262.976103][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2262.994951][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2263.006881][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2263.037234][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2263.048539][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2263.892079][T22254] FAULT_INJECTION: forcing a failure. [ 2263.892079][T22254] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.904738][T22254] CPU: 0 PID: 22254 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2263.916265][T22254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.926446][T22254] Call Trace: [ 2263.929752][T22254] dump_stack+0x1b0/0x21e [ 2263.934105][T22254] ? devkmsg_release+0x11c/0x11c [ 2263.939041][T22254] ? show_regs_print_info+0x12/0x12 [ 2263.944251][T22254] ? unwind_get_return_address_ptr+0x130/0x130 [ 2263.950365][T22254] should_fail+0x6fb/0x860 [ 2263.954745][T22254] ? setup_fault_attr+0x2b0/0x2b0 [ 2263.959746][T22254] ? should_fail+0x182/0x860 [ 2263.964299][T22254] ? setup_fault_attr+0x2b0/0x2b0 [ 2263.969287][T22254] ? security_file_alloc+0x32/0x200 [ 2263.974446][T22254] should_failslab+0x5/0x20 [ 2263.978928][T22254] kmem_cache_alloc+0x36/0x250 [ 2263.983660][T22254] security_file_alloc+0x32/0x200 [ 2263.988648][T22254] __alloc_file+0xc6/0x390 [ 2263.993042][T22254] alloc_empty_file+0xa9/0x1b0 [ 2263.997768][T22254] path_openat+0x124/0x42d0 [ 2264.002238][T22254] ? stack_trace_save+0x111/0x1e0 [ 2264.007257][T22254] ? stack_trace_snprint+0x150/0x150 [ 2264.012521][T22254] ? kstrtoull+0x3be/0x4e0 [ 2264.016929][T22254] ? do_filp_open+0x430/0x430 [ 2264.021569][T22254] ? __kasan_kmalloc+0x117/0x1b0 [ 2264.026502][T22254] ? kmem_cache_alloc+0x1d5/0x250 [ 2264.031519][T22254] ? getname_flags+0xb8/0x610 [ 2264.036159][T22254] ? do_sys_open+0x32a/0x7a0 [ 2264.040713][T22254] ? do_syscall_64+0xcb/0x150 [ 2264.045365][T22254] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2264.051396][T22254] ? get_pid_task+0x86/0x90 [ 2264.055863][T22254] ? proc_fail_nth_write+0x166/0x200 [ 2264.061118][T22254] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2264.066293][T22254] do_filp_open+0x1f7/0x430 [ 2264.070821][T22254] ? vfs_tmpfile+0x220/0x220 [ 2264.075387][T22254] ? should_fail+0x182/0x860 [ 2264.079951][T22254] ? fsnotify+0x13a0/0x1460 [ 2264.084429][T22254] ? __alloc_fd+0x590/0x590 [ 2264.088894][T22254] ? _raw_spin_lock+0xa1/0x170 [ 2264.093620][T22254] ? _raw_spin_trylock_bh+0x190/0x190 [ 2264.098953][T22254] ? _raw_spin_unlock+0x5/0x20 [ 2264.103680][T22254] ? __alloc_fd+0x4e8/0x590 [ 2264.108150][T22254] do_sys_open+0x36f/0x7a0 [ 2264.112589][T22254] ? file_open_root+0x440/0x440 [ 2264.117407][T22254] ? ksys_write+0x237/0x2a0 [ 2264.121925][T22254] do_syscall_64+0xcb/0x150 [ 2264.126400][T22254] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2264.132253][T22254] RIP: 0033:0x417101 [ 2264.136132][T22254] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2264.155698][T22254] RSP: 002b:00007f2a9758f820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2264.164083][T22254] RAX: ffffffffffffffda RBX: 000000000118d080 RCX: 0000000000417101 [ 2264.172041][T22254] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a9758f850 [ 2264.180044][T22254] RBP: 00007f2a9758fca0 R08: 0000000000000000 R09: 000000000000000f [ 2264.188093][T22254] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000002 [ 2264.196043][T22254] R13: 00007ffcd86b281f R14: 00007f2a975909c0 R15: 000000000118d08c 04:05:37 executing program 0 (fault-call:7 fault-nth:3): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:37 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xe000000, 0x0, 0x0, 0xffffffff}}) 04:05:37 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x13, 0x4) 04:05:37 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6800, 0x0, 0x0, 0xffffffff}}) 04:05:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x118, 0x13, 0x8, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, {0x4e21, 0x4e24, [0x9, 0x2, 0x5, 0x9], [0x3, 0x944d, 0x1, 0x6], 0x0, [0x100]}, 0x2, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "e67494b0b94caa753a852d03d6b41a13ec70052ebe8b3753e3c882dc0b48f895f5a38309fddd7cab1c4f88e1f1e63cab33d418dc07d3df9043e6aa145161543327fc11b16eb8c76b6c1e1ceb021cc6aca1256cc91b1c5d66f8d5fa01b480087d3ffeebbd75a2eb50251b369bd513d0f422ef0b06aabec6e7f4c679e8af056c74cc74da08de2787194d306a8ce962c29063c867efe25e348bfd44cad9a7cab51a63cdcb59c0a3eacdc15b739e2fde41849e49ce0f8927411d648f44250cb60b761bce4d5738b8fd6d"}]}, 0x118}, 0x1, 0x0, 0x0, 0x24040010}, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff18, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) 04:05:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000562ccc849a59677c43e9592f393c0000000000000961191761a25d5377"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='cgroup\x00') syz_io_uring_setup(0x76d0, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d251f24", @ANYRES16=r2, @ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1b8, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x31aef678eb0c995}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4804}, 0x24000008) r4 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d251f24", @ANYRES16=r5, @ANYRES64=r6], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000500)=@sco, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x45, 0x1, {0x0, @random="bc90cd5986c8"}}]}]}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x6f606c027dce96ab}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4000000", @ANYRES16, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x404c900}, 0x4008005) 04:05:37 executing program 3: socket(0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$9p(r0, &(0x7f0000000240)="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", 0x1000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f0000001240)='./file0\x00', 0x149042, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$9p(r3, &(0x7f0000000100)="8232f594a4fe1a6e2ce225a2c1e070022e8f2d4421839e5557ee23ca316487a5c1aa1d64fb354233a452cc4a992a7bfc21652e8689b194c04fee9bd36363928fd0359f590ebd5ad2a5b050b33a0ecdfa6642486e53b5f0be0d0fecbf4b1d31336f40724588e8a26ab065f06c61a9765824834a97267177e6524e0ba5041ea67c3e51080dac207e9e48282cadb8de59234c", 0x91) fallocate(r3, 0x0, 0x0, 0x4003fe) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) open(&(0x7f00000000c0)='./bus\x00', 0x143042, 0x0) sendfile(r4, r2, 0x0, 0xfffff77f000) 04:05:37 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x10000000, 0x0, 0x0, 0xffffffff}}) 04:05:37 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6c00, 0x0, 0x0, 0xffffffff}}) [ 2265.248416][ T22] audit: type=1400 audit(1599451537.667:88): avc: denied { audit_read } for pid=22257 comm="syz-executor.3" capability=37 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 04:05:37 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x11000000, 0x0, 0x0, 0xffffffff}}) 04:05:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406a053d0340000000000109022400010000000009040000030301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x45, 0x1, {0x0, @random="bc90cd5986c8"}}]}]}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@mcast2, 0x41, r4}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xb, "9b2e"}, @local=@item_4={0x3, 0x2, 0x0, "70594684"}]}}, 0x0}, 0x0) 04:05:37 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7400, 0x0, 0x0, 0xffffffff}}) [ 2265.376949][T22281] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2265.393217][T22304] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2265.421906][T22325] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2265.440547][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2265.451909][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2265.462641][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2265.472399][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2265.487269][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2265.499836][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2265.501895][T31849] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 2265.519659][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2265.683415][ T6420] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2265.764023][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2265.915252][T22269] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2265.922122][T22269] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2266.066496][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2266.077552][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2266.087591][ T6420] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2266.100544][ T6420] usb 6-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.40 [ 2266.109698][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2266.119955][ T6420] usb 6-1: config 0 descriptor?? [ 2266.469748][ T6420] usbhid 6-1:0.0: can't add hid device: -71 [ 2266.476000][ T6420] usbhid: probe of 6-1:0.0 failed with error -71 [ 2266.483880][ T6420] usb 6-1: USB disconnect, device number 119 [ 2266.943562][ T6420] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2267.037670][T22336] FAULT_INJECTION: forcing a failure. [ 2267.037670][T22336] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.050390][T22336] CPU: 0 PID: 22336 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2267.062061][T22336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2267.072125][T22336] Call Trace: [ 2267.075386][T22336] dump_stack+0x1b0/0x21e [ 2267.079700][T22336] ? devkmsg_release+0x11c/0x11c [ 2267.084607][T22336] ? show_regs_print_info+0x12/0x12 [ 2267.089785][T22336] ? unwind_get_return_address_ptr+0x130/0x130 [ 2267.095913][T22336] ? _raw_spin_lock_irqsave+0xda/0x1c0 [ 2267.101353][T22336] should_fail+0x6fb/0x860 [ 2267.105743][T22336] ? setup_fault_attr+0x2b0/0x2b0 [ 2267.110754][T22336] ? should_fail+0x182/0x860 [ 2267.115323][T22336] ? setup_fault_attr+0x2b0/0x2b0 [ 2267.120390][T22336] ? security_file_alloc+0x32/0x200 [ 2267.125553][T22336] should_failslab+0x5/0x20 [ 2267.130061][T22336] kmem_cache_alloc+0x36/0x250 [ 2267.134794][T22336] security_file_alloc+0x32/0x200 [ 2267.139799][T22336] __alloc_file+0xc6/0x390 [ 2267.144210][T22336] alloc_empty_file+0xa9/0x1b0 [ 2267.148953][T22336] path_openat+0x124/0x42d0 [ 2267.153426][T22336] ? stack_trace_save+0x111/0x1e0 [ 2267.158448][T22336] ? stack_trace_snprint+0x150/0x150 [ 2267.163702][T22336] ? do_filp_open+0x430/0x430 [ 2267.168343][T22336] ? __kasan_kmalloc+0x117/0x1b0 [ 2267.173282][T22336] ? kmem_cache_alloc+0x1d5/0x250 [ 2267.178273][T22336] ? getname_flags+0xb8/0x610 [ 2267.182919][T22336] ? do_sys_open+0x32a/0x7a0 [ 2267.187487][T22336] ? do_syscall_64+0xcb/0x150 [ 2267.192189][T22336] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2267.198256][T22336] ? _raw_spin_lock_irqsave+0xda/0x1c0 [ 2267.203719][T22336] ? _raw_spin_lock+0x170/0x170 [ 2267.208540][T22336] ? proc_fail_nth_write+0x166/0x200 [ 2267.213812][T22336] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2267.218979][T22336] do_filp_open+0x1f7/0x430 [ 2267.223453][T22336] ? vfs_tmpfile+0x220/0x220 [ 2267.228009][T22336] ? new_slab+0x21c/0x450 [ 2267.232443][T22336] ? __alloc_fd+0x590/0x590 [ 2267.236920][T22336] ? _raw_spin_lock+0xa1/0x170 [ 2267.241655][T22336] ? _raw_spin_trylock_bh+0x190/0x190 [ 2267.247002][T22336] ? _raw_spin_unlock+0x5/0x20 [ 2267.251739][T22336] ? __alloc_fd+0x4e8/0x590 [ 2267.256215][T22336] do_sys_open+0x36f/0x7a0 [ 2267.260631][T22336] ? file_open_root+0x440/0x440 [ 2267.265449][T22336] ? ksys_write+0x237/0x2a0 [ 2267.269936][T22336] do_syscall_64+0xcb/0x150 [ 2267.274435][T22336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2267.280302][T22336] RIP: 0033:0x417101 [ 2267.284184][T22336] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2267.303776][T22336] RSP: 002b:00007f2a9758f820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2267.312173][T22336] RAX: ffffffffffffffda RBX: 000000000118d080 RCX: 0000000000417101 [ 2267.320113][T22336] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a9758f850 [ 2267.328055][T22336] RBP: 00007f2a9758fca0 R08: 0000000000000000 R09: 000000000000000f [ 2267.336004][T22336] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 2267.343974][T22336] R13: 00007ffcd86b281f R14: 00007f2a975909c0 R15: 000000000118d08c [ 2267.598905][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.609942][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2267.619831][ T6420] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2267.632707][ T6420] usb 6-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.40 [ 2267.641853][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.651955][ T6420] usb 6-1: config 0 descriptor?? [ 2267.892051][T22315] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2267.901418][T22315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2268.144193][ T6420] wacom 0003:056A:033D.00A8: item fetching failed at offset 3/5 [ 2268.151987][ T6420] wacom 0003:056A:033D.00A8: parse failed [ 2268.163213][ T6420] wacom: probe of 0003:056A:033D.00A8 failed with error -22 04:05:40 executing program 0 (fault-call:7 fault-nth:4): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:40 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x12000000, 0x0, 0x0, 0xffffffff}}) 04:05:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1}}) pread64(r2, &(0x7f0000000240)=""/158, 0x9e, 0x8) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000000)={0x1, 0x1, 0x1d}) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 04:05:40 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7a00, 0x0, 0x0, 0xffffffff}}) 04:05:40 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) utimes(0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) r2 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000740)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000000c0)={{0x3, 0x0, @descriptor="ab8250de2a0b510f"}}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)) sendfile(r0, r1, 0x0, 0x1c542) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f00000004c0)="4ecf80efa43d45a381bcf8be17504971a390cee4c8124fc6f5d3ebf7eb1e4244c9144022f3140fdbfc4db861d39edc5d75068d9a3b0eb48dd11803a265df3371bbbbf3270372e737c13771afc24435c2047b01705fbe019a38916686bb9532b884e27233311f920073a9f44ca03d4c64ebf9d8cd1d82be7262b683f05074e4ad35744ba2bb3ea98e5bd0e7f741461ac6df92eda669edfc4c34db353dd95abb967b2bf32e35d6b4237300000000000000000000000cf6b7033d49843cff0911ec00"/202, 0xca) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:05:40 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x20000, 0x0, 0x0, 0xffffffff}}) 04:05:40 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x40000000, 0x0, 0x0, 0xffffffff}}) [ 2268.364310][ T6420] usb 6-1: USB disconnect, device number 120 04:05:40 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1000000, 0x0, 0x0, 0xffffffff}}) 04:05:40 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x48000000, 0x0, 0x0, 0xffffffff}}) [ 2268.429159][T22350] binder: 22346:22350 ioctl c018620c 20000740 returned -22 [ 2268.435236][T22364] print_req_error: 8 callbacks suppressed [ 2268.435254][T22364] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:40 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x2000000, 0x0, 0x0, 0xffffffff}}) [ 2268.477481][T22366] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2268.506869][T22367] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2268.536035][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2268.547151][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2268.556366][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2268.567690][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2268.580642][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2268.592345][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2268.616272][T22366] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2268.629787][T22364] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2268.643102][T22367] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2268.655647][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2268.657463][T31849] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 2268.667151][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2268.684801][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2268.695270][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2268.712065][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2268.723137][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2268.735909][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2268.750719][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2268.898647][T22394] binder: 22346:22394 ioctl c018620c 20000740 returned -22 [ 2268.909870][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2269.050638][T22353] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2269.057593][T22353] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2269.171601][ T6420] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2269.534583][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2269.545491][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2269.555393][ T6420] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2269.568327][ T6420] usb 6-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.40 [ 2269.577627][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.587874][ T6420] usb 6-1: config 0 descriptor?? 04:05:42 executing program 5: socket$unix(0x1, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x6c}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) 04:05:42 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4c000000, 0x0, 0x0, 0xffffffff}}) [ 2269.816852][ T6420] usbhid 6-1:0.0: can't add hid device: -71 [ 2269.822925][ T6420] usbhid: probe of 6-1:0.0 failed with error -71 [ 2269.830869][ T6420] usb 6-1: USB disconnect, device number 121 [ 2270.174049][T22423] FAULT_INJECTION: forcing a failure. [ 2270.174049][T22423] name failslab, interval 1, probability 0, space 0, times 0 [ 2270.186727][T22423] CPU: 0 PID: 22423 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2270.198230][T22423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2270.208249][T22423] Call Trace: [ 2270.211519][T22423] dump_stack+0x1b0/0x21e [ 2270.215814][T22423] ? devkmsg_release+0x11c/0x11c [ 2270.220715][T22423] ? show_regs_print_info+0x12/0x12 [ 2270.225877][T22423] ? _raw_spin_unlock+0x5/0x20 [ 2270.230619][T22423] ? rmqueue_bulk+0x2390/0x23f0 [ 2270.235449][T22423] should_fail+0x6fb/0x860 [ 2270.239829][T22423] ? setup_fault_attr+0x2b0/0x2b0 [ 2270.244816][T22423] ? setup_fault_attr+0x2b0/0x2b0 [ 2270.249809][T22423] ? memset+0x1f/0x40 [ 2270.253788][T22423] ? usb_alloc_urb+0x3d/0x140 [ 2270.258426][T22423] should_failslab+0x5/0x20 [ 2270.262893][T22423] __kmalloc+0x5f/0x2c0 [ 2270.267026][T22423] usb_alloc_urb+0x3d/0x140 [ 2270.271494][T22423] usb_control_msg+0x16e/0x480 [ 2270.276268][T22423] ? usb_anchor_empty+0x40/0x40 [ 2270.281083][T22423] ? memset+0x1f/0x40 [ 2270.285030][T22423] ? unwind_next_frame+0x1c07/0x22b0 [ 2270.290280][T22423] hub_ext_port_status+0x108/0x660 [ 2270.295363][T22423] hub_activate+0xcee/0x2050 [ 2270.299920][T22423] ? arch_stack_walk+0x78/0xe0 [ 2270.304648][T22423] ? _raw_spin_lock+0x170/0x170 [ 2270.309473][T22423] ? hub_irq+0x340/0x340 [ 2270.313681][T22423] ? _raw_spin_lock_irq+0xa2/0x180 [ 2270.318757][T22423] hub_resume+0x97/0x3b0 [ 2270.322966][T22423] ? hub_suspend+0xa90/0xa90 [ 2270.327533][T22423] ? hcd_bus_resume+0x529/0x600 [ 2270.332352][T22423] ? mutex_unlock+0x19/0x40 [ 2270.336818][T22423] usb_resume_both+0x538/0x9d0 [ 2270.341567][T22423] __rpm_callback+0x15d/0x4d0 [ 2270.346216][T22423] ? autosuspend_check+0x560/0x560 [ 2270.351314][T22423] rpm_resume+0xf9a/0x19b0 [ 2270.355693][T22423] ? arch_stack_walk+0x78/0xe0 [ 2270.360421][T22423] ? autosuspend_check+0x560/0x560 [ 2270.365496][T22423] ? __pm_runtime_resume+0x90/0x90 [ 2270.370572][T22423] ? _raw_spin_lock+0xa1/0x170 [ 2270.375303][T22423] ? _raw_spin_trylock_bh+0x190/0x190 [ 2270.380649][T22423] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2270.386677][T22423] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2270.392289][T22423] rpm_resume+0x833/0x19b0 [ 2270.396672][T22423] ? __pm_runtime_resume+0x90/0x90 [ 2270.401757][T22423] ? _raw_spin_lock+0xa1/0x170 [ 2270.406513][T22423] ? _raw_spin_trylock_bh+0x190/0x190 [ 2270.411845][T22423] ? _raw_spin_lock+0xa1/0x170 [ 2270.416584][T22423] ? _raw_spin_trylock_bh+0x190/0x190 [ 2270.421940][T22423] ? klist_iter_init_node+0x234/0x300 [ 2270.427274][T22423] ? klist_dec_and_del+0x3c/0x380 [ 2270.432262][T22423] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2270.437859][T22423] rpm_resume+0x833/0x19b0 [ 2270.442241][T22423] ? __pm_runtime_resume+0x90/0x90 [ 2270.447313][T22423] ? _raw_spin_lock+0x170/0x170 [ 2270.452132][T22423] ? avc_has_perm+0x15f/0x260 [ 2270.456778][T22423] ? usb_find_interface+0xc8/0x130 [ 2270.461860][T22423] ? usb_altnum_to_altsetting+0x160/0x160 [ 2270.467552][T22423] __pm_runtime_resume+0x6a/0x90 [ 2270.472454][T22423] usb_autopm_get_interface+0x1c/0x50 [ 2270.477794][T22423] usblp_open+0x158/0x410 [ 2270.482101][T22423] ? __module_put_and_exit+0x20/0x20 [ 2270.487365][T22423] ? usblp_ioctl+0x1810/0x1810 [ 2270.492095][T22423] usb_open+0x188/0x1f0 [ 2270.496248][T22423] chrdev_open+0x60a/0x670 [ 2270.500630][T22423] ? cd_forget+0x150/0x150 [ 2270.505011][T22423] ? security_file_open+0x1f8/0x2c0 [ 2270.510172][T22423] ? cd_forget+0x150/0x150 [ 2270.514572][T22423] do_dentry_open+0x8fa/0x1070 [ 2270.519322][T22423] ? finish_open+0xd0/0xd0 [ 2270.523700][T22423] ? vfs_open+0x2b/0x80 [ 2270.527820][T22423] ? memcpy+0x38/0x50 [ 2270.531765][T22423] path_openat+0x1681/0x42d0 [ 2270.536333][T22423] ? stack_trace_save+0x111/0x1e0 [ 2270.541319][T22423] ? stack_trace_snprint+0x150/0x150 [ 2270.546580][T22423] ? do_filp_open+0x430/0x430 [ 2270.551220][T22423] ? __kasan_kmalloc+0x117/0x1b0 [ 2270.556136][T22423] ? kmem_cache_alloc+0x1d5/0x250 [ 2270.561123][T22423] ? getname_flags+0xb8/0x610 [ 2270.565765][T22423] ? do_sys_open+0x32a/0x7a0 [ 2270.570321][T22423] ? do_syscall_64+0xcb/0x150 [ 2270.574974][T22423] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2270.581018][T22423] ? get_pid_task+0x86/0x90 [ 2270.585502][T22423] ? proc_fail_nth_write+0x166/0x200 [ 2270.590765][T22423] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2270.595987][T22423] do_filp_open+0x1f7/0x430 [ 2270.600474][T22423] ? vfs_tmpfile+0x220/0x220 [ 2270.605030][T22423] ? should_fail+0x182/0x860 [ 2270.609585][T22423] ? _raw_spin_trylock_bh+0x190/0x190 [ 2270.614920][T22423] ? _raw_spin_unlock+0x5/0x20 [ 2270.619678][T22423] ? __alloc_fd+0x4e8/0x590 [ 2270.624160][T22423] do_sys_open+0x36f/0x7a0 [ 2270.628541][T22423] ? file_open_root+0x440/0x440 [ 2270.633353][T22423] ? ksys_write+0x237/0x2a0 [ 2270.637838][T22423] do_syscall_64+0xcb/0x150 [ 2270.642334][T22423] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2270.648204][T22423] RIP: 0033:0x417101 [ 2270.652063][T22423] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2270.671635][T22423] RSP: 002b:00007f2a9758f820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2270.680025][T22423] RAX: ffffffffffffffda RBX: 000000000118d080 RCX: 0000000000417101 [ 2270.688155][T22423] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a9758f850 [ 2270.696108][T22423] RBP: 00007f2a9758fca0 R08: 0000000000000000 R09: 000000000000000f [ 2270.704044][T22423] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 2270.711992][T22423] R13: 00007ffcd86b281f R14: 00007f2a975909c0 R15: 000000000118d08c [ 2270.727407][T22423] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 2270.865291][ C0] usblp0: nonzero read bulk status received: -71 04:05:44 executing program 0 (fault-call:7 fault-nth:5): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:44 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x3000000, 0x0, 0x0, 0xffffffff}}) 04:05:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f2824b7c41b02b874e899709cdcf42f6e0958bd30a0c0c24bcf7f9cde6a879a81ad65969"], 0xdb03) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 04:05:44 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="20000000080000ffff0032c9fab4ba2ae828cb2cc9c503986187c24ba061313288c2c9cfd3310ac9304c12bf20539cb082dfa47a49708bd9f3789d40207bca58bcc2f016f14ff37e488085611f"], &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='msdos\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) connect(0xffffffffffffffff, &(0x7f0000000100)=@rc={0x1f, @any, 0x39}, 0x80) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 04:05:44 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x68000000, 0x0, 0x0, 0xffffffff}}) 04:05:44 executing program 5: r0 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\xd4\xd0\xe9n\xb1\xb9\xd0\xe9\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5<\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88h\xb0\xd3H\xd6<\xf9\xfb\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7l\x87_\xb3#\x11c\x8eF\xd4\x0f\x97-w\x1bfA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xd7\x02S;C\x99\a.$K\xe8\x06\x02\x00\x00[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8010002}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\xd4\xd0\xe9n\xb1\xb9\xd0\xe9\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5<\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88h\xb0\xd3H\xd6<\xf9\xfb\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7l\x87_\xb3#\x11c\x8eF\xd4\x0f\x97-w\x1bfA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xd7\x02S;C\x99\a.$K\xe8\x06\x02\x00\x00[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb', &(0x7f00000001c0)='[\x00', 0x0) lseek(r0, 0xffffffff00000000, 0x3) write$binfmt_misc(r0, 0x0, 0x48) 04:05:44 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6c000000, 0x0, 0x0, 0xffffffff}}) 04:05:44 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4000000, 0x0, 0x0, 0xffffffff}}) 04:05:44 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x45, 0x1, {0x0, @random="bc90cd5986c8"}}]}]}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xa8bd, 0x1ff, 0xdf6d}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x1, r3, 0x2f, r4}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x32, &(0x7f0000000080)=@generic={0x4, 0x2, 0x2a, "6b001000", "51035cd89a5832310e9fa7de6b0bc6f7c9c1ceba350de7f6468dc6a92fc632f01f1fbd59790c6cd61b1a"}) 04:05:44 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x74000000, 0x0, 0x0, 0xffffffff}}) 04:05:44 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x5000000, 0x0, 0x0, 0xffffffff}}) 04:05:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, &(0x7f0000000100)="900000001d001f4d154a81739327abff0280a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) [ 2271.937583][T22459] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2271.974389][T22459] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 2272.155772][T31849] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 2272.276759][ T92] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2272.417885][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2272.569131][T22439] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2272.576011][T22439] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2272.801023][ T92] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2272.810091][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.818976][ T92] usb 4-1: Product: syz [ 2272.823591][ T92] usb 4-1: Manufacturer: syz [ 2272.828206][ T92] usb 4-1: SerialNumber: syz [ 2273.690703][T22494] FAULT_INJECTION: forcing a failure. [ 2273.690703][T22494] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.703371][T22494] CPU: 0 PID: 22494 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2273.714889][T22494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2273.724911][T22494] Call Trace: [ 2273.728201][T22494] dump_stack+0x1b0/0x21e [ 2273.732548][T22494] ? devkmsg_release+0x11c/0x11c [ 2273.737481][T22494] ? show_regs_print_info+0x12/0x12 [ 2273.742799][T22494] ? mon_bin_event+0xc2e/0x24e0 [ 2273.747626][T22494] should_fail+0x6fb/0x860 [ 2273.752021][T22494] ? setup_fault_attr+0x2b0/0x2b0 [ 2273.757025][T22494] ? _raw_spin_lock+0xa1/0x170 [ 2273.761754][T22494] ? _raw_spin_trylock_bh+0x190/0x190 [ 2273.767119][T22494] ? kzalloc+0x1b/0x30 [ 2273.771157][T22494] should_failslab+0x5/0x20 [ 2273.775636][T22494] __kmalloc+0x5f/0x2c0 [ 2273.779764][T22494] kzalloc+0x1b/0x30 [ 2273.783624][T22494] usb_hcd_submit_urb+0x8b9/0x1b20 [ 2273.788702][T22494] ? hub_resume+0x97/0x3b0 [ 2273.793100][T22494] ? usb_resume_both+0x538/0x9d0 [ 2273.798004][T22494] ? __rpm_callback+0x15d/0x4d0 [ 2273.802834][T22494] ? rpm_resume+0x833/0x19b0 [ 2273.807402][T22494] ? usb_autopm_get_interface+0x1c/0x50 [ 2273.812928][T22494] ? do_dentry_open+0x8fa/0x1070 [ 2273.817829][T22494] ? do_sys_open+0x36f/0x7a0 [ 2273.822385][T22494] ? usb_hcd_map_urb_for_dma+0x12e0/0x12e0 [ 2273.828155][T22494] ? do_sys_open+0x36f/0x7a0 [ 2273.832709][T22494] ? do_syscall_64+0xcb/0x150 [ 2273.837379][T22494] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2273.843417][T22494] ? usb_submit_urb+0xc5b/0x13e0 [ 2273.848335][T22494] usb_start_wait_urb+0x11b/0x370 [ 2273.853324][T22494] ? usb_api_blocking_completion+0xa0/0xa0 [ 2273.859096][T22494] ? memset+0x1f/0x40 [ 2273.863043][T22494] ? __kmalloc+0xf7/0x2c0 [ 2273.867346][T22494] ? usb_alloc_urb+0x3d/0x140 [ 2273.872009][T22494] usb_control_msg+0x289/0x480 [ 2273.876736][T22494] ? usb_anchor_empty+0x40/0x40 [ 2273.881551][T22494] ? memset+0x1f/0x40 [ 2273.885500][T22494] ? unwind_next_frame+0x1c07/0x22b0 [ 2273.890749][T22494] hub_ext_port_status+0x108/0x660 [ 2273.895827][T22494] hub_activate+0xcee/0x2050 [ 2273.900382][T22494] ? arch_stack_walk+0x78/0xe0 [ 2273.905109][T22494] ? _raw_spin_lock+0x170/0x170 [ 2273.909941][T22494] ? hub_irq+0x340/0x340 [ 2273.914194][T22494] ? _raw_spin_lock_irq+0xa2/0x180 [ 2273.919270][T22494] hub_resume+0x97/0x3b0 [ 2273.923478][T22494] ? hub_suspend+0xa90/0xa90 [ 2273.928058][T22494] ? hcd_bus_resume+0x529/0x600 [ 2273.932876][T22494] ? mutex_unlock+0x19/0x40 [ 2273.937361][T22494] usb_resume_both+0x538/0x9d0 [ 2273.942093][T22494] __rpm_callback+0x15d/0x4d0 [ 2273.946750][T22494] ? autosuspend_check+0x560/0x560 [ 2273.951839][T22494] rpm_resume+0xf9a/0x19b0 [ 2273.956221][T22494] ? arch_stack_walk+0x78/0xe0 [ 2273.960952][T22494] ? autosuspend_check+0x560/0x560 [ 2273.966052][T22494] ? __pm_runtime_resume+0x90/0x90 [ 2273.971138][T22494] ? _raw_spin_lock+0xa1/0x170 [ 2273.975875][T22494] ? _raw_spin_trylock_bh+0x190/0x190 [ 2273.981236][T22494] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2273.987266][T22494] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2273.992862][T22494] rpm_resume+0x833/0x19b0 [ 2273.997261][T22494] ? __pm_runtime_resume+0x90/0x90 [ 2274.002348][T22494] ? _raw_spin_lock+0xa1/0x170 [ 2274.007075][T22494] ? _raw_spin_trylock_bh+0x190/0x190 [ 2274.012422][T22494] ? _raw_spin_lock+0xa1/0x170 [ 2274.017164][T22494] ? _raw_spin_trylock_bh+0x190/0x190 [ 2274.022498][T22494] ? klist_iter_init_node+0x234/0x300 [ 2274.027830][T22494] ? klist_dec_and_del+0x3c/0x380 [ 2274.032832][T22494] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2274.038425][T22494] rpm_resume+0x833/0x19b0 [ 2274.042834][T22494] ? __pm_runtime_resume+0x90/0x90 [ 2274.047951][T22494] ? _raw_spin_lock+0x170/0x170 [ 2274.052764][T22494] ? avc_has_perm+0x15f/0x260 [ 2274.057421][T22494] ? usb_find_interface+0xc8/0x130 [ 2274.062533][T22494] ? usb_altnum_to_altsetting+0x160/0x160 [ 2274.068219][T22494] __pm_runtime_resume+0x6a/0x90 [ 2274.073164][T22494] usb_autopm_get_interface+0x1c/0x50 [ 2274.078502][T22494] usblp_open+0x158/0x410 [ 2274.082795][T22494] ? __module_put_and_exit+0x20/0x20 [ 2274.088056][T22494] ? usblp_ioctl+0x1810/0x1810 [ 2274.092798][T22494] usb_open+0x188/0x1f0 [ 2274.096934][T22494] chrdev_open+0x60a/0x670 [ 2274.101320][T22494] ? cd_forget+0x150/0x150 [ 2274.105717][T22494] ? security_file_open+0x1f8/0x2c0 [ 2274.110881][T22494] ? cd_forget+0x150/0x150 [ 2274.115261][T22494] do_dentry_open+0x8fa/0x1070 [ 2274.120021][T22494] ? finish_open+0xd0/0xd0 [ 2274.124409][T22494] ? vfs_open+0x2b/0x80 [ 2274.128540][T22494] ? memcpy+0x38/0x50 [ 2274.132488][T22494] path_openat+0x1681/0x42d0 [ 2274.137044][T22494] ? stack_trace_save+0x111/0x1e0 [ 2274.142060][T22494] ? stack_trace_snprint+0x150/0x150 [ 2274.147307][T22494] ? do_filp_open+0x430/0x430 [ 2274.151944][T22494] ? __kasan_kmalloc+0x117/0x1b0 [ 2274.156842][T22494] ? kmem_cache_alloc+0x1d5/0x250 [ 2274.161829][T22494] ? getname_flags+0xb8/0x610 [ 2274.166475][T22494] ? do_sys_open+0x32a/0x7a0 [ 2274.171030][T22494] ? do_syscall_64+0xcb/0x150 [ 2274.175683][T22494] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2274.181733][T22494] ? get_pid_task+0x86/0x90 [ 2274.186206][T22494] ? proc_fail_nth_write+0x166/0x200 [ 2274.191453][T22494] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2274.196619][T22494] do_filp_open+0x1f7/0x430 [ 2274.201084][T22494] ? vfs_tmpfile+0x220/0x220 [ 2274.205658][T22494] ? should_fail+0x182/0x860 [ 2274.210226][T22494] ? _raw_spin_trylock_bh+0x190/0x190 [ 2274.215559][T22494] ? _raw_spin_unlock+0x5/0x20 [ 2274.220298][T22494] ? __alloc_fd+0x4e8/0x590 [ 2274.224777][T22494] do_sys_open+0x36f/0x7a0 [ 2274.229172][T22494] ? file_open_root+0x440/0x440 [ 2274.233987][T22494] ? ksys_write+0x237/0x2a0 [ 2274.238454][T22494] do_syscall_64+0xcb/0x150 [ 2274.242924][T22494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2274.248781][T22494] RIP: 0033:0x417101 [ 2274.252640][T22494] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2274.272255][T22494] RSP: 002b:00007f2a9758f820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2274.280627][T22494] RAX: ffffffffffffffda RBX: 000000000118d080 RCX: 0000000000417101 [ 2274.288562][T22494] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a9758f850 [ 2274.296508][T22494] RBP: 00007f2a9758fca0 R08: 0000000000000000 R09: 000000000000000f [ 2274.304451][T22494] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000005 [ 2274.312385][T22494] R13: 00007ffcd86b281f R14: 00007f2a975909c0 R15: 000000000118d08c [ 2274.327664][T22494] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 2274.464448][ C0] usblp0: nonzero read bulk status received: -71 [ 2274.953586][ T92] usb 4-1: USB disconnect, device number 12 04:05:48 executing program 0 (fault-call:7 fault-nth:6): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7a000000, 0x0, 0x0, 0xffffffff}}) 04:05:48 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6000000, 0x0, 0x0, 0xffffffff}}) 04:05:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x40, 0x1, 0x0, 0xfc, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xbf63}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) 04:05:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) sendfile(r0, r2, 0x0, 0x200fff) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) 04:05:48 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'bond_slave_1\x00', {}, 0x4}) r3 = dup(r0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x200088d0) r4 = dup(r2) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 04:05:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x3f, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6b25a04c6e7ec5002005"], 0x0}, 0x0) 04:05:48 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7000000, 0x0, 0x0, 0xffffffff}}) 04:05:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) [ 2275.536629][T22522] print_req_error: 32 callbacks suppressed [ 2275.536641][T22522] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2275.556089][T22511] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x2, 0x0, 0xffffffff}}) 04:05:48 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x8000000, 0x0, 0x0, 0xffffffff}}) [ 2275.581147][T22529] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2275.622343][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 04:05:48 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x3, 0x0, 0xffffffff}}) [ 2275.633411][ T87] buffer_io_error: 11 callbacks suppressed [ 2275.633418][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2275.665567][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2275.684564][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2275.694277][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2275.705859][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2275.731375][T22511] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2275.746090][T22529] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2275.754923][ T92] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 2275.763431][T22522] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2275.781210][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2275.792638][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2275.800779][ T6420] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2275.811447][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2275.821346][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2275.834995][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2275.844392][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2275.857408][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2276.006974][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 2276.047295][ T6420] usb 6-1: Using ep0 maxpacket: 32 [ 2276.148183][T22513] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2276.155034][T22513] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2276.168351][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.179281][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2276.189189][ T6420] usb 6-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 2276.198233][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.208825][ T6420] usb 6-1: config 0 descriptor?? [ 2276.763143][ T6420] usbhid 6-1:0.0: can't add hid device: -71 [ 2276.769149][ T6420] usbhid: probe of 6-1:0.0 failed with error -71 [ 2276.777045][ T6420] usb 6-1: USB disconnect, device number 122 [ 2277.270666][T22572] FAULT_INJECTION: forcing a failure. [ 2277.270666][T22572] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.283406][T22572] CPU: 0 PID: 22572 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2277.294916][T22572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.304938][T22572] Call Trace: [ 2277.308196][T22572] dump_stack+0x1b0/0x21e [ 2277.312503][T22572] ? devkmsg_release+0x11c/0x11c [ 2277.317415][T22572] ? show_regs_print_info+0x12/0x12 [ 2277.322590][T22572] ? __perf_event_task_sched_out+0x1127/0x1250 [ 2277.328745][T22572] should_fail+0x6fb/0x860 [ 2277.333129][T22572] ? setup_fault_attr+0x2b0/0x2b0 [ 2277.338119][T22572] ? perf_pmu_sched_task+0x370/0x370 [ 2277.343371][T22572] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2277.349317][T22572] ? rpm_resume+0xa29/0x19b0 [ 2277.353889][T22572] ? usb_control_msg+0xb7/0x480 [ 2277.358706][T22572] should_failslab+0x5/0x20 [ 2277.363178][T22572] kmem_cache_alloc_trace+0x39/0x270 [ 2277.368430][T22572] usb_control_msg+0xb7/0x480 [ 2277.373075][T22572] ? usb_anchor_empty+0x40/0x40 [ 2277.377933][T22572] ? __pm_runtime_resume+0x90/0x90 [ 2277.383020][T22572] ? _raw_spin_lock+0x170/0x170 [ 2277.387854][T22572] hub_ext_port_status+0x108/0x660 [ 2277.392949][T22572] usb_port_resume+0x28a/0x1cd0 [ 2277.397768][T22572] ? _raw_spin_lock_irq+0xa2/0x180 [ 2277.402862][T22572] ? usb_port_suspend+0x10f0/0x10f0 [ 2277.408044][T22572] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2277.414006][T22572] ? rpm_resume+0xb38/0x19b0 [ 2277.418595][T22572] ? arch_stack_walk+0x78/0xe0 [ 2277.423327][T22572] generic_resume+0x49/0x90 [ 2277.427850][T22572] usb_resume_both+0x2fd/0x9d0 [ 2277.432580][T22572] ? _raw_spin_lock+0xa1/0x170 [ 2277.437312][T22572] __rpm_callback+0x15d/0x4d0 [ 2277.441965][T22572] ? autosuspend_check+0x560/0x560 [ 2277.447070][T22572] rpm_resume+0xf9a/0x19b0 [ 2277.451455][T22572] ? autosuspend_check+0x560/0x560 [ 2277.456546][T22572] ? __pm_runtime_resume+0x90/0x90 [ 2277.461646][T22572] ? _raw_spin_lock+0xa1/0x170 [ 2277.466402][T22572] ? _raw_spin_trylock_bh+0x190/0x190 [ 2277.471791][T22572] ? _raw_spin_lock+0xa1/0x170 [ 2277.476554][T22572] ? _raw_spin_trylock_bh+0x190/0x190 [ 2277.481923][T22572] ? klist_iter_init_node+0x234/0x300 [ 2277.487261][T22572] ? klist_dec_and_del+0x3c/0x380 [ 2277.492261][T22572] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2277.497876][T22572] rpm_resume+0x833/0x19b0 [ 2277.502290][T22572] ? __pm_runtime_resume+0x90/0x90 [ 2277.507365][T22572] ? _raw_spin_lock+0x170/0x170 [ 2277.512179][T22572] ? avc_has_perm+0x15f/0x260 [ 2277.516837][T22572] ? usb_find_interface+0xc8/0x130 [ 2277.521911][T22572] ? usb_altnum_to_altsetting+0x160/0x160 [ 2277.527628][T22572] __pm_runtime_resume+0x6a/0x90 [ 2277.532533][T22572] usb_autopm_get_interface+0x1c/0x50 [ 2277.537895][T22572] usblp_open+0x158/0x410 [ 2277.542191][T22572] ? __module_put_and_exit+0x20/0x20 [ 2277.547440][T22572] ? usblp_ioctl+0x1810/0x1810 [ 2277.552232][T22572] usb_open+0x188/0x1f0 [ 2277.556371][T22572] chrdev_open+0x60a/0x670 [ 2277.560771][T22572] ? cd_forget+0x150/0x150 [ 2277.565183][T22572] ? security_file_open+0x1f8/0x2c0 [ 2277.570349][T22572] ? cd_forget+0x150/0x150 [ 2277.574765][T22572] do_dentry_open+0x8fa/0x1070 [ 2277.579512][T22572] ? finish_open+0xd0/0xd0 [ 2277.583905][T22572] ? vfs_open+0x2b/0x80 [ 2277.588043][T22572] ? memcpy+0x38/0x50 [ 2277.592004][T22572] path_openat+0x1681/0x42d0 [ 2277.596577][T22572] ? stack_trace_save+0x111/0x1e0 [ 2277.601568][T22572] ? stack_trace_snprint+0x150/0x150 [ 2277.606840][T22572] ? do_filp_open+0x430/0x430 [ 2277.611493][T22572] ? __kasan_kmalloc+0x117/0x1b0 [ 2277.616408][T22572] ? kmem_cache_alloc+0x1d5/0x250 [ 2277.621407][T22572] ? getname_flags+0xb8/0x610 [ 2277.626048][T22572] ? do_sys_open+0x32a/0x7a0 [ 2277.630601][T22572] ? do_syscall_64+0xcb/0x150 [ 2277.635257][T22572] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2277.641290][T22572] ? get_pid_task+0x86/0x90 [ 2277.645760][T22572] ? proc_fail_nth_write+0x166/0x200 [ 2277.651012][T22572] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2277.656204][T22572] do_filp_open+0x1f7/0x430 [ 2277.660693][T22572] ? vfs_tmpfile+0x220/0x220 [ 2277.665263][T22572] ? should_fail+0x182/0x860 [ 2277.669825][T22572] ? _raw_spin_trylock_bh+0x190/0x190 [ 2277.675169][T22572] ? _raw_spin_unlock+0x5/0x20 [ 2277.679896][T22572] ? __alloc_fd+0x4e8/0x590 [ 2277.684380][T22572] do_sys_open+0x36f/0x7a0 [ 2277.688771][T22572] ? file_open_root+0x440/0x440 [ 2277.693605][T22572] ? ksys_write+0x237/0x2a0 [ 2277.698074][T22572] do_syscall_64+0xcb/0x150 [ 2277.702556][T22572] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2277.708414][T22572] RIP: 0033:0x417101 [ 2277.712298][T22572] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2277.731867][T22572] RSP: 002b:00007f2a9758f820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2277.740265][T22572] RAX: ffffffffffffffda RBX: 000000000118d080 RCX: 0000000000417101 [ 2277.748220][T22572] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a9758f850 [ 2277.756158][T22572] RBP: 00007f2a9758fca0 R08: 0000000000000000 R09: 000000000000000f [ 2277.764111][T22572] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000006 [ 2277.772064][T22572] R13: 00007ffcd86b281f R14: 00007f2a975909c0 R15: 000000000118d08c [ 2277.791872][T22572] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 2277.922483][ C0] usblp0: nonzero read bulk status received: -71 [ 2277.932554][ T6420] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2278.174531][ T6420] usb 6-1: Using ep0 maxpacket: 32 [ 2278.295565][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2278.306628][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2278.316629][ T6420] usb 6-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 2278.325671][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.336229][ T6420] usb 6-1: config 0 descriptor?? [ 2278.618167][ T6420] usbhid 6-1:0.0: can't add hid device: -71 [ 2278.624263][ T6420] usbhid: probe of 6-1:0.0 failed with error -71 [ 2278.631938][ T6420] usb 6-1: USB disconnect, device number 123 04:05:51 executing program 0 (fault-call:7 fault-nth:7): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x81, 0x0, 0x0, 0x0, 0x0, 0x56101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0x100000001) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e20, 0x1, 0x4e24, 0x400, 0xa, 0x80, 0xa0, 0x88, 0x0, r4}, {0x7, 0x2, 0x5, 0x3, 0x100000001, 0x2, 0x0, 0x45}, {0x6, 0x3, 0x81, 0xe5b}, 0x9, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d2, 0xff}, 0xa, @in6=@mcast2, 0x34ff, 0x2, 0x3, 0x7, 0x8, 0x6, 0x3}}, 0xe8) r5 = openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x200) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x801) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1}}) fcntl$setpipe(r6, 0x407, 0x7) 04:05:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x9000000, 0x0, 0x0, 0xffffffff}}) 04:05:51 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x4, 0x0, 0xffffffff}}) 04:05:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000220008000000000000000053"}) syz_open_pts(r5, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x80001) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000200)={0xe, {0x2, 0x82, 0x9, 0x9c, "dd705dd91e28e4d5a5453f828430459240940e4e92d8a3d68c9171863a59d6a6d3d1a6fdaf5100418452ca49a7c00f93fd77da4561438c668dcd312285602035a50a230ed6deb43b04d88c721aa17f0e709c3f06dd4eb1887a096a4dc096c4c55b04374252d1230ddcfc6992508fe5df81afe872235d212a64eaf49ee6fdffc296a8f5a71b47620b0ff4d892ce31ed7757d27b405c02fe0ca552647c"}}, 0xa8) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}]}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x18102, 0x0) getsockname$netlink(r3, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 04:05:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000000c0)={0x0, 0x2, 0x0, [0x100, 0xc44, 0x19, 0x0, 0xfff], [0x9, 0x2, 0xffff, 0x401, 0x3, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x3, 0x7, 0x2, 0x841e, 0x200, 0x1, 0xae8b, 0x4, 0x3, 0x3000000000000000, 0x2, 0x1, 0x2a68, 0x80000001, 0x14000000000000, 0xffff, 0xaf, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffb, 0x5, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0xfffffffffffffffb, 0x3, 0x4, 0x80000000, 0x2, 0xfffffffffffffffb, 0x6, 0x4, 0xfffffffffffeffff, 0x7, 0x0, 0x7fff, 0x80000001, 0x10001, 0x1, 0x5, 0x8, 0x9, 0x2, 0x8, 0x80, 0x9, 0x80, 0x7, 0x9, 0x8000, 0x1, 0x9, 0x4aedf4c0, 0x3, 0x2, 0x0, 0x831c, 0xfff, 0xffff, 0x46, 0x9, 0x7fffffff, 0xe53, 0x1f, 0x8, 0x2, 0x5c2baf16, 0x37, 0x0, 0xfe8, 0x5, 0x4, 0x63f, 0x20, 0x4, 0x1, 0x43c, 0x4, 0x80000000, 0x5, 0xffff, 0x0, 0x781989f7, 0x6495, 0x100, 0x1f, 0x8, 0x2, 0x100000001, 0x8, 0x800, 0xffffffffffffffff, 0x6f8, 0x8, 0x9, 0x100, 0x7, 0x5ea, 0x7f, 0x2, 0x6, 0x7, 0x394, 0x9, 0x400, 0x9722, 0x0, 0x400, 0x2, 0xe2]}) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000300016802c00018045000100000000800090cd5986c80000000000000000000000000000000000000000000032cb5a4fb0215e4c", @ANYRES32=0x0, @ANYBLOB="bc9eba513619d7636b9f35c6e0d48254c3366eb585132bdf840d502ad046819728626476e7b94ec64195091fff75c7fd339ca0555605dd51d1b3af677f5281f61134e02b43cb3e7bd9cabd10b2cb2cfcf7f351a6167859181579e4cb91806d1527eedd66d2e58947d1fbc2258f815f1118500383bad7621a589e8e2ff30d6cd62493ef9fe77a349f9122dda6d79cef"], 0x58}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000540)={@loopback}, 0x14) ioctl$FITHAW(r2, 0xc0045878) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) utime(&(0x7f0000000040)='./file0\x00', 0x0) 04:05:51 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x5, 0x0, 0xffffffff}}) 04:05:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xa000000, 0x0, 0x0, 0xffffffff}}) [ 2278.940906][T31849] usb 1-1: USB disconnect, device number 22 [ 2278.948875][T31849] usblp0: removed 04:05:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 04:05:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xb000000, 0x0, 0x0, 0xffffffff}}) 04:05:51 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x6, 0x0, 0xffffffff}}) 04:05:51 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xc000000, 0x0, 0x0, 0xffffffff}}) [ 2279.047417][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2279.313729][T31849] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2279.555726][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2279.676756][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2279.687843][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2279.698817][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2279.709241][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2279.797946][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2279.807021][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2279.815837][T31849] usb 1-1: SerialNumber: syz [ 2279.838109][T22594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2279.844945][T22594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2279.858623][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2279.864534][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2280.074234][T22594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2280.081518][T22594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2280.312928][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2280.496471][T22594] FAULT_INJECTION: forcing a failure. [ 2280.496471][T22594] name failslab, interval 1, probability 0, space 0, times 0 [ 2280.509207][T22594] CPU: 0 PID: 22594 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2280.520723][T22594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2280.530753][T22594] Call Trace: [ 2280.534016][T22594] dump_stack+0x1b0/0x21e [ 2280.538319][T22594] ? devkmsg_release+0x11c/0x11c [ 2280.543234][T22594] ? show_regs_print_info+0x12/0x12 [ 2280.548424][T22594] should_fail+0x6fb/0x860 [ 2280.552817][T22594] ? setup_fault_attr+0x2b0/0x2b0 [ 2280.557818][T22594] ? setup_fault_attr+0x2b0/0x2b0 [ 2280.562839][T22594] ? kick_hub_wq+0xdb/0x1a0 [ 2280.567367][T22594] ? usb_alloc_urb+0x3d/0x140 [ 2280.572017][T22594] should_failslab+0x5/0x20 [ 2280.576509][T22594] __kmalloc+0x5f/0x2c0 [ 2280.580649][T22594] usb_alloc_urb+0x3d/0x140 [ 2280.585130][T22594] usb_control_msg+0x16e/0x480 [ 2280.589863][T22594] ? usb_anchor_empty+0x40/0x40 [ 2280.594704][T22594] ? __pm_runtime_resume+0x90/0x90 [ 2280.599789][T22594] ? _raw_spin_lock+0x170/0x170 [ 2280.604667][T22594] hub_ext_port_status+0x108/0x660 [ 2280.609763][T22594] usb_port_resume+0x28a/0x1cd0 [ 2280.614593][T22594] ? _raw_spin_lock_irq+0xa2/0x180 [ 2280.619693][T22594] ? usb_port_suspend+0x10f0/0x10f0 [ 2280.624869][T22594] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2280.630826][T22594] ? rpm_resume+0xb38/0x19b0 [ 2280.635387][T22594] ? arch_stack_walk+0x78/0xe0 [ 2280.640119][T22594] generic_resume+0x49/0x90 [ 2280.644610][T22594] usb_resume_both+0x2fd/0x9d0 [ 2280.649347][T22594] ? _raw_spin_lock+0xa1/0x170 [ 2280.654080][T22594] __rpm_callback+0x15d/0x4d0 [ 2280.658727][T22594] ? autosuspend_check+0x560/0x560 [ 2280.663823][T22594] rpm_resume+0xf9a/0x19b0 [ 2280.668222][T22594] ? autosuspend_check+0x560/0x560 [ 2280.673302][T22594] ? __pm_runtime_resume+0x90/0x90 [ 2280.678399][T22594] ? _raw_spin_lock+0xa1/0x170 [ 2280.683159][T22594] ? _raw_spin_trylock_bh+0x190/0x190 [ 2280.688499][T22594] ? _raw_spin_lock+0xa1/0x170 [ 2280.693257][T22594] ? _raw_spin_trylock_bh+0x190/0x190 [ 2280.698595][T22594] ? klist_iter_init_node+0x234/0x300 [ 2280.703935][T22594] ? klist_dec_and_del+0x3c/0x380 [ 2280.708953][T22594] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2280.714560][T22594] rpm_resume+0x833/0x19b0 [ 2280.719016][T22594] ? __pm_runtime_resume+0x90/0x90 [ 2280.724111][T22594] ? _raw_spin_lock+0x170/0x170 [ 2280.728947][T22594] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2280.734549][T22594] ? usb_find_interface+0xc8/0x130 [ 2280.739641][T22594] ? usb_altnum_to_altsetting+0x160/0x160 [ 2280.745365][T22594] __pm_runtime_resume+0x6a/0x90 [ 2280.750284][T22594] usb_autopm_get_interface+0x1c/0x50 [ 2280.755631][T22594] usblp_open+0x158/0x410 [ 2280.759942][T22594] ? __module_put_and_exit+0x20/0x20 [ 2280.765195][T22594] ? usblp_ioctl+0x1810/0x1810 [ 2280.769935][T22594] usb_open+0x188/0x1f0 [ 2280.774064][T22594] chrdev_open+0x60a/0x670 [ 2280.778448][T22594] ? cd_forget+0x150/0x150 [ 2280.782855][T22594] ? security_file_open+0x1f8/0x2c0 [ 2280.788059][T22594] ? cd_forget+0x150/0x150 [ 2280.792483][T22594] do_dentry_open+0x8fa/0x1070 [ 2280.797247][T22594] ? finish_open+0xd0/0xd0 [ 2280.801660][T22594] ? vfs_open+0x2b/0x80 [ 2280.805891][T22594] ? memcpy+0x38/0x50 [ 2280.809841][T22594] path_openat+0x1681/0x42d0 [ 2280.814418][T22594] ? stack_trace_save+0x111/0x1e0 [ 2280.819410][T22594] ? stack_trace_snprint+0x150/0x150 [ 2280.824674][T22594] ? do_filp_open+0x430/0x430 [ 2280.829330][T22594] ? __kasan_kmalloc+0x117/0x1b0 [ 2280.834243][T22594] ? kmem_cache_alloc+0x1d5/0x250 [ 2280.839269][T22594] ? getname_flags+0xb8/0x610 [ 2280.843939][T22594] ? do_sys_open+0x32a/0x7a0 [ 2280.848520][T22594] ? do_syscall_64+0xcb/0x150 [ 2280.853185][T22594] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2280.859257][T22594] ? get_pid_task+0x86/0x90 [ 2280.863735][T22594] ? proc_fail_nth_write+0x166/0x200 [ 2280.868989][T22594] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2280.874159][T22594] do_filp_open+0x1f7/0x430 [ 2280.878628][T22594] ? vfs_tmpfile+0x220/0x220 [ 2280.883203][T22594] ? should_fail+0x182/0x860 [ 2280.887765][T22594] ? _raw_spin_trylock_bh+0x190/0x190 [ 2280.893105][T22594] ? _raw_spin_unlock+0x5/0x20 [ 2280.897835][T22594] ? __alloc_fd+0x4e8/0x590 [ 2280.902309][T22594] do_sys_open+0x36f/0x7a0 [ 2280.906711][T22594] ? file_open_root+0x440/0x440 [ 2280.911528][T22594] ? ksys_write+0x237/0x2a0 [ 2280.916054][T22594] do_syscall_64+0xcb/0x150 [ 2280.920530][T22594] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2280.926416][T22594] RIP: 0033:0x417101 [ 2280.930304][T22594] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2280.949891][T22594] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2280.958283][T22594] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2280.966236][T22594] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2280.974173][T22594] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2280.982129][T22594] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000007 [ 2280.990072][T22594] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2281.007967][T22594] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 2281.131026][T31849] usb 1-1: USB disconnect, device number 23 [ 2281.149098][T31849] usblp0: removed 04:05:54 executing program 0 (fault-call:7 fault-nth:8): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:54 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x7, 0x0, 0xffffffff}}) 04:05:54 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xd000000, 0x0, 0x0, 0xffffffff}}) 04:05:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x24ab41, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6282000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000180)=0x9, 0x4) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) 04:05:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff04) 04:05:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f0000000100)='./file0\x00', 0x349) vmsplice(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)="28e15a2ea17dea1ec776b0771b82f70454dcd7aa99764179bae40113f00ab25ec022967333e87642a927037efbc01d2dc0746d25aa360c68105789536fbebfc68956a6aad3706174c755815c61765a37543d1dfe211ea164adcba15e01d75a51d1743cfb2e2f65e3e592377200e94445ca9f95a77256d0b05270ef5b980ecf3f12df296a64b0bf49540ac705", 0x8c}, {0xffffffffffffffff}, {&(0x7f0000000400)="1cdab755189123133405a4d1029edc13e23b9fc5f88e8c16206661363c6e6ea4df2eba10ce9663178abfacad76ee7a5b3b645de086c1c2cb3159aaebcbaaa85cf12c9bb14c375ce74d0ca256975154f5d7a1972a2f93c92dd9c3cbcf76106eda25305bbe73bde38d16b4086af9795f4a1e45e628343053d12d0d39edf995b0d0f006cd536242c1556f01f8929799", 0x8e}, {&(0x7f00000002c0)="b6a2df41f61129f6ecad7fb4b152352ba08f4389f8a31afb405f0d5df21408899be2a8592f0db1d7a00aeacabfbb68cd33287d0f7983e3a3c7b508701c", 0x3d}], 0x4, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x1, 0xfe, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x41) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xd000000, &(0x7f0000000600)=ANY=[@ANYBLOB="a82e97455e3d71b36d12ea48a45c83153d75496ae4a07d2c332dbf45b4cb5c97f3883a195d5dea1cbfe6f8e8dd33411792e9a249975835cd5566c2dd1c0ee11d1d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="3074178436047647b1877f4654cdab2a8660ab036ca2407f831016ace734cb39262b00f7e48c8f1c8fa1abc53d9c96ee695cb6f7a69f508e59cf03f34ed44165211c3b63e3d462edc99c9fef3a3624"]) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080), 0x4) 04:05:54 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x8, 0x0, 0xffffffff}}) 04:05:54 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0xe000000, 0x0, 0x0, 0xffffffff}}) 04:05:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) [ 2281.733251][T22693] print_req_error: 26 callbacks suppressed [ 2281.733263][T22693] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:54 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x9, 0x0, 0xffffffff}}) 04:05:54 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x10000000, 0x0, 0x0, 0xffffffff}}) [ 2281.778002][T22700] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2281.826166][T22712] fuse: Unknown parameter '¨.—E^' [ 2281.851777][T22696] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2281.881805][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2281.895204][ T87] buffer_io_error: 8 callbacks suppressed 04:05:54 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xa, 0x0, 0xffffffff}}) [ 2281.895211][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2281.942706][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2281.954390][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2281.955299][T31849] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2281.987663][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2281.999525][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2282.089542][T22696] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2282.102867][T22693] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2282.116316][T22700] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2282.129065][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2282.140902][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2282.150178][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2282.161578][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2282.178472][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2282.189069][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2282.201555][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2282.227359][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2282.348390][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2282.359540][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2282.370544][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2282.381121][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2282.469362][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2282.478700][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2282.492855][T31849] usb 1-1: SerialNumber: syz [ 2282.509663][T22683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2282.520446][T22683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2282.532581][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2282.538861][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2282.558999][T22710] fuse: Unknown parameter '¨.—E^' [ 2282.740802][T22683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2282.747964][T22683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2282.994530][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2283.177491][T22683] FAULT_INJECTION: forcing a failure. [ 2283.177491][T22683] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.190139][T22683] CPU: 0 PID: 22683 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2283.201667][T22683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2283.211706][T22683] Call Trace: [ 2283.214969][T22683] dump_stack+0x1b0/0x21e [ 2283.219270][T22683] ? devkmsg_release+0x11c/0x11c [ 2283.224180][T22683] ? show_regs_print_info+0x12/0x12 [ 2283.229461][T22683] ? mon_bin_event+0xc2e/0x24e0 [ 2283.234311][T22683] should_fail+0x6fb/0x860 [ 2283.238698][T22683] ? setup_fault_attr+0x2b0/0x2b0 [ 2283.243692][T22683] ? _raw_spin_lock+0xa1/0x170 [ 2283.248431][T22683] ? _raw_spin_trylock_bh+0x190/0x190 [ 2283.253782][T22683] ? kzalloc+0x1b/0x30 [ 2283.257820][T22683] should_failslab+0x5/0x20 [ 2283.262323][T22683] __kmalloc+0x5f/0x2c0 [ 2283.266458][T22683] kzalloc+0x1b/0x30 [ 2283.270328][T22683] usb_hcd_submit_urb+0x8b9/0x1b20 [ 2283.275426][T22683] ? generic_resume+0x49/0x90 [ 2283.280150][T22683] ? usb_resume_both+0x2fd/0x9d0 [ 2283.285207][T22683] ? __rpm_callback+0x15d/0x4d0 [ 2283.290040][T22683] ? rpm_resume+0x833/0x19b0 [ 2283.294599][T22683] ? usblp_open+0x158/0x410 [ 2283.299070][T22683] ? path_openat+0x1681/0x42d0 [ 2283.303894][T22683] ? do_syscall_64+0xcb/0x150 [ 2283.308579][T22683] ? usb_hcd_map_urb_for_dma+0x12e0/0x12e0 [ 2283.314355][T22683] ? do_syscall_64+0xcb/0x150 [ 2283.319002][T22683] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2283.325034][T22683] ? usb_submit_urb+0xc5b/0x13e0 [ 2283.329939][T22683] usb_start_wait_urb+0x11b/0x370 [ 2283.334943][T22683] ? usb_api_blocking_completion+0xa0/0xa0 [ 2283.340730][T22683] ? __kmalloc+0xf7/0x2c0 [ 2283.345028][T22683] ? usb_alloc_urb+0x3d/0x140 [ 2283.349698][T22683] usb_control_msg+0x289/0x480 [ 2283.354437][T22683] ? usb_anchor_empty+0x40/0x40 [ 2283.359299][T22683] ? __pm_runtime_resume+0x90/0x90 [ 2283.364378][T22683] ? _raw_spin_lock+0x170/0x170 [ 2283.369236][T22683] hub_ext_port_status+0x108/0x660 [ 2283.374348][T22683] usb_port_resume+0x28a/0x1cd0 [ 2283.379173][T22683] ? _raw_spin_lock_irq+0xa2/0x180 [ 2283.384265][T22683] ? usb_port_suspend+0x10f0/0x10f0 [ 2283.389444][T22683] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2283.395439][T22683] ? rpm_resume+0xb38/0x19b0 [ 2283.400009][T22683] ? arch_stack_walk+0x78/0xe0 [ 2283.404743][T22683] generic_resume+0x49/0x90 [ 2283.409222][T22683] usb_resume_both+0x2fd/0x9d0 [ 2283.413954][T22683] ? _raw_spin_lock+0xa1/0x170 [ 2283.418696][T22683] __rpm_callback+0x15d/0x4d0 [ 2283.423344][T22683] ? autosuspend_check+0x560/0x560 [ 2283.428432][T22683] rpm_resume+0xf9a/0x19b0 [ 2283.432836][T22683] ? autosuspend_check+0x560/0x560 [ 2283.437929][T22683] ? __pm_runtime_resume+0x90/0x90 [ 2283.443022][T22683] ? _raw_spin_lock+0xa1/0x170 [ 2283.447755][T22683] ? _raw_spin_trylock_bh+0x190/0x190 [ 2283.453097][T22683] ? _raw_spin_lock+0xa1/0x170 [ 2283.457853][T22683] ? _raw_spin_trylock_bh+0x190/0x190 [ 2283.463231][T22683] ? klist_iter_init_node+0x234/0x300 [ 2283.468578][T22683] ? klist_dec_and_del+0x3c/0x380 [ 2283.473608][T22683] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2283.479213][T22683] rpm_resume+0x833/0x19b0 [ 2283.483669][T22683] ? __pm_runtime_resume+0x90/0x90 [ 2283.488776][T22683] ? _raw_spin_lock+0x170/0x170 [ 2283.493617][T22683] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2283.499226][T22683] ? usb_find_interface+0xc8/0x130 [ 2283.504315][T22683] ? usb_altnum_to_altsetting+0x160/0x160 [ 2283.510056][T22683] __pm_runtime_resume+0x6a/0x90 [ 2283.514979][T22683] usb_autopm_get_interface+0x1c/0x50 [ 2283.520318][T22683] usblp_open+0x158/0x410 [ 2283.524647][T22683] ? __module_put_and_exit+0x20/0x20 [ 2283.529920][T22683] ? usblp_ioctl+0x1810/0x1810 [ 2283.534651][T22683] usb_open+0x188/0x1f0 [ 2283.538791][T22683] chrdev_open+0x60a/0x670 [ 2283.543226][T22683] ? cd_forget+0x150/0x150 [ 2283.547610][T22683] ? security_file_open+0x1f8/0x2c0 [ 2283.552774][T22683] ? cd_forget+0x150/0x150 [ 2283.557164][T22683] do_dentry_open+0x8fa/0x1070 [ 2283.561907][T22683] ? finish_open+0xd0/0xd0 [ 2283.566313][T22683] ? vfs_open+0x2b/0x80 [ 2283.570462][T22683] ? memcpy+0x38/0x50 [ 2283.574441][T22683] path_openat+0x1681/0x42d0 [ 2283.579017][T22683] ? stack_trace_save+0x111/0x1e0 [ 2283.584009][T22683] ? stack_trace_snprint+0x150/0x150 [ 2283.589280][T22683] ? do_filp_open+0x430/0x430 [ 2283.593941][T22683] ? __kasan_kmalloc+0x117/0x1b0 [ 2283.598852][T22683] ? kmem_cache_alloc+0x1d5/0x250 [ 2283.603847][T22683] ? getname_flags+0xb8/0x610 [ 2283.608515][T22683] ? do_sys_open+0x32a/0x7a0 [ 2283.613076][T22683] ? do_syscall_64+0xcb/0x150 [ 2283.617763][T22683] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2283.623797][T22683] ? get_pid_task+0x86/0x90 [ 2283.628272][T22683] ? proc_fail_nth_write+0x166/0x200 [ 2283.633537][T22683] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2283.638714][T22683] do_filp_open+0x1f7/0x430 [ 2283.643204][T22683] ? vfs_tmpfile+0x220/0x220 [ 2283.647785][T22683] ? should_fail+0x182/0x860 [ 2283.652342][T22683] ? _raw_spin_trylock_bh+0x190/0x190 [ 2283.657696][T22683] ? _raw_spin_unlock+0x5/0x20 [ 2283.662446][T22683] ? __alloc_fd+0x4e8/0x590 [ 2283.666914][T22683] do_sys_open+0x36f/0x7a0 [ 2283.671312][T22683] ? file_open_root+0x440/0x440 [ 2283.676135][T22683] ? ksys_write+0x237/0x2a0 [ 2283.680644][T22683] do_syscall_64+0xcb/0x150 [ 2283.685124][T22683] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2283.690996][T22683] RIP: 0033:0x417101 [ 2283.694914][T22683] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2283.714518][T22683] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2283.722893][T22683] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2283.730847][T22683] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2283.738788][T22683] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2283.746726][T22683] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000008 [ 2283.754687][T22683] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2283.770444][T22683] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 2283.893202][T31849] usb 1-1: USB disconnect, device number 24 [ 2283.911431][T31849] usblp0: removed 04:05:57 executing program 0 (fault-call:7 fault-nth:9): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:57 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x11000000, 0x0, 0x0, 0xffffffff}}) 04:05:57 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xb, 0x0, 0xffffffff}}) 04:05:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) 04:05:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff04) 04:05:57 executing program 5: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000080)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') clock_gettime(0x0, &(0x7f00000000c0)) r3 = dup2(r1, r0) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000016c0)=""/253, &(0x7f00000017c0)=0xfd) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{}, {r4, r5/1000+60000}}, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) fcntl$setsig(r6, 0xa, 0x17) lsetxattr$security_ima(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000680)='security.ima\x00', &(0x7f00000000c0)=ANY=[], 0x29, 0x0) unlink(&(0x7f0000000240)='./file1\x00') 04:05:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d5, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005000000000000001c00040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}]) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) read$rfkill(r4, &(0x7f0000000080), 0x8) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffff6) sendfile(r0, r5, 0x0, 0xffffffff) 04:05:57 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xc, 0x0, 0xffffffff}}) 04:05:57 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x12000000, 0x0, 0x0, 0xffffffff}}) 04:05:57 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xd, 0x0, 0xffffffff}}) 04:05:57 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x40000000, 0x0, 0x0, 0xffffffff}}) 04:05:57 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x48000000, 0x0, 0x0, 0xffffffff}}) [ 2284.542342][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2284.727608][T31849] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2284.969565][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2285.090641][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2285.101860][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2285.113024][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2285.123496][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2285.211795][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2285.221111][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2285.230003][T31849] usb 1-1: SerialNumber: syz [ 2285.251889][T22768] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2285.258647][T22768] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2285.292686][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2285.298686][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2285.494350][T22768] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2285.501137][T22768] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2285.746967][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2285.929312][T22768] FAULT_INJECTION: forcing a failure. [ 2285.929312][T22768] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.942140][T22768] CPU: 0 PID: 22768 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2285.953688][T22768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2285.963712][T22768] Call Trace: [ 2285.967027][T22768] dump_stack+0x1b0/0x21e [ 2285.971331][T22768] ? devkmsg_release+0x11c/0x11c [ 2285.976250][T22768] ? show_regs_print_info+0x12/0x12 [ 2285.981436][T22768] should_fail+0x6fb/0x860 [ 2285.985820][T22768] ? setup_fault_attr+0x2b0/0x2b0 [ 2285.990840][T22768] ? usb_control_msg+0xb7/0x480 [ 2285.995665][T22768] should_failslab+0x5/0x20 [ 2286.000253][T22768] kmem_cache_alloc_trace+0x39/0x270 [ 2286.005510][T22768] ? usb_anchor_empty+0x40/0x40 [ 2286.010326][T22768] usb_control_msg+0xb7/0x480 [ 2286.015011][T22768] ? usb_anchor_empty+0x40/0x40 [ 2286.019851][T22768] ? hub_ext_port_status+0x46c/0x660 [ 2286.025106][T22768] usb_port_resume+0x43b/0x1cd0 [ 2286.029926][T22768] ? _raw_spin_lock_irq+0xa2/0x180 [ 2286.035011][T22768] ? usb_port_suspend+0x10f0/0x10f0 [ 2286.040179][T22768] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2286.046151][T22768] ? rpm_resume+0xb38/0x19b0 [ 2286.050713][T22768] ? arch_stack_walk+0x78/0xe0 [ 2286.055462][T22768] generic_resume+0x49/0x90 [ 2286.059941][T22768] usb_resume_both+0x2fd/0x9d0 [ 2286.064692][T22768] ? _raw_spin_lock+0xa1/0x170 [ 2286.069423][T22768] __rpm_callback+0x15d/0x4d0 [ 2286.074103][T22768] ? autosuspend_check+0x560/0x560 [ 2286.079188][T22768] rpm_resume+0xf9a/0x19b0 [ 2286.083600][T22768] ? autosuspend_check+0x560/0x560 [ 2286.088711][T22768] ? __pm_runtime_resume+0x90/0x90 [ 2286.093789][T22768] ? _raw_spin_lock+0xa1/0x170 [ 2286.098530][T22768] ? _raw_spin_trylock_bh+0x190/0x190 [ 2286.103895][T22768] ? _raw_spin_lock+0xa1/0x170 [ 2286.108628][T22768] ? _raw_spin_trylock_bh+0x190/0x190 [ 2286.113977][T22768] ? klist_iter_init_node+0x234/0x300 [ 2286.119324][T22768] ? klist_dec_and_del+0x3c/0x380 [ 2286.124335][T22768] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2286.129942][T22768] rpm_resume+0x833/0x19b0 [ 2286.134341][T22768] ? __pm_runtime_resume+0x90/0x90 [ 2286.139451][T22768] ? _raw_spin_lock+0x170/0x170 [ 2286.144269][T22768] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2286.149876][T22768] ? usb_find_interface+0xc8/0x130 [ 2286.154957][T22768] ? usb_altnum_to_altsetting+0x160/0x160 [ 2286.160654][T22768] __pm_runtime_resume+0x6a/0x90 [ 2286.165565][T22768] usb_autopm_get_interface+0x1c/0x50 [ 2286.170937][T22768] usblp_open+0x158/0x410 [ 2286.175253][T22768] ? __module_put_and_exit+0x20/0x20 [ 2286.180519][T22768] ? usblp_ioctl+0x1810/0x1810 [ 2286.185258][T22768] usb_open+0x188/0x1f0 [ 2286.189392][T22768] chrdev_open+0x60a/0x670 [ 2286.193803][T22768] ? cd_forget+0x150/0x150 [ 2286.198223][T22768] ? security_file_open+0x1f8/0x2c0 [ 2286.203416][T22768] ? cd_forget+0x150/0x150 [ 2286.207829][T22768] do_dentry_open+0x8fa/0x1070 [ 2286.212588][T22768] ? finish_open+0xd0/0xd0 [ 2286.217014][T22768] ? vfs_open+0x2b/0x80 [ 2286.221152][T22768] ? memcpy+0x38/0x50 [ 2286.225113][T22768] path_openat+0x1681/0x42d0 [ 2286.229675][T22768] ? stack_trace_save+0x111/0x1e0 [ 2286.234715][T22768] ? stack_trace_snprint+0x150/0x150 [ 2286.239980][T22768] ? do_filp_open+0x430/0x430 [ 2286.244663][T22768] ? __kasan_kmalloc+0x117/0x1b0 [ 2286.249571][T22768] ? kmem_cache_alloc+0x1d5/0x250 [ 2286.254565][T22768] ? getname_flags+0xb8/0x610 [ 2286.259231][T22768] ? do_sys_open+0x32a/0x7a0 [ 2286.263791][T22768] ? do_syscall_64+0xcb/0x150 [ 2286.268438][T22768] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2286.274500][T22768] ? get_pid_task+0x86/0x90 [ 2286.278981][T22768] ? proc_fail_nth_write+0x166/0x200 [ 2286.284257][T22768] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2286.289449][T22768] do_filp_open+0x1f7/0x430 [ 2286.294021][T22768] ? vfs_tmpfile+0x220/0x220 [ 2286.298605][T22768] ? should_fail+0x182/0x860 [ 2286.303194][T22768] ? _raw_spin_trylock_bh+0x190/0x190 [ 2286.308534][T22768] ? _raw_spin_unlock+0x5/0x20 [ 2286.313279][T22768] ? __alloc_fd+0x4e8/0x590 [ 2286.317754][T22768] do_sys_open+0x36f/0x7a0 [ 2286.322149][T22768] ? file_open_root+0x440/0x440 [ 2286.326985][T22768] ? ksys_write+0x237/0x2a0 [ 2286.331579][T22768] do_syscall_64+0xcb/0x150 [ 2286.336155][T22768] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2286.342014][T22768] RIP: 0033:0x417101 [ 2286.345897][T22768] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2286.365486][T22768] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2286.373861][T22768] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2286.381806][T22768] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2286.389757][T22768] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2286.397696][T22768] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000009 [ 2286.405635][T22768] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2286.422026][T31849] usb 1-1: USB disconnect, device number 25 [ 2286.428579][T31849] usblp0: removed 04:05:59 executing program 0 (fault-call:7 fault-nth:10): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:05:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xe, 0x0, 0xffffffff}}) 04:05:59 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x4c000000, 0x0, 0x0, 0xffffffff}}) 04:05:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x517}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 04:05:59 executing program 5: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 04:05:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff04) 04:05:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x10, 0x0, 0xffffffff}}) 04:05:59 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x68000000, 0x0, 0x0, 0xffffffff}}) 04:05:59 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x6c000000, 0x0, 0x0, 0xffffffff}}) 04:05:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x11, 0x0, 0xffffffff}}) [ 2287.031252][T22854] print_req_error: 26 callbacks suppressed [ 2287.031264][T22854] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2287.052711][T22859] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:05:59 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x74000000, 0x0, 0x0, 0xffffffff}}) 04:05:59 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x12, 0x0, 0xffffffff}}) [ 2287.090401][T22856] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2287.120820][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2287.132276][ T87] buffer_io_error: 8 callbacks suppressed [ 2287.132284][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2287.168271][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2287.179331][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2287.193154][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2287.204680][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2287.217782][ T6420] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2287.241338][T22859] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2287.254832][T22856] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2287.268214][T22854] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2287.280596][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2287.292006][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2287.301515][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2287.313060][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2287.329547][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2287.338462][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2287.348920][T31849] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2287.354791][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2287.371146][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2287.590789][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2287.631154][ T6420] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2287.638905][ T6420] usb 6-1: can't read configurations, error -61 [ 2287.711822][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2287.723027][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2287.734173][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2287.744646][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2287.792430][ T6420] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2287.832842][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2287.841931][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2287.850578][T31849] usb 1-1: SerialNumber: syz [ 2287.873137][T22847] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2287.880153][T22847] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2287.893575][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2287.899541][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2288.108679][T22847] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2288.116079][T22847] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2288.205833][ T6420] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2288.213525][ T6420] usb 6-1: can't read configurations, error -61 [ 2288.220106][ T6420] usb usb6-port1: attempt power cycle [ 2288.347950][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2288.531131][T22847] FAULT_INJECTION: forcing a failure. [ 2288.531131][T22847] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.544215][T22847] CPU: 0 PID: 22847 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2288.555736][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.565791][T22847] Call Trace: [ 2288.569061][T22847] dump_stack+0x1b0/0x21e [ 2288.573380][T22847] ? devkmsg_release+0x11c/0x11c [ 2288.578284][T22847] ? show_regs_print_info+0x12/0x12 [ 2288.583463][T22847] ? _raw_spin_lock+0xa1/0x170 [ 2288.588219][T22847] should_fail+0x6fb/0x860 [ 2288.592621][T22847] ? setup_fault_attr+0x2b0/0x2b0 [ 2288.597669][T22847] ? ___slab_alloc+0x297/0x450 [ 2288.602500][T22847] ? usb_alloc_urb+0x3d/0x140 [ 2288.607156][T22847] should_failslab+0x5/0x20 [ 2288.611630][T22847] __kmalloc+0x5f/0x2c0 [ 2288.615808][T22847] usb_alloc_urb+0x3d/0x140 [ 2288.620308][T22847] usb_control_msg+0x16e/0x480 [ 2288.625055][T22847] ? usb_anchor_empty+0x40/0x40 [ 2288.629874][T22847] ? hub_ext_port_status+0x46c/0x660 [ 2288.635136][T22847] usb_port_resume+0x43b/0x1cd0 [ 2288.639971][T22847] ? _raw_spin_lock_irq+0xa2/0x180 [ 2288.645052][T22847] ? usb_port_suspend+0x10f0/0x10f0 [ 2288.650223][T22847] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2288.656192][T22847] ? rpm_resume+0xb38/0x19b0 [ 2288.660766][T22847] ? arch_stack_walk+0x78/0xe0 [ 2288.665499][T22847] generic_resume+0x49/0x90 [ 2288.669971][T22847] usb_resume_both+0x2fd/0x9d0 [ 2288.674710][T22847] ? _raw_spin_lock+0xa1/0x170 [ 2288.679450][T22847] __rpm_callback+0x15d/0x4d0 [ 2288.684126][T22847] ? autosuspend_check+0x560/0x560 [ 2288.689218][T22847] rpm_resume+0xf9a/0x19b0 [ 2288.693610][T22847] ? autosuspend_check+0x560/0x560 [ 2288.698692][T22847] ? __pm_runtime_resume+0x90/0x90 [ 2288.703808][T22847] ? _raw_spin_lock+0xa1/0x170 [ 2288.708566][T22847] ? _raw_spin_trylock_bh+0x190/0x190 [ 2288.713909][T22847] ? _raw_spin_lock+0xa1/0x170 [ 2288.718657][T22847] ? _raw_spin_trylock_bh+0x190/0x190 [ 2288.724005][T22847] ? klist_iter_init_node+0x234/0x300 [ 2288.729362][T22847] ? klist_dec_and_del+0x3c/0x380 [ 2288.734514][T22847] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2288.740142][T22847] rpm_resume+0x833/0x19b0 [ 2288.744541][T22847] ? __pm_runtime_resume+0x90/0x90 [ 2288.749818][T22847] ? _raw_spin_lock+0x170/0x170 [ 2288.754683][T22847] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2288.760285][T22847] ? usb_find_interface+0xc8/0x130 [ 2288.765518][T22847] ? usb_altnum_to_altsetting+0x160/0x160 [ 2288.771210][T22847] __pm_runtime_resume+0x6a/0x90 [ 2288.776130][T22847] usb_autopm_get_interface+0x1c/0x50 [ 2288.781472][T22847] usblp_open+0x158/0x410 [ 2288.785773][T22847] ? __module_put_and_exit+0x20/0x20 [ 2288.791026][T22847] ? usblp_ioctl+0x1810/0x1810 [ 2288.795760][T22847] usb_open+0x188/0x1f0 [ 2288.799887][T22847] chrdev_open+0x60a/0x670 [ 2288.804288][T22847] ? cd_forget+0x150/0x150 [ 2288.808741][T22847] ? security_file_open+0x1f8/0x2c0 [ 2288.813952][T22847] ? cd_forget+0x150/0x150 [ 2288.818402][T22847] do_dentry_open+0x8fa/0x1070 [ 2288.823174][T22847] ? finish_open+0xd0/0xd0 [ 2288.827561][T22847] ? vfs_open+0x2b/0x80 [ 2288.831692][T22847] ? memcpy+0x38/0x50 [ 2288.835754][T22847] path_openat+0x1681/0x42d0 [ 2288.840343][T22847] ? stack_trace_save+0x111/0x1e0 [ 2288.845347][T22847] ? stack_trace_snprint+0x150/0x150 [ 2288.850665][T22847] ? do_filp_open+0x430/0x430 [ 2288.855429][T22847] ? __kasan_kmalloc+0x117/0x1b0 [ 2288.860369][T22847] ? kmem_cache_alloc+0x1d5/0x250 [ 2288.865374][T22847] ? getname_flags+0xb8/0x610 [ 2288.870019][T22847] ? do_sys_open+0x32a/0x7a0 [ 2288.874578][T22847] ? do_syscall_64+0xcb/0x150 [ 2288.879228][T22847] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2288.885286][T22847] ? get_pid_task+0x86/0x90 [ 2288.889798][T22847] ? proc_fail_nth_write+0x166/0x200 [ 2288.895065][T22847] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2288.900250][T22847] do_filp_open+0x1f7/0x430 [ 2288.904736][T22847] ? vfs_tmpfile+0x220/0x220 [ 2288.909326][T22847] ? should_fail+0x182/0x860 [ 2288.913900][T22847] ? _raw_spin_trylock_bh+0x190/0x190 [ 2288.919255][T22847] ? _raw_spin_unlock+0x5/0x20 [ 2288.924003][T22847] ? __alloc_fd+0x4e8/0x590 [ 2288.928474][T22847] do_sys_open+0x36f/0x7a0 [ 2288.932865][T22847] ? file_open_root+0x440/0x440 [ 2288.937693][T22847] ? ksys_write+0x237/0x2a0 [ 2288.942175][T22847] do_syscall_64+0xcb/0x150 [ 2288.946650][T22847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2288.952516][T22847] RIP: 0033:0x417101 [ 2288.956397][T22847] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2288.975977][T22847] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2288.984358][T22847] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2288.992309][T22847] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2289.000269][T22847] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2289.008253][T22847] R10: 0000000000000064 R11: 0000000000000293 R12: 000000000000000a [ 2289.016211][T22847] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2289.033313][T31849] usb 1-1: USB disconnect, device number 26 [ 2289.040012][T31849] usblp0: removed [ 2289.405486][ T6420] usb 6-1: new high-speed USB device number 126 using dummy_hcd 04:06:02 executing program 0 (fault-call:7 fault-nth:11): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:06:02 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x7a000000, 0x0, 0x0, 0xffffffff}}) 04:06:02 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x48, 0x0, 0xffffffff}}) 04:06:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xd2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) preadv2(r1, &(0x7f0000000040)=[{}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/226, 0xe2}], 0x4, 0x3, 0x2, 0x1d) perf_event_open(&(0x7f0000000580)={0x2, 0xff40, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080), 0x4) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) [ 2289.687929][ T6420] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2289.695574][ T6420] usb 6-1: can't read configurations, error -61 [ 2289.849098][ T6420] usb 6-1: new high-speed USB device number 127 using dummy_hcd 04:06:02 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48, 0x0, 0x6c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@private, @empty, @private}, &(0x7f0000000040)=0xc) sync() 04:06:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff04) 04:06:02 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x4c, 0x0, 0xffffffff}}) 04:06:02 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) 04:06:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x9, &(0x7f0000000040)=[{0x5, 0x5, 0x20, 0x3}, {0x7fff, 0x2, 0x2, 0x3}, {0x30, 0x80, 0x5, 0xff}, {0x8, 0x4, 0x6, 0x1000}, {0x7, 0x9, 0x8c, 0x100}, {0x0, 0x3f, 0xff, 0x100}, {0x7, 0x40, 0x80, 0x9}, {0xff, 0x4, 0xc1, 0xffffffff}, {0x7db, 0x1, 0x0, 0x1e4c39fe}]}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1}}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000380)={{r3}, 0x0, 0x8, @unused=[0x1, 0x40, 0x1, 0x1], @name="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"}) [ 2289.949906][T31849] usb 1-1: new high-speed USB device number 27 using dummy_hcd 04:06:02 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x68, 0x0, 0xffffffff}}) 04:06:02 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x2, 0x0, 0xffffffff}}) 04:06:02 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x3, 0x0, 0xffffffff}}) [ 2290.030632][ T6420] usb 6-1: device descriptor read/all, error -71 [ 2290.054500][ T6420] usb usb6-port1: unable to enumerate USB device [ 2290.191858][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2290.322980][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2290.334201][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2290.345116][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2290.355526][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2290.443936][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2290.453307][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2290.462258][T31849] usb 1-1: SerialNumber: syz [ 2290.484260][T22919] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2290.491582][T22919] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2290.504714][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2290.510969][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2290.712999][T22919] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2290.720598][T22919] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2290.959144][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2291.141988][T22919] FAULT_INJECTION: forcing a failure. [ 2291.141988][T22919] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.154654][T22919] CPU: 0 PID: 22919 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2291.166157][T22919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2291.176189][T22919] Call Trace: [ 2291.179464][T22919] dump_stack+0x1b0/0x21e [ 2291.183775][T22919] ? devkmsg_release+0x11c/0x11c [ 2291.188691][T22919] ? show_regs_print_info+0x12/0x12 [ 2291.193867][T22919] ? mon_bin_event+0xc2e/0x24e0 [ 2291.198683][T22919] should_fail+0x6fb/0x860 [ 2291.203077][T22919] ? setup_fault_attr+0x2b0/0x2b0 [ 2291.208214][T22919] ? _raw_spin_lock+0xa1/0x170 [ 2291.212962][T22919] ? _raw_spin_trylock_bh+0x190/0x190 [ 2291.218299][T22919] ? kzalloc+0x1b/0x30 [ 2291.222344][T22919] should_failslab+0x5/0x20 [ 2291.226839][T22919] __kmalloc+0x5f/0x2c0 [ 2291.230957][T22919] kzalloc+0x1b/0x30 [ 2291.234819][T22919] usb_hcd_submit_urb+0x8b9/0x1b20 [ 2291.239922][T22919] ? usb_resume_both+0x2fd/0x9d0 [ 2291.244824][T22919] ? __rpm_callback+0x15d/0x4d0 [ 2291.249644][T22919] ? rpm_resume+0xf9a/0x19b0 [ 2291.254197][T22919] ? __pm_runtime_resume+0x6a/0x90 [ 2291.259272][T22919] ? usb_open+0x188/0x1f0 [ 2291.263566][T22919] ? do_filp_open+0x1f7/0x430 [ 2291.268207][T22919] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2291.274261][T22919] ? usb_hcd_map_urb_for_dma+0x12e0/0x12e0 [ 2291.280042][T22919] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2291.286069][T22919] ? usb_submit_urb+0xc5b/0x13e0 [ 2291.290988][T22919] usb_start_wait_urb+0x11b/0x370 [ 2291.295980][T22919] ? usb_api_blocking_completion+0xa0/0xa0 [ 2291.301749][T22919] ? __kmalloc+0xf7/0x2c0 [ 2291.306055][T22919] ? usb_alloc_urb+0x3d/0x140 [ 2291.310694][T22919] usb_control_msg+0x289/0x480 [ 2291.315470][T22919] ? usb_anchor_empty+0x40/0x40 [ 2291.320300][T22919] ? hub_ext_port_status+0x46c/0x660 [ 2291.325568][T22919] usb_port_resume+0x43b/0x1cd0 [ 2291.330386][T22919] ? _raw_spin_lock_irq+0xa2/0x180 [ 2291.335475][T22919] ? usb_port_suspend+0x10f0/0x10f0 [ 2291.340644][T22919] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2291.346610][T22919] ? rpm_resume+0xb38/0x19b0 [ 2291.351165][T22919] ? arch_stack_walk+0x78/0xe0 [ 2291.355937][T22919] generic_resume+0x49/0x90 [ 2291.360424][T22919] usb_resume_both+0x2fd/0x9d0 [ 2291.365178][T22919] ? _raw_spin_lock+0xa1/0x170 [ 2291.369906][T22919] __rpm_callback+0x15d/0x4d0 [ 2291.374545][T22919] ? autosuspend_check+0x560/0x560 [ 2291.379629][T22919] rpm_resume+0xf9a/0x19b0 [ 2291.384053][T22919] ? autosuspend_check+0x560/0x560 [ 2291.389138][T22919] ? __pm_runtime_resume+0x90/0x90 [ 2291.394214][T22919] ? _raw_spin_lock+0xa1/0x170 [ 2291.399075][T22919] ? _raw_spin_trylock_bh+0x190/0x190 [ 2291.404407][T22919] ? _raw_spin_lock+0xa1/0x170 [ 2291.409147][T22919] ? _raw_spin_trylock_bh+0x190/0x190 [ 2291.414486][T22919] ? klist_iter_init_node+0x234/0x300 [ 2291.419829][T22919] ? klist_dec_and_del+0x3c/0x380 [ 2291.424817][T22919] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2291.430446][T22919] rpm_resume+0x833/0x19b0 [ 2291.434833][T22919] ? __pm_runtime_resume+0x90/0x90 [ 2291.439926][T22919] ? _raw_spin_lock+0x170/0x170 [ 2291.444773][T22919] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2291.450387][T22919] ? usb_find_interface+0xc8/0x130 [ 2291.455476][T22919] ? usb_altnum_to_altsetting+0x160/0x160 [ 2291.461187][T22919] __pm_runtime_resume+0x6a/0x90 [ 2291.466112][T22919] usb_autopm_get_interface+0x1c/0x50 [ 2291.471459][T22919] usblp_open+0x158/0x410 [ 2291.475836][T22919] ? __module_put_and_exit+0x20/0x20 [ 2291.481082][T22919] ? usblp_ioctl+0x1810/0x1810 [ 2291.485821][T22919] usb_open+0x188/0x1f0 [ 2291.489942][T22919] chrdev_open+0x60a/0x670 [ 2291.494341][T22919] ? cd_forget+0x150/0x150 [ 2291.498735][T22919] ? security_file_open+0x1f8/0x2c0 [ 2291.503894][T22919] ? cd_forget+0x150/0x150 [ 2291.508285][T22919] do_dentry_open+0x8fa/0x1070 [ 2291.513027][T22919] ? finish_open+0xd0/0xd0 [ 2291.517404][T22919] ? vfs_open+0x2b/0x80 [ 2291.521524][T22919] ? memcpy+0x38/0x50 [ 2291.525488][T22919] path_openat+0x1681/0x42d0 [ 2291.530081][T22919] ? stack_trace_save+0x111/0x1e0 [ 2291.535068][T22919] ? stack_trace_snprint+0x150/0x150 [ 2291.540315][T22919] ? do_filp_open+0x430/0x430 [ 2291.544969][T22919] ? __kasan_kmalloc+0x117/0x1b0 [ 2291.549870][T22919] ? kmem_cache_alloc+0x1d5/0x250 [ 2291.554897][T22919] ? getname_flags+0xb8/0x610 [ 2291.559562][T22919] ? do_sys_open+0x32a/0x7a0 [ 2291.564127][T22919] ? do_syscall_64+0xcb/0x150 [ 2291.568767][T22919] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2291.574797][T22919] ? get_pid_task+0x86/0x90 [ 2291.579263][T22919] ? proc_fail_nth_write+0x166/0x200 [ 2291.584510][T22919] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2291.589757][T22919] do_filp_open+0x1f7/0x430 [ 2291.594238][T22919] ? vfs_tmpfile+0x220/0x220 [ 2291.598815][T22919] ? should_fail+0x182/0x860 [ 2291.603413][T22919] ? _raw_spin_trylock_bh+0x190/0x190 [ 2291.608764][T22919] ? _raw_spin_unlock+0x5/0x20 [ 2291.613501][T22919] ? __alloc_fd+0x4e8/0x590 [ 2291.618013][T22919] do_sys_open+0x36f/0x7a0 [ 2291.622393][T22919] ? file_open_root+0x440/0x440 [ 2291.627226][T22919] ? ksys_write+0x237/0x2a0 [ 2291.631739][T22919] do_syscall_64+0xcb/0x150 [ 2291.636204][T22919] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2291.642085][T22919] RIP: 0033:0x417101 [ 2291.645979][T22919] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2291.665546][T22919] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2291.673935][T22919] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2291.681922][T22919] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2291.689873][T22919] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2291.697837][T22919] R10: 0000000000000064 R11: 0000000000000293 R12: 000000000000000b [ 2291.705784][T22919] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2291.724790][T31849] usb 1-1: USB disconnect, device number 27 [ 2291.731296][T31849] usblp0: removed 04:06:04 executing program 0 (fault-call:7 fault-nth:12): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:06:04 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x6c, 0x0, 0xffffffff}}) 04:06:04 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x4, 0x0, 0xffffffff}}) 04:06:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017001f70000000040000008004000000040010"], 0x18}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x11) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000240)={{r1}, {@void, @actul_num={@val=0x2d, 0x3, 0x50}}}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4241, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000040)={0x101, 0x2}) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) close(r1) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000002c0)=""/135) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000180)={0xcbcf, {{0xa, 0x4e20, 0x7, @empty, 0x7ff}}}, 0x88) 04:06:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 04:06:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) 04:06:05 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x74, 0x0, 0xffffffff}}) 04:06:05 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x5, 0x0, 0xffffffff}}) 04:06:05 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x7a, 0x0, 0xffffffff}}) 04:06:05 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x6, 0x0, 0xffffffff}}) 04:06:05 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x300, 0x0, 0xffffffff}}) [ 2292.319203][T23019] print_req_error: 38 callbacks suppressed [ 2292.319215][T23019] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:06:05 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x7, 0x0, 0xffffffff}}) [ 2292.358821][T23035] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2292.389315][T23034] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2292.435200][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.446753][ T87] buffer_io_error: 14 callbacks suppressed [ 2292.446758][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2292.462248][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.473446][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2292.489352][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.500666][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2292.518968][T23034] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2292.532145][T23035] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2292.546085][T23019] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2292.557915][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.569655][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2292.580752][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2292.590186][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2292.604396][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2292.615189][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2292.628043][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2292.641720][T31849] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2292.642077][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2292.883655][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2293.004688][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2293.015942][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2293.026848][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2293.037394][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2293.125952][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2293.135027][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2293.143748][T31849] usb 1-1: SerialNumber: syz [ 2293.166032][T23010] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2293.172859][T23010] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2293.186629][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2293.192552][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2293.401603][T23010] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2293.408978][T23010] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2293.640879][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2293.881787][T23010] FAULT_INJECTION: forcing a failure. [ 2293.881787][T23010] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.894424][T23010] CPU: 0 PID: 23010 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2293.905947][T23010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.915985][T23010] Call Trace: [ 2293.919253][T23010] dump_stack+0x1b0/0x21e [ 2293.923576][T23010] ? devkmsg_release+0x11c/0x11c [ 2293.928488][T23010] ? switch_mm_irqs_off+0x46e/0x870 [ 2293.933681][T23010] ? show_regs_print_info+0x12/0x12 [ 2293.938841][T23010] ? switch_mm+0xe0/0xe0 [ 2293.943104][T23010] should_fail+0x6fb/0x860 [ 2293.947518][T23010] ? setup_fault_attr+0x2b0/0x2b0 [ 2293.952523][T23010] ? _raw_spin_lock_irqsave+0xda/0x1c0 [ 2293.957957][T23010] ? _raw_spin_lock+0x170/0x170 [ 2293.962782][T23010] ? usb_control_msg+0xb7/0x480 [ 2293.967610][T23010] should_failslab+0x5/0x20 [ 2293.972076][T23010] kmem_cache_alloc_trace+0x39/0x270 [ 2293.977349][T23010] usb_control_msg+0xb7/0x480 [ 2293.982030][T23010] ? usb_anchor_empty+0x40/0x40 [ 2293.986861][T23010] ? schedule_timeout+0x1e9/0x2d0 [ 2293.991865][T23010] ? console_conditional_schedule+0x10/0x10 [ 2293.997725][T23010] ? usb_control_msg+0x337/0x480 [ 2294.002626][T23010] hub_ext_port_status+0x108/0x660 [ 2294.007702][T23010] usb_port_resume+0x490/0x1cd0 [ 2294.012517][T23010] ? _raw_spin_lock_irq+0xa2/0x180 [ 2294.017594][T23010] ? usb_port_suspend+0x10f0/0x10f0 [ 2294.022770][T23010] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2294.028723][T23010] ? rpm_resume+0xb38/0x19b0 [ 2294.033299][T23010] ? arch_stack_walk+0x78/0xe0 [ 2294.038050][T23010] generic_resume+0x49/0x90 [ 2294.042518][T23010] usb_resume_both+0x2fd/0x9d0 [ 2294.047282][T23010] ? _raw_spin_lock+0xa1/0x170 [ 2294.052040][T23010] __rpm_callback+0x15d/0x4d0 [ 2294.056681][T23010] ? autosuspend_check+0x560/0x560 [ 2294.061795][T23010] rpm_resume+0xf9a/0x19b0 [ 2294.066181][T23010] ? autosuspend_check+0x560/0x560 [ 2294.071258][T23010] ? __pm_runtime_resume+0x90/0x90 [ 2294.076411][T23010] ? _raw_spin_lock+0xa1/0x170 [ 2294.081160][T23010] ? _raw_spin_trylock_bh+0x190/0x190 [ 2294.086546][T23010] ? _raw_spin_lock+0xa1/0x170 [ 2294.091273][T23010] ? _raw_spin_trylock_bh+0x190/0x190 [ 2294.096609][T23010] ? klist_iter_init_node+0x234/0x300 [ 2294.101947][T23010] ? klist_dec_and_del+0x3c/0x380 [ 2294.106935][T23010] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2294.112538][T23010] rpm_resume+0x833/0x19b0 [ 2294.116932][T23010] ? __pm_runtime_resume+0x90/0x90 [ 2294.122017][T23010] ? _raw_spin_lock+0x170/0x170 [ 2294.126844][T23010] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2294.132451][T23010] ? usb_find_interface+0xc8/0x130 [ 2294.137526][T23010] ? usb_altnum_to_altsetting+0x160/0x160 [ 2294.143340][T23010] __pm_runtime_resume+0x6a/0x90 [ 2294.148267][T23010] usb_autopm_get_interface+0x1c/0x50 [ 2294.153621][T23010] usblp_open+0x158/0x410 [ 2294.157918][T23010] ? __module_put_and_exit+0x20/0x20 [ 2294.163178][T23010] ? usblp_ioctl+0x1810/0x1810 [ 2294.167917][T23010] usb_open+0x188/0x1f0 [ 2294.172039][T23010] chrdev_open+0x60a/0x670 [ 2294.176421][T23010] ? cd_forget+0x150/0x150 [ 2294.180936][T23010] ? security_file_open+0x1f8/0x2c0 [ 2294.186096][T23010] ? cd_forget+0x150/0x150 [ 2294.190479][T23010] do_dentry_open+0x8fa/0x1070 [ 2294.195209][T23010] ? finish_open+0xd0/0xd0 [ 2294.199589][T23010] ? vfs_open+0x2b/0x80 [ 2294.203724][T23010] ? memcpy+0x38/0x50 [ 2294.207669][T23010] path_openat+0x1681/0x42d0 [ 2294.212225][T23010] ? stack_trace_save+0x111/0x1e0 [ 2294.217323][T23010] ? stack_trace_snprint+0x150/0x150 [ 2294.222578][T23010] ? do_filp_open+0x430/0x430 [ 2294.227231][T23010] ? __kasan_kmalloc+0x117/0x1b0 [ 2294.232163][T23010] ? kmem_cache_alloc+0x1d5/0x250 [ 2294.237152][T23010] ? getname_flags+0xb8/0x610 [ 2294.241792][T23010] ? do_sys_open+0x32a/0x7a0 [ 2294.246349][T23010] ? do_syscall_64+0xcb/0x150 [ 2294.250989][T23010] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2294.257018][T23010] ? get_pid_task+0x86/0x90 [ 2294.261489][T23010] ? proc_fail_nth_write+0x166/0x200 [ 2294.266748][T23010] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2294.271920][T23010] do_filp_open+0x1f7/0x430 [ 2294.276401][T23010] ? vfs_tmpfile+0x220/0x220 [ 2294.280969][T23010] ? should_fail+0x182/0x860 [ 2294.285535][T23010] ? _raw_spin_trylock_bh+0x190/0x190 [ 2294.290880][T23010] ? _raw_spin_unlock+0x5/0x20 [ 2294.295605][T23010] ? __alloc_fd+0x4e8/0x590 [ 2294.300067][T23010] do_sys_open+0x36f/0x7a0 [ 2294.304454][T23010] ? file_open_root+0x440/0x440 [ 2294.309266][T23010] ? ksys_write+0x237/0x2a0 [ 2294.313753][T23010] do_syscall_64+0xcb/0x150 [ 2294.318228][T23010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2294.324083][T23010] RIP: 0033:0x417101 [ 2294.327967][T23010] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2294.347545][T23010] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2294.355916][T23010] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2294.363865][T23010] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2294.371801][T23010] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2294.379784][T23010] R10: 0000000000000064 R11: 0000000000000293 R12: 000000000000000c [ 2294.387730][T23010] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2294.406362][T23010] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 2294.436575][T31849] usb 1-1: USB disconnect, device number 28 [ 2294.443259][T31849] usblp0: removed 04:06:07 executing program 0 (fault-call:7 fault-nth:13): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:06:07 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x500, 0x0, 0xffffffff}}) 04:06:07 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x8, 0x0, 0xffffffff}}) 04:06:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000080)={0x2, 0xfffffefd, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x51, 0x9, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x2c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0xdb03) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, [], [{0x7, 0x2, 0x100000001, 0x6, 0x401, 0xfffffffffffffff8}, {0x7, 0x2, 0xffffffffffffff1f, 0x1, 0x80, 0x3}], [[], [], [], []]}) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) 04:06:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x2, 0x3, 0xff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x70, 0x464, 0x800, 0x70bd2a, 0x25dfdbfd, "b399512ca86d10aecf27213768387af3820e009234dfb6803f23ba71a4882eed7881a244f0b9252c9d9191cb6f2602649277eb2e102d7881a4364077cd9066441d6ae0e1b47d047956bf3314de3a23a2166799f9fdbf6368b60bee58f697", ["", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x22000004}, 0x80) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) unshare(0x2040400) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x321880, 0x0) flock(r3, 0x0) ioctl$CHAR_RAW_GETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="d4", @ANYRES16, @ANYBLOB="000227bd7000ffdbdf250400000034000180060001000a0000000500020003020400000015004e220000060001000a00000008000700", @ANYRES32=0x0], 0xd4}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x1}}) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f00000003c0)=0x2) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 04:06:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) 04:06:07 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x9, 0x0, 0xffffffff}}) 04:06:07 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x600, 0x0, 0xffffffff}}) 04:06:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) 04:06:07 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xa, 0x0, 0xffffffff}}) 04:06:07 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x700, 0x0, 0xffffffff}}) 04:06:07 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xb, 0x0, 0xffffffff}}) [ 2295.363748][T31849] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2295.605715][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2295.726751][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2295.737861][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2295.748645][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2295.759111][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2295.847725][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2295.856777][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2295.865278][T31849] usb 1-1: SerialNumber: syz [ 2295.888029][T23091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2295.894881][T23091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2295.908455][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2295.914407][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2296.123449][T23091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2296.130656][T23091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2296.362909][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2296.603797][T23091] FAULT_INJECTION: forcing a failure. [ 2296.603797][T23091] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.616451][T23091] CPU: 0 PID: 23091 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2296.627981][T23091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.638022][T23091] Call Trace: [ 2296.641301][T23091] dump_stack+0x1b0/0x21e [ 2296.645619][T23091] ? devkmsg_release+0x11c/0x11c [ 2296.650521][T23091] ? show_regs_print_info+0x12/0x12 [ 2296.655681][T23091] ? switch_mm_irqs_off+0x46e/0x870 [ 2296.660897][T23091] ? trace_event_raw_event_sched_switch+0x480/0x480 [ 2296.667554][T23091] ? switch_mm+0xe0/0xe0 [ 2296.671808][T23091] should_fail+0x6fb/0x860 [ 2296.676198][T23091] ? setup_fault_attr+0x2b0/0x2b0 [ 2296.681188][T23091] ? setup_fault_attr+0x2b0/0x2b0 [ 2296.686175][T23091] ? _raw_spin_lock_irqsave+0xda/0x1c0 [ 2296.691597][T23091] ? usb_alloc_urb+0x3d/0x140 [ 2296.696243][T23091] should_failslab+0x5/0x20 [ 2296.700727][T23091] __kmalloc+0x5f/0x2c0 [ 2296.704863][T23091] usb_alloc_urb+0x3d/0x140 [ 2296.709329][T23091] usb_control_msg+0x16e/0x480 [ 2296.714069][T23091] ? usb_anchor_empty+0x40/0x40 [ 2296.718920][T23091] ? schedule_timeout+0x1e9/0x2d0 [ 2296.723934][T23091] ? console_conditional_schedule+0x10/0x10 [ 2296.729801][T23091] ? usb_control_msg+0x337/0x480 [ 2296.734776][T23091] hub_ext_port_status+0x108/0x660 [ 2296.739858][T23091] usb_port_resume+0x490/0x1cd0 [ 2296.744700][T23091] ? _raw_spin_lock_irq+0xa2/0x180 [ 2296.749774][T23091] ? usb_port_suspend+0x10f0/0x10f0 [ 2296.754950][T23091] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2296.760912][T23091] ? rpm_resume+0xb38/0x19b0 [ 2296.765486][T23091] ? arch_stack_walk+0x78/0xe0 [ 2296.770223][T23091] generic_resume+0x49/0x90 [ 2296.774695][T23091] usb_resume_both+0x2fd/0x9d0 [ 2296.779424][T23091] ? _raw_spin_lock+0xa1/0x170 [ 2296.784153][T23091] __rpm_callback+0x15d/0x4d0 [ 2296.788807][T23091] ? autosuspend_check+0x560/0x560 [ 2296.793883][T23091] rpm_resume+0xf9a/0x19b0 [ 2296.798287][T23091] ? autosuspend_check+0x560/0x560 [ 2296.803361][T23091] ? __pm_runtime_resume+0x90/0x90 [ 2296.808450][T23091] ? _raw_spin_lock+0xa1/0x170 [ 2296.813189][T23091] ? _raw_spin_trylock_bh+0x190/0x190 [ 2296.818558][T23091] ? _raw_spin_lock+0xa1/0x170 [ 2296.823298][T23091] ? _raw_spin_trylock_bh+0x190/0x190 [ 2296.828634][T23091] ? klist_iter_init_node+0x234/0x300 [ 2296.833981][T23091] ? klist_dec_and_del+0x3c/0x380 [ 2296.838980][T23091] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2296.844596][T23091] rpm_resume+0x833/0x19b0 [ 2296.848981][T23091] ? __pm_runtime_resume+0x90/0x90 [ 2296.854056][T23091] ? _raw_spin_lock+0x170/0x170 [ 2296.858905][T23091] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2296.864529][T23091] ? usb_find_interface+0xc8/0x130 [ 2296.869606][T23091] ? usb_altnum_to_altsetting+0x160/0x160 [ 2296.875289][T23091] __pm_runtime_resume+0x6a/0x90 [ 2296.880221][T23091] usb_autopm_get_interface+0x1c/0x50 [ 2296.885585][T23091] usblp_open+0x158/0x410 [ 2296.889877][T23091] ? __module_put_and_exit+0x20/0x20 [ 2296.895157][T23091] ? usblp_ioctl+0x1810/0x1810 [ 2296.899886][T23091] usb_open+0x188/0x1f0 [ 2296.904058][T23091] chrdev_open+0x60a/0x670 [ 2296.908438][T23091] ? cd_forget+0x150/0x150 [ 2296.912823][T23091] ? security_file_open+0x1f8/0x2c0 [ 2296.918001][T23091] ? cd_forget+0x150/0x150 [ 2296.922382][T23091] do_dentry_open+0x8fa/0x1070 [ 2296.927109][T23091] ? finish_open+0xd0/0xd0 [ 2296.931488][T23091] ? vfs_open+0x2b/0x80 [ 2296.935610][T23091] ? memcpy+0x38/0x50 [ 2296.939556][T23091] path_openat+0x1681/0x42d0 [ 2296.944111][T23091] ? stack_trace_save+0x111/0x1e0 [ 2296.949101][T23091] ? stack_trace_snprint+0x150/0x150 [ 2296.954351][T23091] ? do_filp_open+0x430/0x430 [ 2296.958990][T23091] ? __kasan_kmalloc+0x117/0x1b0 [ 2296.963890][T23091] ? kmem_cache_alloc+0x1d5/0x250 [ 2296.968877][T23091] ? getname_flags+0xb8/0x610 [ 2296.973527][T23091] ? do_sys_open+0x32a/0x7a0 [ 2296.978098][T23091] ? do_syscall_64+0xcb/0x150 [ 2296.982739][T23091] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2296.988767][T23091] ? get_pid_task+0x86/0x90 [ 2296.993258][T23091] ? proc_fail_nth_write+0x166/0x200 [ 2296.998510][T23091] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2297.003671][T23091] do_filp_open+0x1f7/0x430 [ 2297.008147][T23091] ? vfs_tmpfile+0x220/0x220 [ 2297.012732][T23091] ? should_fail+0x182/0x860 [ 2297.017283][T23091] ? _raw_spin_trylock_bh+0x190/0x190 [ 2297.022643][T23091] ? _raw_spin_unlock+0x5/0x20 [ 2297.027366][T23091] ? __alloc_fd+0x4e8/0x590 [ 2297.031831][T23091] do_sys_open+0x36f/0x7a0 [ 2297.036210][T23091] ? file_open_root+0x440/0x440 [ 2297.041023][T23091] ? ksys_write+0x237/0x2a0 [ 2297.045487][T23091] do_syscall_64+0xcb/0x150 [ 2297.049963][T23091] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2297.055842][T23091] RIP: 0033:0x417101 [ 2297.059740][T23091] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2297.079358][T23091] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2297.087733][T23091] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2297.095705][T23091] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2297.103654][T23091] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2297.111601][T23091] R10: 0000000000000064 R11: 0000000000000293 R12: 000000000000000d [ 2297.119556][T23091] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2297.138503][T23091] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 2297.168800][T31849] usb 1-1: USB disconnect, device number 29 [ 2297.175338][T31849] usblp0: removed 04:06:10 executing program 0 (fault-call:7 fault-nth:14): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:06:10 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x900, 0x0, 0xffffffff}}) 04:06:10 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xc, 0x0, 0xffffffff}}) 04:06:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1}}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x91) r6 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xdb03) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 04:06:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000040ff7c3a369a72ee0c32000000000000fe5438560636c1c0553369e885d6712ae223e473bc887ee5d823b14a91a5ad41ea8749c07861b3ef2c042326283275be578389592369a78c26e7177bb1b09cfcdfe75b2704c2c16460a028ea6e1210"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x3ebe, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000040)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001000080080001007063690011000200303030303a30303a31302e300000000008000b000200000008000130303a30303a31302e300000000008000b08bf892f02591596c22dd7a700ff07000008303a30303a31302e300000000008000b000100"/163], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x800) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 04:06:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) 04:06:10 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xa00, 0x0, 0xffffffff}}) 04:06:10 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xd, 0x0, 0xffffffff}}) 04:06:10 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xb00, 0x0, 0xffffffff}}) 04:06:10 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xe, 0x0, 0xffffffff}}) [ 2297.762161][T23176] print_req_error: 32 callbacks suppressed [ 2297.762173][T23176] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2297.800037][T23188] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:06:10 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x10, 0x0, 0xffffffff}}) 04:06:10 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xc00, 0x0, 0xffffffff}}) [ 2297.824744][T23182] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2297.858498][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2297.869636][ T87] buffer_io_error: 11 callbacks suppressed [ 2297.869642][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2297.885715][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2297.897623][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2297.920120][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2297.931433][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2297.969212][T23182] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2297.982464][T23176] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2297.996588][T23188] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2298.014052][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2298.025186][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2298.034409][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2298.044097][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2298.058998][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2298.069299][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2298.078683][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2298.085878][T31849] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2298.101784][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2298.337839][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2298.458877][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2298.470016][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2298.480734][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2298.491153][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2298.579831][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2298.588869][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2298.597361][T31849] usb 1-1: SerialNumber: syz [ 2298.620172][T23162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2298.626969][T23162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2298.640803][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2298.646745][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2298.855654][T23162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2298.862775][T23162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2299.095004][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2299.335942][T23162] FAULT_INJECTION: forcing a failure. [ 2299.335942][T23162] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.348611][T23162] CPU: 0 PID: 23162 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2299.360117][T23162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.370152][T23162] Call Trace: [ 2299.373409][T23162] dump_stack+0x1b0/0x21e [ 2299.377716][T23162] ? devkmsg_release+0x11c/0x11c [ 2299.382625][T23162] ? show_regs_print_info+0x12/0x12 [ 2299.387805][T23162] ? mon_bin_event+0xc2e/0x24e0 [ 2299.392633][T23162] should_fail+0x6fb/0x860 [ 2299.397015][T23162] ? setup_fault_attr+0x2b0/0x2b0 [ 2299.402004][T23162] ? _raw_spin_lock+0xa1/0x170 [ 2299.406746][T23162] ? _raw_spin_trylock_bh+0x190/0x190 [ 2299.412082][T23162] ? kzalloc+0x1b/0x30 [ 2299.416126][T23162] should_failslab+0x5/0x20 [ 2299.420639][T23162] __kmalloc+0x5f/0x2c0 [ 2299.424774][T23162] kzalloc+0x1b/0x30 [ 2299.428634][T23162] usb_hcd_submit_urb+0x8b9/0x1b20 [ 2299.433708][T23162] ? generic_resume+0x49/0x90 [ 2299.438346][T23162] ? usb_resume_both+0x2fd/0x9d0 [ 2299.443247][T23162] ? __rpm_callback+0x15d/0x4d0 [ 2299.448070][T23162] ? rpm_resume+0x833/0x19b0 [ 2299.452624][T23162] ? usblp_open+0x158/0x410 [ 2299.457090][T23162] ? path_openat+0x1681/0x42d0 [ 2299.461818][T23162] ? do_syscall_64+0xcb/0x150 [ 2299.466474][T23162] ? usb_hcd_map_urb_for_dma+0x12e0/0x12e0 [ 2299.472260][T23162] ? do_syscall_64+0xcb/0x150 [ 2299.476917][T23162] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2299.482947][T23162] ? perf_pmu_sched_task+0x370/0x370 [ 2299.488211][T23162] ? usb_submit_urb+0xc5b/0x13e0 [ 2299.493125][T23162] usb_start_wait_urb+0x11b/0x370 [ 2299.498114][T23162] ? usb_api_blocking_completion+0xa0/0xa0 [ 2299.503901][T23162] ? __kmalloc+0xf7/0x2c0 [ 2299.508193][T23162] ? usb_alloc_urb+0x3d/0x140 [ 2299.512835][T23162] usb_control_msg+0x289/0x480 [ 2299.517577][T23162] ? usb_anchor_empty+0x40/0x40 [ 2299.522405][T23162] ? schedule_timeout+0x1e9/0x2d0 [ 2299.527407][T23162] ? console_conditional_schedule+0x10/0x10 [ 2299.533262][T23162] ? usb_control_msg+0x337/0x480 [ 2299.538166][T23162] hub_ext_port_status+0x108/0x660 [ 2299.543269][T23162] usb_port_resume+0x490/0x1cd0 [ 2299.548125][T23162] ? _raw_spin_lock_irq+0xa2/0x180 [ 2299.553202][T23162] ? usb_port_suspend+0x10f0/0x10f0 [ 2299.558377][T23162] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2299.564320][T23162] ? rpm_resume+0xb38/0x19b0 [ 2299.568875][T23162] ? arch_stack_walk+0x78/0xe0 [ 2299.573605][T23162] generic_resume+0x49/0x90 [ 2299.578075][T23162] usb_resume_both+0x2fd/0x9d0 [ 2299.582817][T23162] ? _raw_spin_lock+0xa1/0x170 [ 2299.587559][T23162] __rpm_callback+0x15d/0x4d0 [ 2299.592208][T23162] ? autosuspend_check+0x560/0x560 [ 2299.597320][T23162] rpm_resume+0xf9a/0x19b0 [ 2299.601720][T23162] ? autosuspend_check+0x560/0x560 [ 2299.606837][T23162] ? __pm_runtime_resume+0x90/0x90 [ 2299.611913][T23162] ? _raw_spin_lock+0xa1/0x170 [ 2299.616641][T23162] ? _raw_spin_trylock_bh+0x190/0x190 [ 2299.621977][T23162] ? _raw_spin_lock+0xa1/0x170 [ 2299.626745][T23162] ? _raw_spin_trylock_bh+0x190/0x190 [ 2299.632082][T23162] ? klist_iter_init_node+0x234/0x300 [ 2299.637449][T23162] ? klist_dec_and_del+0x3c/0x380 [ 2299.642483][T23162] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2299.648086][T23162] rpm_resume+0x833/0x19b0 [ 2299.652494][T23162] ? __pm_runtime_resume+0x90/0x90 [ 2299.657574][T23162] ? _raw_spin_lock+0x170/0x170 [ 2299.662389][T23162] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2299.667985][T23162] ? usb_find_interface+0xc8/0x130 [ 2299.673058][T23162] ? usb_altnum_to_altsetting+0x160/0x160 [ 2299.678740][T23162] __pm_runtime_resume+0x6a/0x90 [ 2299.683657][T23162] usb_autopm_get_interface+0x1c/0x50 [ 2299.688994][T23162] usblp_open+0x158/0x410 [ 2299.693358][T23162] ? __module_put_and_exit+0x20/0x20 [ 2299.698626][T23162] ? usblp_ioctl+0x1810/0x1810 [ 2299.703381][T23162] usb_open+0x188/0x1f0 [ 2299.707557][T23162] chrdev_open+0x60a/0x670 [ 2299.711963][T23162] ? cd_forget+0x150/0x150 [ 2299.716343][T23162] ? security_file_open+0x1f8/0x2c0 [ 2299.721506][T23162] ? cd_forget+0x150/0x150 [ 2299.725886][T23162] do_dentry_open+0x8fa/0x1070 [ 2299.730625][T23162] ? finish_open+0xd0/0xd0 [ 2299.735018][T23162] ? vfs_open+0x2b/0x80 [ 2299.739159][T23162] ? memcpy+0x38/0x50 [ 2299.743123][T23162] path_openat+0x1681/0x42d0 [ 2299.747691][T23162] ? stack_trace_save+0x111/0x1e0 [ 2299.752679][T23162] ? stack_trace_snprint+0x150/0x150 [ 2299.757927][T23162] ? do_filp_open+0x430/0x430 [ 2299.762569][T23162] ? __kasan_kmalloc+0x117/0x1b0 [ 2299.767490][T23162] ? kmem_cache_alloc+0x1d5/0x250 [ 2299.772505][T23162] ? getname_flags+0xb8/0x610 [ 2299.777158][T23162] ? do_sys_open+0x32a/0x7a0 [ 2299.781710][T23162] ? do_syscall_64+0xcb/0x150 [ 2299.786349][T23162] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2299.792385][T23162] ? _raw_spin_lock_irqsave+0xda/0x1c0 [ 2299.797809][T23162] ? get_pid_task+0x86/0x90 [ 2299.802274][T23162] ? proc_fail_nth_write+0x166/0x200 [ 2299.807533][T23162] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2299.812728][T23162] do_filp_open+0x1f7/0x430 [ 2299.817193][T23162] ? vfs_tmpfile+0x220/0x220 [ 2299.821743][T23162] ? should_fail+0x182/0x860 [ 2299.826324][T23162] ? _raw_spin_trylock_bh+0x190/0x190 [ 2299.831683][T23162] ? _raw_spin_unlock+0x5/0x20 [ 2299.836408][T23162] ? __alloc_fd+0x4e8/0x590 [ 2299.840890][T23162] do_sys_open+0x36f/0x7a0 [ 2299.845272][T23162] ? file_open_root+0x440/0x440 [ 2299.850097][T23162] ? ksys_write+0x237/0x2a0 [ 2299.854565][T23162] do_syscall_64+0xcb/0x150 [ 2299.859097][T23162] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2299.864952][T23162] RIP: 0033:0x417101 [ 2299.868833][T23162] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2299.888404][T23162] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2299.896784][T23162] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2299.904719][T23162] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2299.912674][T23162] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2299.920639][T23162] R10: 0000000000000064 R11: 0000000000000293 R12: 000000000000000e [ 2299.928599][T23162] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2299.944457][T23162] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 2299.981250][T31849] usb 1-1: USB disconnect, device number 30 [ 2299.987737][T31849] usblp0: removed 04:06:13 executing program 0 (fault-call:7 fault-nth:15): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:06:13 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x11, 0x0, 0xffffffff}}) 04:06:13 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xd00, 0x0, 0xffffffff}}) 04:06:13 executing program 5: syz_usb_connect(0x0, 0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000058ff74021040e012f4e0000b40309024c00010000000009040b1d000000a5e99a61096a3034506dbfed913e5bd8dc14477bedd89f8338a062b3722981aa4b30d24c7a757a21be392faa3626141a53b9f2cf14f80bcb01c1d49c03f543c2eaeec5a58996f51101c1c260a2a6bacea24821426c0be303f430f164e97396c8119b521a2f"], 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) sync() writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="d6535413e1a9367db10981cfe2bd7dd8a7a58b", 0x13}, {&(0x7f0000000140)="393621aff08ebf79cfd7b01a5978a14a0b064e983136defca367b7bdc44c45e73e041c1f2fa344e0dc20fe091e998a9052886b76e0fde75c5bab23e84cacd2f0b7a0f9f65d7784e52dd1a259d1d438a378f02269f653", 0x56}], 0x2) 04:06:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)={0x1af, 0x4, &(0x7f0000000240)}) 04:06:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffff04) 04:06:13 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xe00, 0x0, 0xffffffff}}) 04:06:13 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x12, 0x0, 0xffffffff}}) 04:06:13 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x1100, 0x0, 0xffffffff}}) 04:06:13 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x48, 0x0, 0xffffffff}}) 04:06:13 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x1200, 0x0, 0xffffffff}}) 04:06:13 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x4c, 0x0, 0xffffffff}}) [ 2300.787684][ T6420] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2300.888502][T31849] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2301.130547][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2301.150654][ T6420] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 2301.158745][ T6420] usb 6-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 2301.169134][ T6420] usb 6-1: config 0 has no interface number 0 [ 2301.175371][ T6420] usb 6-1: config 0 interface 11 has no altsetting 0 [ 2301.251527][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2301.262667][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2301.273357][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2301.281724][ T6420] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 2301.284106][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2301.291378][ T6420] usb 6-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 2301.314579][ T6420] usb 6-1: config 0 has no interface number 0 [ 2301.320705][ T6420] usb 6-1: config 0 interface 11 has no altsetting 0 [ 2301.381913][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2301.391077][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2301.399590][T31849] usb 1-1: SerialNumber: syz [ 2301.411189][ T6420] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 2301.419293][ T6420] usb 6-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 2301.420930][T23245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2301.429657][ T6420] usb 6-1: config 0 has no interface number 0 [ 2301.438001][T23245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2301.442503][ T6420] usb 6-1: config 0 interface 11 has no altsetting 0 [ 2301.460390][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2301.466301][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2301.547796][ T6420] usb 6-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=4e.2f [ 2301.556871][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=180 [ 2301.565262][ T6420] usb 6-1: SerialNumber: syz [ 2301.571708][ T6420] usb 6-1: config 0 descriptor?? [ 2301.669653][T23245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2301.676907][T23245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2301.881908][ T6420] usb 6-1: USB disconnect, device number 2 [ 2301.900016][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2302.162530][T23245] FAULT_INJECTION: forcing a failure. [ 2302.162530][T23245] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.175212][T23245] CPU: 0 PID: 23245 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2302.186721][T23245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2302.196744][T23245] Call Trace: [ 2302.200022][T23245] dump_stack+0x1b0/0x21e [ 2302.204338][T23245] ? devkmsg_release+0x11c/0x11c [ 2302.209256][T23245] ? show_regs_print_info+0x12/0x12 [ 2302.214423][T23245] ? _raw_spin_lock_irqsave+0xda/0x1c0 [ 2302.219852][T23245] should_fail+0x6fb/0x860 [ 2302.224251][T23245] ? setup_fault_attr+0x2b0/0x2b0 [ 2302.229244][T23245] ? usb_control_msg+0xb7/0x480 [ 2302.234066][T23245] should_failslab+0x5/0x20 [ 2302.238557][T23245] kmem_cache_alloc_trace+0x39/0x270 [ 2302.243844][T23245] usb_control_msg+0xb7/0x480 [ 2302.248497][T23245] ? usb_anchor_empty+0x40/0x40 [ 2302.253327][T23245] ? hub_ext_port_status+0x46c/0x660 [ 2302.258621][T23245] usb_port_resume+0x657/0x1cd0 [ 2302.263442][T23245] ? _raw_spin_lock_irq+0xa2/0x180 [ 2302.268523][T23245] ? usb_port_suspend+0x10f0/0x10f0 [ 2302.273692][T23245] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2302.279643][T23245] ? rpm_resume+0xb38/0x19b0 [ 2302.284200][T23245] ? arch_stack_walk+0x78/0xe0 [ 2302.288930][T23245] generic_resume+0x49/0x90 [ 2302.293472][T23245] usb_resume_both+0x2fd/0x9d0 [ 2302.298210][T23245] ? _raw_spin_lock+0xa1/0x170 [ 2302.302963][T23245] __rpm_callback+0x15d/0x4d0 [ 2302.307618][T23245] ? autosuspend_check+0x560/0x560 [ 2302.312701][T23245] rpm_resume+0xf9a/0x19b0 [ 2302.317095][T23245] ? autosuspend_check+0x560/0x560 [ 2302.322291][T23245] ? __pm_runtime_resume+0x90/0x90 [ 2302.327383][T23245] ? _raw_spin_lock+0xa1/0x170 [ 2302.332143][T23245] ? _raw_spin_trylock_bh+0x190/0x190 [ 2302.337496][T23245] ? _raw_spin_lock+0xa1/0x170 [ 2302.342226][T23245] ? _raw_spin_trylock_bh+0x190/0x190 [ 2302.347570][T23245] ? klist_iter_init_node+0x234/0x300 [ 2302.352910][T23245] ? klist_dec_and_del+0x3c/0x380 [ 2302.357907][T23245] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2302.363505][T23245] rpm_resume+0x833/0x19b0 [ 2302.367893][T23245] ? __pm_runtime_resume+0x90/0x90 [ 2302.372972][T23245] ? _raw_spin_lock+0x170/0x170 [ 2302.377788][T23245] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2302.383387][T23245] ? usb_find_interface+0xc8/0x130 [ 2302.388464][T23245] ? usb_altnum_to_altsetting+0x160/0x160 [ 2302.394152][T23245] __pm_runtime_resume+0x6a/0x90 [ 2302.399057][T23245] usb_autopm_get_interface+0x1c/0x50 [ 2302.404395][T23245] usblp_open+0x158/0x410 [ 2302.408692][T23245] ? __module_put_and_exit+0x20/0x20 [ 2302.413960][T23245] ? usblp_ioctl+0x1810/0x1810 [ 2302.418691][T23245] usb_open+0x188/0x1f0 [ 2302.422814][T23245] chrdev_open+0x60a/0x670 [ 2302.427197][T23245] ? cd_forget+0x150/0x150 [ 2302.431583][T23245] ? security_file_open+0x1f8/0x2c0 [ 2302.436749][T23245] ? cd_forget+0x150/0x150 [ 2302.441174][T23245] do_dentry_open+0x8fa/0x1070 [ 2302.445933][T23245] ? finish_open+0xd0/0xd0 [ 2302.450329][T23245] ? vfs_open+0x2b/0x80 [ 2302.454477][T23245] ? memcpy+0x38/0x50 [ 2302.458459][T23245] path_openat+0x1681/0x42d0 [ 2302.463021][T23245] ? stack_trace_save+0x111/0x1e0 [ 2302.468044][T23245] ? stack_trace_snprint+0x150/0x150 [ 2302.473306][T23245] ? do_filp_open+0x430/0x430 [ 2302.477957][T23245] ? __kasan_kmalloc+0x117/0x1b0 [ 2302.482874][T23245] ? kmem_cache_alloc+0x1d5/0x250 [ 2302.487875][T23245] ? getname_flags+0xb8/0x610 [ 2302.492535][T23245] ? do_sys_open+0x32a/0x7a0 [ 2302.497104][T23245] ? do_syscall_64+0xcb/0x150 [ 2302.501747][T23245] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2302.507777][T23245] ? _raw_spin_lock_irqsave+0xda/0x1c0 [ 2302.513201][T23245] ? get_pid_task+0x86/0x90 [ 2302.517685][T23245] ? proc_fail_nth_write+0x166/0x200 [ 2302.522936][T23245] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2302.528115][T23245] do_filp_open+0x1f7/0x430 [ 2302.532595][T23245] ? vfs_tmpfile+0x220/0x220 [ 2302.537149][T23245] ? should_fail+0x182/0x860 [ 2302.541760][T23245] ? _raw_spin_trylock_bh+0x190/0x190 [ 2302.547146][T23245] ? _raw_spin_unlock+0x5/0x20 [ 2302.551918][T23245] ? __alloc_fd+0x4e8/0x590 [ 2302.556420][T23245] do_sys_open+0x36f/0x7a0 [ 2302.560801][T23245] ? file_open_root+0x440/0x440 [ 2302.565614][T23245] ? ksys_write+0x237/0x2a0 [ 2302.570095][T23245] do_syscall_64+0xcb/0x150 [ 2302.574566][T23245] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2302.580421][T23245] RIP: 0033:0x417101 [ 2302.584283][T23245] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2302.603852][T23245] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2302.612247][T23245] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2302.620203][T23245] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2302.628146][T23245] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2302.636083][T23245] R10: 0000000000000064 R11: 0000000000000293 R12: 000000000000000f [ 2302.644025][T23245] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2302.709261][T31849] usb 1-1: USB disconnect, device number 31 [ 2302.739174][T31849] usblp0: removed [ 2302.817011][ T6420] usb 6-1: new high-speed USB device number 3 using dummy_hcd 04:06:15 executing program 0 (fault-call:7 fault-nth:16): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:06:15 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x4000, 0x0, 0xffffffff}}) 04:06:15 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x68, 0x0, 0xffffffff}}) [ 2303.169681][ T6420] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 2303.177791][ T6420] usb 6-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 2303.188206][ T6420] usb 6-1: config 0 has no interface number 0 [ 2303.194445][ T6420] usb 6-1: config 0 interface 11 has no altsetting 0 [ 2303.238844][T23332] print_req_error: 38 callbacks suppressed [ 2303.238851][T23332] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2303.258473][T23335] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2303.272745][T23336] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2303.284675][ T6420] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 2303.292911][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2303.303931][ T87] buffer_io_error: 14 callbacks suppressed [ 2303.303935][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2303.319325][ T6420] usb 6-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 2303.329781][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2303.341190][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2303.350684][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2303.361972][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2303.376766][ T6420] usb 6-1: config 0 has no interface number 0 [ 2303.382877][ T6420] usb 6-1: config 0 interface 11 has no altsetting 0 04:06:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0xdf80253) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x1, 0x0, 0x8100000, 0x3, 0x0, 0xfffffffffffffffe}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) r4 = open(&(0x7f0000000180)='./bus\x00', 0x100000161042, 0x10d) ftruncate(r4, 0x10099b8) sendfile(r3, r4, 0x0, 0x8000fffffffe) 04:06:16 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) 04:06:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffff04) 04:06:16 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x6c, 0x0, 0xffffffff}}) 04:06:16 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x4800, 0x0, 0xffffffff}}) 04:06:16 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x74, 0x0, 0xffffffff}}) [ 2303.483741][T31849] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2303.523195][ T6420] usb 6-1: unable to read config index 2 descriptor/all 04:06:16 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x4c00, 0x0, 0xffffffff}}) [ 2303.530230][ T6420] usb 6-1: can't read configurations, error -71 04:06:16 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x7a, 0x0, 0xffffffff}}) 04:06:16 executing program 5: write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) clone(0x32028900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x101000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0x4000000, 0x158, 0x0, 0x0, 0x340, 0x240, 0x240, 0x340, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0xb0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x50, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendto$packet(0xffffffffffffffff, &(0x7f0000000b80)="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", 0x1000, 0x4004004, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) ioctl$FICLONE(r0, 0x40049409, r1) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x638582, 0x0) [ 2303.607917][T23371] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2303.624194][T23374] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2303.642087][T23373] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2303.667798][T23391] xt_TCPMSS: Only works on TCP SYN packets [ 2303.685816][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2303.698441][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2303.711536][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2303.719911][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2303.742093][ T87] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 2303.749208][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2303.758646][ T87] Buffer I/O error on dev loop2p1, logical block 33008, async page read [ 2303.768249][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2303.787726][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read [ 2303.886893][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2303.898029][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2303.908805][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2303.919207][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2304.004875][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2304.014083][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2304.022968][T31849] usb 1-1: SerialNumber: syz [ 2304.044249][T23322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2304.051756][T23322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2304.064302][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2304.070221][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2304.274365][T23322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2304.285762][T23322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2304.508027][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2304.783063][T23322] FAULT_INJECTION: forcing a failure. [ 2304.783063][T23322] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.795722][T23322] CPU: 0 PID: 23322 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2304.807240][T23322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2304.817258][T23322] Call Trace: [ 2304.820535][T23322] dump_stack+0x1b0/0x21e [ 2304.824869][T23322] ? devkmsg_release+0x11c/0x11c [ 2304.829828][T23322] ? show_regs_print_info+0x12/0x12 [ 2304.835027][T23322] should_fail+0x6fb/0x860 [ 2304.839420][T23322] ? setup_fault_attr+0x2b0/0x2b0 [ 2304.844409][T23322] ? setup_fault_attr+0x2b0/0x2b0 [ 2304.849398][T23322] ? usb_alloc_urb+0x3d/0x140 [ 2304.854039][T23322] should_failslab+0x5/0x20 [ 2304.858564][T23322] __kmalloc+0x5f/0x2c0 [ 2304.862704][T23322] usb_alloc_urb+0x3d/0x140 [ 2304.867176][T23322] usb_control_msg+0x16e/0x480 [ 2304.871908][T23322] ? usb_anchor_empty+0x40/0x40 [ 2304.876739][T23322] ? hub_ext_port_status+0x46c/0x660 [ 2304.881988][T23322] usb_port_resume+0x657/0x1cd0 [ 2304.886814][T23322] ? _raw_spin_lock_irq+0xa2/0x180 [ 2304.891908][T23322] ? usb_port_suspend+0x10f0/0x10f0 [ 2304.897073][T23322] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2304.903020][T23322] ? rpm_resume+0xb38/0x19b0 [ 2304.907623][T23322] ? arch_stack_walk+0x78/0xe0 [ 2304.912358][T23322] generic_resume+0x49/0x90 [ 2304.916842][T23322] usb_resume_both+0x2fd/0x9d0 [ 2304.921569][T23322] ? _raw_spin_lock+0xa1/0x170 [ 2304.926308][T23322] __rpm_callback+0x15d/0x4d0 [ 2304.930967][T23322] ? autosuspend_check+0x560/0x560 [ 2304.936063][T23322] rpm_resume+0xf9a/0x19b0 [ 2304.940453][T23322] ? autosuspend_check+0x560/0x560 [ 2304.945540][T23322] ? __pm_runtime_resume+0x90/0x90 [ 2304.950617][T23322] ? _raw_spin_lock+0xa1/0x170 [ 2304.955344][T23322] ? _raw_spin_trylock_bh+0x190/0x190 [ 2304.960686][T23322] ? _raw_spin_lock+0xa1/0x170 [ 2304.965414][T23322] ? _raw_spin_trylock_bh+0x190/0x190 [ 2304.970750][T23322] ? klist_iter_init_node+0x234/0x300 [ 2304.976104][T23322] ? klist_dec_and_del+0x3c/0x380 [ 2304.981106][T23322] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2304.986701][T23322] rpm_resume+0x833/0x19b0 [ 2304.991083][T23322] ? __pm_runtime_resume+0x90/0x90 [ 2304.996198][T23322] ? _raw_spin_lock+0x170/0x170 [ 2305.001026][T23322] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2305.006626][T23322] ? usb_find_interface+0xc8/0x130 [ 2305.011700][T23322] ? usb_altnum_to_altsetting+0x160/0x160 [ 2305.017382][T23322] __pm_runtime_resume+0x6a/0x90 [ 2305.022282][T23322] usb_autopm_get_interface+0x1c/0x50 [ 2305.027619][T23322] usblp_open+0x158/0x410 [ 2305.031912][T23322] ? __module_put_and_exit+0x20/0x20 [ 2305.037173][T23322] ? usblp_ioctl+0x1810/0x1810 [ 2305.041915][T23322] usb_open+0x188/0x1f0 [ 2305.046081][T23322] chrdev_open+0x60a/0x670 [ 2305.050462][T23322] ? cd_forget+0x150/0x150 [ 2305.054846][T23322] ? security_file_open+0x1f8/0x2c0 [ 2305.060035][T23322] ? cd_forget+0x150/0x150 [ 2305.064417][T23322] do_dentry_open+0x8fa/0x1070 [ 2305.069159][T23322] ? finish_open+0xd0/0xd0 [ 2305.073569][T23322] ? vfs_open+0x2b/0x80 [ 2305.077713][T23322] ? memcpy+0x38/0x50 [ 2305.081659][T23322] path_openat+0x1681/0x42d0 [ 2305.086252][T23322] ? stack_trace_save+0x111/0x1e0 [ 2305.091271][T23322] ? stack_trace_snprint+0x150/0x150 [ 2305.096529][T23322] ? do_filp_open+0x430/0x430 [ 2305.101192][T23322] ? __kasan_kmalloc+0x117/0x1b0 [ 2305.106096][T23322] ? kmem_cache_alloc+0x1d5/0x250 [ 2305.111082][T23322] ? getname_flags+0xb8/0x610 [ 2305.115760][T23322] ? do_sys_open+0x32a/0x7a0 [ 2305.120310][T23322] ? do_syscall_64+0xcb/0x150 [ 2305.124951][T23322] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2305.131086][T23322] ? get_pid_task+0x86/0x90 [ 2305.135567][T23322] ? proc_fail_nth_write+0x166/0x200 [ 2305.140811][T23322] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2305.145973][T23322] do_filp_open+0x1f7/0x430 [ 2305.150472][T23322] ? vfs_tmpfile+0x220/0x220 [ 2305.155027][T23322] ? should_fail+0x182/0x860 [ 2305.159703][T23322] ? _raw_spin_trylock_bh+0x190/0x190 [ 2305.165040][T23322] ? _raw_spin_unlock+0x5/0x20 [ 2305.169767][T23322] ? __alloc_fd+0x4e8/0x590 [ 2305.174249][T23322] do_sys_open+0x36f/0x7a0 [ 2305.178629][T23322] ? file_open_root+0x440/0x440 [ 2305.183443][T23322] ? ksys_write+0x237/0x2a0 [ 2305.187910][T23322] do_syscall_64+0xcb/0x150 [ 2305.192376][T23322] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2305.198230][T23322] RIP: 0033:0x417101 [ 2305.202105][T23322] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2305.221691][T23322] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2305.230064][T23322] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2305.238017][T23322] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2305.245966][T23322] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2305.253904][T23322] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000010 [ 2305.261849][T23322] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2305.325790][T31849] usb 1-1: USB disconnect, device number 32 [ 2305.355875][T31849] usblp0: removed 04:06:18 executing program 0 (fault-call:7 fault-nth:17): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:06:18 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x300, 0x0, 0xffffffff}}) 04:06:18 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x6800, 0x0, 0xffffffff}}) 04:06:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) r2 = fsmount(r0, 0x0, 0x2) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) 04:06:18 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@ldst={0x5, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="20002dbd7000fddbdf25010000000800390000000000516d8b387a4e022c1089c6c25c4d6378b702b7f47cdf4580503f9271d2ee84e76c0e7e87a2471ed5a06391c9e8487edec51db5ceb3b03aa88707463a32adbcf36912b43de7fccf21b692669d9e8c90f7eda3f29370695c5b04d106bae6acda4854b2471e2e7bc61be2e3a34f3b16d49cf989ebbb0316bc522c92"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x7, 0x3) 04:06:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffff04) 04:06:18 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x531, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0xf415}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xdf8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010080}, 0x4) syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000000c0)="f6167a714a14ac3f14ba1292defae481fa962101efc9f89f04f1d4e28c82dc6ccecee663e43c48a935c15c699f5b07cb184ed796e594fd28159fe812f6f1974ea46f00399b887e479a260302b5bc4bc32ebb06bab61919d632950a9aab61f7c17747ccaee5d4b6dcf0e31ceefca3254f75b61a452b3f262711"}, 0x20) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0xc1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_read_part_table(0x0, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000240)="03f605020314aff4033200120000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}, {&(0x7f0000000000)="fdb465f3175338dfaa0434bf73242286e6a3ad778e991a4208c4e6591c2189bd6f4d457ab93b65aaf33355726d6f269f731f93e58ca11585d4b928d11abfa90b37764408ef42189dd242839a982883be9e808ccb9f5ff6173729dbd5659087676bd1fc7603527b3ac5c01eac1a985361c56d7c93ce29de97d3a362dbb46992fc7153a3a42da99f89dde6cf9d65f802cb147357bdf9a45622ac8ec1fab3c1576a7afc116b40b1695c530567415bd5d16b572244f2fbbf5ac4bf35e16afb67", 0xbe, 0x101}, {&(0x7f0000000500)="a4fcdd14133f9464994e2bc79a7fb47aaba26310f0", 0x15, 0x1}]) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000640)={{}, "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"}) 04:06:18 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x6c00, 0x0, 0xffffffff}}) 04:06:18 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x500, 0x0, 0xffffffff}}) 04:06:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000240)={0x0, 0x10, 0x8, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$perf(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2000010, 0x100010, r2, 0x86) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) 04:06:18 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x600, 0x0, 0xffffffff}}) 04:06:18 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x7400, 0x0, 0xffffffff}}) [ 2306.116719][T31849] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2306.354263][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2306.473313][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2306.484506][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2306.495317][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2306.505636][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2306.592212][T31849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2306.601381][T31849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2306.610123][T31849] usb 1-1: SerialNumber: syz [ 2306.633938][T23421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2306.640733][T23421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2306.652060][T31849] hub 1-1:1.0: bad descriptor, ignoring hub [ 2306.658134][T31849] hub: probe of 1-1:1.0 failed with error -5 [ 2306.856744][T23421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2306.864016][T23421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2307.098763][T31849] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2307.365609][T23421] FAULT_INJECTION: forcing a failure. [ 2307.365609][T23421] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.378420][T23421] CPU: 0 PID: 23421 Comm: syz-executor.0 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2307.389937][T23421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.399985][T23421] Call Trace: [ 2307.403255][T23421] dump_stack+0x1b0/0x21e [ 2307.407551][T23421] ? devkmsg_release+0x11c/0x11c [ 2307.412451][T23421] ? show_regs_print_info+0x12/0x12 [ 2307.417617][T23421] ? mon_bin_event+0xc2e/0x24e0 [ 2307.422449][T23421] should_fail+0x6fb/0x860 [ 2307.426842][T23421] ? setup_fault_attr+0x2b0/0x2b0 [ 2307.431857][T23421] ? _raw_spin_lock+0xa1/0x170 [ 2307.436600][T23421] ? _raw_spin_trylock_bh+0x190/0x190 [ 2307.441935][T23421] ? kzalloc+0x1b/0x30 [ 2307.445989][T23421] should_failslab+0x5/0x20 [ 2307.450470][T23421] __kmalloc+0x5f/0x2c0 [ 2307.454602][T23421] kzalloc+0x1b/0x30 [ 2307.458463][T23421] usb_hcd_submit_urb+0x8b9/0x1b20 [ 2307.463538][T23421] ? usb_resume_both+0x2fd/0x9d0 [ 2307.468440][T23421] ? __rpm_callback+0x15d/0x4d0 [ 2307.473387][T23421] ? rpm_resume+0xf9a/0x19b0 [ 2307.477954][T23421] ? __pm_runtime_resume+0x6a/0x90 [ 2307.483029][T23421] ? usb_open+0x188/0x1f0 [ 2307.487321][T23421] ? do_filp_open+0x1f7/0x430 [ 2307.492008][T23421] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2307.498039][T23421] ? usb_hcd_map_urb_for_dma+0x12e0/0x12e0 [ 2307.503825][T23421] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2307.509859][T23421] ? finish_task_switch+0x2be/0x4c0 [ 2307.515052][T23421] ? usb_submit_urb+0xc5b/0x13e0 [ 2307.519951][T23421] usb_start_wait_urb+0x11b/0x370 [ 2307.524940][T23421] ? usb_api_blocking_completion+0xa0/0xa0 [ 2307.530711][T23421] ? __kmalloc+0xf7/0x2c0 [ 2307.535009][T23421] ? usb_alloc_urb+0x3d/0x140 [ 2307.539662][T23421] usb_control_msg+0x289/0x480 [ 2307.544390][T23421] ? usb_anchor_empty+0x40/0x40 [ 2307.549214][T23421] ? hub_ext_port_status+0x46c/0x660 [ 2307.554466][T23421] usb_port_resume+0x657/0x1cd0 [ 2307.559305][T23421] ? _raw_spin_lock_irq+0xa2/0x180 [ 2307.564379][T23421] ? usb_port_suspend+0x10f0/0x10f0 [ 2307.569541][T23421] ? trace_rpm_return_int_rcuidle+0x23/0x1d0 [ 2307.575515][T23421] ? rpm_resume+0xb38/0x19b0 [ 2307.580081][T23421] ? arch_stack_walk+0x78/0xe0 [ 2307.584808][T23421] generic_resume+0x49/0x90 [ 2307.589308][T23421] usb_resume_both+0x2fd/0x9d0 [ 2307.594035][T23421] ? _raw_spin_lock+0xa1/0x170 [ 2307.598764][T23421] __rpm_callback+0x15d/0x4d0 [ 2307.603404][T23421] ? autosuspend_check+0x560/0x560 [ 2307.608483][T23421] rpm_resume+0xf9a/0x19b0 [ 2307.612864][T23421] ? autosuspend_check+0x560/0x560 [ 2307.617940][T23421] ? __pm_runtime_resume+0x90/0x90 [ 2307.623013][T23421] ? _raw_spin_lock+0xa1/0x170 [ 2307.627849][T23421] ? _raw_spin_trylock_bh+0x190/0x190 [ 2307.633230][T23421] ? _raw_spin_lock+0xa1/0x170 [ 2307.637989][T23421] ? _raw_spin_trylock_bh+0x190/0x190 [ 2307.643325][T23421] ? klist_iter_init_node+0x234/0x300 [ 2307.648694][T23421] ? klist_dec_and_del+0x3c/0x380 [ 2307.653683][T23421] ? trace_rpm_resume_rcuidle+0x1f/0x1d0 [ 2307.659286][T23421] rpm_resume+0x833/0x19b0 [ 2307.663704][T23421] ? __pm_runtime_resume+0x90/0x90 [ 2307.668813][T23421] ? _raw_spin_lock+0x170/0x170 [ 2307.673631][T23421] ? kobject_get_unless_zero+0x1c8/0x2a0 [ 2307.679246][T23421] ? usb_find_interface+0xc8/0x130 [ 2307.684321][T23421] ? usb_altnum_to_altsetting+0x160/0x160 [ 2307.690006][T23421] __pm_runtime_resume+0x6a/0x90 [ 2307.694910][T23421] usb_autopm_get_interface+0x1c/0x50 [ 2307.700246][T23421] usblp_open+0x158/0x410 [ 2307.704538][T23421] ? __module_put_and_exit+0x20/0x20 [ 2307.709814][T23421] ? usblp_ioctl+0x1810/0x1810 [ 2307.714554][T23421] usb_open+0x188/0x1f0 [ 2307.718690][T23421] chrdev_open+0x60a/0x670 [ 2307.723070][T23421] ? cd_forget+0x150/0x150 [ 2307.727451][T23421] ? security_file_open+0x1f8/0x2c0 [ 2307.732608][T23421] ? cd_forget+0x150/0x150 [ 2307.736987][T23421] do_dentry_open+0x8fa/0x1070 [ 2307.741730][T23421] ? finish_open+0xd0/0xd0 [ 2307.746120][T23421] ? vfs_open+0x2b/0x80 [ 2307.750281][T23421] ? memcpy+0x38/0x50 [ 2307.754226][T23421] path_openat+0x1681/0x42d0 [ 2307.758811][T23421] ? stack_trace_save+0x111/0x1e0 [ 2307.763818][T23421] ? stack_trace_snprint+0x150/0x150 [ 2307.769102][T23421] ? do_filp_open+0x430/0x430 [ 2307.773740][T23421] ? __kasan_kmalloc+0x117/0x1b0 [ 2307.778641][T23421] ? kmem_cache_alloc+0x1d5/0x250 [ 2307.783624][T23421] ? getname_flags+0xb8/0x610 [ 2307.788274][T23421] ? do_sys_open+0x32a/0x7a0 [ 2307.792838][T23421] ? do_syscall_64+0xcb/0x150 [ 2307.797487][T23421] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2307.803542][T23421] ? get_pid_task+0x86/0x90 [ 2307.808033][T23421] ? proc_fail_nth_write+0x166/0x200 [ 2307.813294][T23421] ? proc_fail_nth_read+0x1c0/0x1c0 [ 2307.818453][T23421] do_filp_open+0x1f7/0x430 [ 2307.822919][T23421] ? vfs_tmpfile+0x220/0x220 [ 2307.827470][T23421] ? should_fail+0x182/0x860 [ 2307.832021][T23421] ? _raw_spin_trylock_bh+0x190/0x190 [ 2307.837367][T23421] ? _raw_spin_unlock+0x5/0x20 [ 2307.842108][T23421] ? __alloc_fd+0x4e8/0x590 [ 2307.846575][T23421] do_sys_open+0x36f/0x7a0 [ 2307.850955][T23421] ? file_open_root+0x440/0x440 [ 2307.855769][T23421] ? ksys_write+0x237/0x2a0 [ 2307.860248][T23421] do_syscall_64+0xcb/0x150 [ 2307.864714][T23421] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2307.870593][T23421] RIP: 0033:0x417101 [ 2307.874452][T23421] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2307.894018][T23421] RSP: 002b:00007f2a975d1820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2307.902400][T23421] RAX: ffffffffffffffda RBX: 000000000118cf40 RCX: 0000000000417101 [ 2307.910332][T23421] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f2a975d1850 [ 2307.918285][T23421] RBP: 00007f2a975d1ca0 R08: 0000000000000000 R09: 000000000000000f [ 2307.926219][T23421] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000011 [ 2307.934151][T23421] R13: 00007ffcd86b281f R14: 00007f2a975d29c0 R15: 000000000118cf4c [ 2308.001537][T31849] usb 1-1: USB disconnect, device number 33 [ 2308.031827][T31849] usblp0: removed 04:06:21 executing program 0 (fault-call:7 fault-nth:18): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100000009040000120701030009050102000de000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:06:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1}}) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x14, r6, 0x405, 0x0, 0x0, {0x7e}}, 0x14}, 0x7, 0xffffff9e}, 0x0) 04:06:21 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x7a00, 0x0, 0xffffffff}}) 04:06:21 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x700, 0x0, 0xffffffff}}) 04:06:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000040)='memory.events\x00', 0x0) r1 = epoll_create1(0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000380)={0x67, @broadcast, 0x4e24, 0x2, 'nq\x00', 0x1, 0xfffffffb, 0x77}, 0x2c) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d0, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, 0x25b, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000180)=""/101, &(0x7f0000000080)=0x65) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000002c0)={0x1, 0xac74}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xdb03) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) 04:06:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(0x0, 0x0, 0xffc00007, 0x0, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000002c0)={0x57}) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff04) 04:06:21 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x900, 0x0, 0xffffffff}}) 04:06:21 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x1000000, 0x0, 0xffffffff}}) 04:06:21 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xa00, 0x0, 0xffffffff}}) 04:06:21 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x2000000, 0x0, 0xffffffff}}) [ 2308.559056][T23503] print_req_error: 26 callbacks suppressed [ 2308.559067][T23503] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2308.580736][T23506] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2308.633133][T23505] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2308.647911][T23525] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2308.657500][T23525] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2308.667307][T23525] list_add corruption. next->prev should be prev (ffffffff84cb7210), but was 0000000000000000. (next=ffff88814674f980). [ 2308.679991][T23525] ------------[ cut here ]------------ [ 2308.680853][ T87] blk_update_request: I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2308.685434][T23525] kernel BUG at lib/list_debug.c:25! [ 2308.702161][T23525] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2308.708374][T23525] CPU: 1 PID: 23525 Comm: syz-executor.5 Tainted: G W 5.4.63-syzkaller-01128-g0ef1db7b69dd #0 [ 2308.720054][T23525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2308.730136][T23525] RIP: 0010:__list_add_valid+0xa0/0xc0 [ 2308.735691][T23525] Code: cf 06 99 84 4c 89 fe 4c 89 e2 4c 89 f1 31 c0 e8 82 d4 30 ff 0f 0b 48 c7 c7 1a 06 99 84 4c 89 e6 4c 89 f1 31 c0 e8 6c d4 30 ff <0f> 0b 48 c7 c7 7d 06 99 84 4c 89 f6 4c 89 e1 31 c0 e8 56 d4 30 ff [ 2308.755275][T23525] RSP: 0018:ffff8881d39bf2c8 EFLAGS: 00010246 [ 2308.761313][T23525] RAX: 0000000000000075 RBX: ffff88814674f988 RCX: fea3acca3ec5d200 [ 2308.769273][T23525] RDX: ffffc90006392000 RSI: 0000000000006b8b RDI: 0000000000006b8c [ 2308.777213][T23525] RBP: ffff88814674f980 R08: ffffffff812b99ce R09: ffffed103b705e00 [ 2308.785155][T23525] R10: ffffed103b705e00 R11: 0000000000000000 R12: ffffffff84cb7210 [ 2308.787080][T31849] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2308.793109][T23525] R13: dffffc0000000000 R14: ffff88814674f980 R15: ffff8881d13b0c80 [ 2308.793117][T23525] FS: 00007f0c06c53700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2308.793124][T23525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2308.793135][T23525] CR2: 0000000020366000 CR3: 0000000168756002 CR4: 00000000001606e0 [ 2308.832123][T23525] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2308.840071][T23525] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2308.848008][T23525] Call Trace: [ 2308.851275][T23525] firmware_fallback_sysfs+0x48d/0xb30 [ 2308.856709][T23525] _request_firmware+0xe5f/0x1340 [ 2308.861711][T23525] ? request_firmware+0x50/0x50 [ 2308.866529][T23525] ? preempt_schedule_irq+0xc7/0x110 [ 2308.871781][T23525] ? preempt_schedule_notrace+0x110/0x110 [ 2308.877507][T23525] ? should_fail+0x18e/0x860 [ 2308.882077][T23525] ? __nla_validate+0x50/0x50 [ 2308.886727][T23525] request_firmware+0x33/0x50 [ 2308.891391][T23525] reg_reload_regdb+0x81/0x200 [ 2308.896124][T23525] ? reg_query_regdb_wmm+0x520/0x520 [ 2308.901396][T23525] ? nl80211_pre_doit+0x15b/0x5a0 [ 2308.906397][T23525] genl_rcv_msg+0xe76/0x1330 [ 2308.910957][T23525] ? genl_rcv+0x40/0x40 [ 2308.915084][T23525] ? switch_mm_irqs_off+0x25d/0x870 [ 2308.920274][T23525] ? rhashtable_jhash2+0x1cf/0x2f0 [ 2308.925349][T23525] ? jhash+0x740/0x740 [ 2308.929396][T23525] ? rht_key_hashfn+0x157/0x240 [ 2308.934228][T23525] ? deferred_put_nlk_sk+0x210/0x210 [ 2308.939481][T23525] ? jhash+0x740/0x740 [ 2308.943520][T23525] ? netlink_hash+0xd0/0xd0 [ 2308.947995][T23525] ? selinux_nlmsg_lookup+0x26/0x570 [ 2308.953303][T23525] netlink_rcv_skb+0x1f0/0x460 [ 2308.958035][T23525] ? genl_rcv+0x40/0x40 [ 2308.962172][T23525] ? netlink_ack+0xa90/0xa90 [ 2308.966743][T23525] ? __down_read+0xf1/0x210 [ 2308.971213][T23525] ? __init_rwsem+0x120/0x120 [ 2308.975870][T23525] ? __rcu_read_lock+0x50/0x50 [ 2308.980601][T23525] ? selinux_vm_enough_memory+0x160/0x160 [ 2308.986284][T23525] ? setup_fault_attr+0x2b0/0x2b0 [ 2308.991273][T23525] genl_rcv+0x24/0x40 [ 2308.995239][T23525] netlink_unicast+0x87c/0xa20 [ 2308.999976][T23525] ? netlink_detachskb+0x60/0x60 [ 2309.004902][T23525] ? __virt_addr_valid+0x1fd/0x290 [ 2309.009982][T23525] netlink_sendmsg+0x9a7/0xd40 [ 2309.014714][T23525] ? netlink_getsockopt+0x8e0/0x8e0 [ 2309.019930][T23525] ? security_socket_sendmsg+0xad/0xc0 [ 2309.025354][T23525] ? netlink_getsockopt+0x8e0/0x8e0 [ 2309.030558][T23525] ____sys_sendmsg+0x56f/0x860 [ 2309.035290][T23525] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 2309.035900][T31849] usb 1-1: Using ep0 maxpacket: 8 [ 2309.040479][T23525] __sys_sendmsg+0x26a/0x350 [ 2309.040488][T23525] ? ____sys_sendmsg+0x860/0x860 [ 2309.040521][T23525] ? __perf_event_task_sched_in+0x4cd/0x550 [ 2309.060900][T23525] ? _raw_spin_unlock_irq+0xf/0x20 [ 2309.065988][T23525] ? get_timespec64+0x1c0/0x1c0 [ 2309.070814][T23525] ? __se_sys_futex+0x31d/0x440 [ 2309.075719][T23525] do_syscall_64+0xcb/0x150 [ 2309.080204][T23525] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2309.086167][T23525] RIP: 0033:0x45d5b9 [ 2309.090087][T23525] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2309.109664][T23525] RSP: 002b:00007f0c06c52c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2309.118049][T23525] RAX: ffffffffffffffda RBX: 000000000002ac40 RCX: 000000000045d5b9 [ 2309.126019][T23525] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000007 [ 2309.133958][T23525] RBP: 000000000118d160 R08: 0000000000000000 R09: 0000000000000000 [ 2309.141904][T23525] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118d12c [ 2309.149880][T23525] R13: 00007ffe1aa0f5bf R14: 00007f0c06c539c0 R15: 000000000118d12c [ 2309.155402][T31849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1280, setting to 1024 [ 2309.157821][T23525] Modules linked in: [ 2309.172786][T23525] ---[ end trace e1dd09fb3f05c242 ]--- [ 2309.177424][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2309.178394][T23525] RIP: 0010:__list_add_valid+0xa0/0xc0 [ 2309.189322][T31849] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 2309.203648][T23525] Code: cf 06 99 84 4c 89 fe 4c 89 e2 4c 89 f1 31 c0 e8 82 d4 30 ff 0f 0b 48 c7 c7 1a 06 99 84 4c 89 e6 4c 89 f1 31 c0 e8 6c d4 30 ff <0f> 0b 48 c7 c7 7d 06 99 84 4c 89 f6 4c 89 e1 31 c0 e8 56 d4 30 ff [ 2309.204913][T31849] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2309.223497][T23525] RSP: 0018:ffff8881d39bf2c8 EFLAGS: 00010246 [ 2309.242576][T23525] RAX: 0000000000000075 RBX: ffff88814674f988 RCX: fea3acca3ec5d200 [ 2309.250624][T23525] RDX: ffffc90006392000 RSI: 0000000000006b8b RDI: 0000000000006b8c [ 2309.258761][T23525] RBP: ffff88814674f980 R08: ffffffff812b99ce R09: ffffed103b705e00 [ 2309.266623][ T87] buffer_io_error: 8 callbacks suppressed [ 2309.266631][ T87] Buffer I/O error on dev loop2p4, logical block 33008, async page read 04:06:22 executing program 2: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0xb00, 0x0, 0xffffffff}}) 04:06:22 executing program 1: clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x3000000, 0x0, 0xffffffff}}) [ 2309.266860][T23525] R10: ffffed103b705e00 R11: 0000000000000000 R12: ffffffff84cb7210 [ 2309.288853][T23525] R13: dffffc0000000000 R14: ffff88814674f980 R15: ffff8881d13b0c80 [ 2309.297023][T23525] FS: 00007f0c06c53700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2309.306073][T23525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2309.312649][T23525] CR2: 00000000206c3000 CR3: 0000000168756003 CR4: 00000000001606e0 [ 2309.320890][T23525] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2309.328965][T23525] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2309.336992][T23525] Kernel panic - not syncing: Fatal exception [ 2309.343100][ T87] blk_update_request: I/O error, dev loop2, sector 233 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2309.343576][T23525] Kernel Offset: disabled [ 2309.358971][T23525] Rebooting in 86400 seconds..